starlingx
/
tools
Code Issues Proposed changes

Uprev elfutils to version 0.176-2.el7 

This solves:
elfutils: Double-free due to double decompression of sections in
crafted ELF causes crash (CVE-2018-16402)

along with quite a few other issues.

See the announcement link:

https://lists.centos.org/pipermail/centos-cr-announce/2019-August/005856.html

for more details.

Change-Id: Ia328b6043c1815a023ab45ea6f8142dcef91864b
Closes-Bug: 1849201
Signed-off-by: Jim Somerville <Jim.Somerville@windriver.com>
This commit is contained in:
Jim Somerville 2019-11-21 18:44:38 -05:00
parent 647676c202
commit 855ef14c83
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
centos-mirror-tools/rpms_centos3rdparties.lst
View File

@ -21,12 +21,12 @@ devtoolset-7-libstdc++-devel-7.3.1-5.10.el7.x86_64.rpm
devtoolset-7-runtime-7.1-4.el7.x86_64.rpm
docker-ce-18.09.6-3.el7.x86_64.rpm
docker-ce-cli-18.09.6-3.el7.x86_64.rpm
elfutils-0.172-2.el7.x86_64.rpm
elfutils-default-yama-scope-0.172-2.el7.noarch.rpm
elfutils-devel-0.172-2.el7.x86_64.rpm
elfutils-libelf-0.172-2.el7.x86_64.rpm
elfutils-libelf-devel-0.172-2.el7.x86_64.rpm
elfutils-libs-0.172-2.el7.x86_64.rpm
elfutils-0.176-2.el7.x86_64.rpm
elfutils-default-yama-scope-0.176-2.el7.noarch.rpm
elfutils-devel-0.176-2.el7.x86_64.rpm
elfutils-libelf-0.176-2.el7.x86_64.rpm
elfutils-libelf-devel-0.176-2.el7.x86_64.rpm
elfutils-libs-0.176-2.el7.x86_64.rpm
glib2-2.56.1-2.el7.x86_64.rpm
glib2-devel-2.56.1-2.el7.x86_64.rpm
glib2-doc-2.56.1-2.el7.noarch.rpm