{"id":"CLSA-2023-1687795384","summary":"Fix CVE(s): CVE-2023-25584, CVE-2017-12450, CVE-2023-25588, CVE-2023-25585","details":"\n   * SECURITY UPDATE: fixing the existing CVE-2017-12450 patches that were\n     incorrectly ported from upstream\n     - debian/patches/CVE-2017-12450-1.patch: fix address violation errors\n     - debian/patches/CVE-2017-12450-2.patch: import patches from mainline\n       to fix minor binutils bugs\n     - CVE-2017-12450\n   * SECURITY UPDATE: heap-based buffer overflow\n     - debian/patches/CVE-2023-25584.patch: lack of bounds checking in\n       vms-alpha.c\n     - CVE-2023-25584\n   * SECURITY UPDATE: segmentation fault due to uninitialized\n     - debian/patches/CVE-2023-25585.patch: field file_table of struct\n       module is uninitialized\n     - CVE-2023-25585\n   * SECURITY UPDATE: segmentation fault due to uninitialized\n     - debian/patches/CVE-2023-25588.patch: field `the_bfd` of `asymbol`\n       is uninitialised\n     - CVE-2023-25588\n   * Fix memory leaks and buffer overflow in vms-alpha.c\n     - debian/patches/vms-alpha-buffer-overflow-fix.patch: fix heap-based buffer\n       overflow in build_module_list in vms-alpha.c\n     - debian/patches/vms-alpha-memory-leaks-fix.patch: fix memory leaks and\n       buffer overflow in vms-alpha.c","modified":"2026-06-04T10:04:21.200144612Z","published":"2023-06-26T16:03:09Z","upstream":["CVE-2017-12450","CVE-2023-25584","CVE-2023-25585","CVE-2023-25588"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1687795384"}],"affected":[{"package":{"name":"binutils","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/binutils?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1687795384.json"}},{"package":{"name":"binutils-aarch64-linux-gnu","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/binutils-aarch64-linux-gnu?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1687795384.json"}},{"package":{"name":"binutils-alpha-linux-gnu","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/binutils-alpha-linux-gnu?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1687795384.json"}},{"package":{"name":"binutils-arm-linux-gnueabi","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/binutils-arm-linux-gnueabi?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1687795384.json"}},{"package":{"name":"binutils-arm-linux-gnueabihf","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/binutils-arm-linux-gnueabihf?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1687795384.json"}},{"package":{"name":"binutils-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/binutils-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1687795384.json"}},{"package":{"name":"binutils-doc","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/binutils-doc?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1687795384.json"}},{"package":{"name":"binutils-hppa-linux-gnu","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/binutils-hppa-linux-gnu?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1687795384.json"}},{"package":{"name":"binutils-hppa64-linux-gnu","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/binutils-hppa64-linux-gnu?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1687795384.json"}},{"package":{"name":"binutils-m68k-linux-gnu","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/binutils-m68k-linux-gnu?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1687795384.json"}},{"package":{"name":"binutils-mips-linux-gnu","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/binutils-mips-linux-gnu?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1687795384.json"}},{"package":{"name":"binutils-mips64-linux-gnuabi64","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/binutils-mips64-linux-gnuabi64?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1687795384.json"}},{"package":{"name":"binutils-mips64el-linux-gnuabi64","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/binutils-mips64el-linux-gnuabi64?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1687795384.json"}},{"package":{"name":"binutils-mipsel-linux-gnu","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/binutils-mipsel-linux-gnu?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1687795384.json"}},{"package":{"name":"binutils-multiarch","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/binutils-multiarch?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1687795384.json"}},{"package":{"name":"binutils-multiarch-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/binutils-multiarch-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1687795384.json"}},{"package":{"name":"binutils-powerpc-linux-gnu","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/binutils-powerpc-linux-gnu?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1687795384.json"}},{"package":{"name":"binutils-powerpc-linux-gnuspe","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/binutils-powerpc-linux-gnuspe?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1687795384.json"}},{"package":{"name":"binutils-powerpc64-linux-gnu","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/binutils-powerpc64-linux-gnu?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1687795384.json"}},{"package":{"name":"binutils-powerpc64le-linux-gnu","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/binutils-powerpc64le-linux-gnu?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1687795384.json"}},{"package":{"name":"binutils-s390x-linux-gnu","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/binutils-s390x-linux-gnu?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1687795384.json"}},{"package":{"name":"binutils-sh4-linux-gnu","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/binutils-sh4-linux-gnu?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1687795384.json"}},{"package":{"name":"binutils-source","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/binutils-source?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1687795384.json"}},{"package":{"name":"binutils-sparc64-linux-gnu","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/binutils-sparc64-linux-gnu?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2023-1687795384.json"}}],"schema_version":"1.7.5"}