Bug 902677 (CVE-2014-8484) - VUL-0: CVE-2014-8484: binutils: invalid read flaw in libbfd
Summary: VUL-0: CVE-2014-8484: binutils: invalid read flaw in libbfd
Status: RESOLVED FIXED
Alias: CVE-2014-8484
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Normal
Target Milestone: ---
Deadline: 2015-12-30
Assignee: Michael Matz
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/110179/
Whiteboard: maint:released:sle11-sp3:60333
Keywords:
Depends on:
Blocks:
 
Reported: 2014-10-27 09:26 UTC by Sebastian Krahmer
Modified: 2016-02-05 03:37 UTC (History)
4 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Sebastian Krahmer 2014-10-27 09:26:14 UTC 
rh#1156272



References:
https://bugzilla.redhat.com/show_bug.cgi?id=1156272
Comment 1 Swamp Workflow Management 2014-10-27 23:00:53 UTC 
bugbot adjusting priority
Comment 3 Swamp Workflow Management 2015-01-27 15:05:16 UTC 
SUSE-SU-2015:0152-1: An update that fixes 8 vulnerabilities is now available.

Category: security (moderate)
Bug References: 902676,902677,903655,905735,905736
CVE References: CVE-2014-8484,CVE-2014-8485,CVE-2014-8501,CVE-2014-8502,CVE-2014-8503,CVE-2014-8504,CVE-2014-8737,CVE-2014-8738
Sources used:
SUSE Linux Enterprise Software Development Kit 12 (src):    binutils-2.24-7.1, cross-ppc-binutils-2.24-7.1, cross-spu-binutils-2.24-7.1
SUSE Linux Enterprise Server 12 (src):    binutils-2.24-7.1
SUSE Linux Enterprise Desktop 12 (src):    binutils-2.24-7.1
Comment 4 Swamp Workflow Management 2015-01-29 02:06:56 UTC 
SUSE-SU-2015:0168-1: An update that fixes 8 vulnerabilities is now available.

Category: security (moderate)
Bug References: 902676,902677,903655,905735,905736
CVE References: CVE-2014-8484,CVE-2014-8485,CVE-2014-8501,CVE-2014-8502,CVE-2014-8503,CVE-2014-8504,CVE-2014-8737,CVE-2014-8738
Sources used:
SUSE Linux Enterprise Software Development Kit 11 SP3 (src):    binutils-2.23.1-0.23.15, cross-ppc-binutils-2.23.1-0.23.2, cross-spu-binutils-2.23.1-0.23.2
SUSE Linux Enterprise Server 11 SP3 for VMware (src):    binutils-2.23.1-0.23.15
SUSE Linux Enterprise Server 11 SP3 (src):    binutils-2.23.1-0.23.15
SUSE Linux Enterprise Desktop 11 SP3 (src):    binutils-2.23.1-0.23.15
Comment 5 Marcus Meissner 2015-03-05 08:05:47 UTC 
released
Comment 6 Swamp Workflow Management 2015-12-16 16:39:22 UTC 
An update workflow for this issue was started.
This issue was rated as moderate.
Please submit fixed packages until 2015-12-30.
When done, reassign the bug to security-team@suse.de.
https://swamp.suse.de/webswamp/wf/62377
Comment 7 Tristan Ye 2016-02-05 03:37:55 UTC 
Guys, was SLE11 SP1 also affected by this issue?