Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.1.4.2019.2916.1
Category:SuSE Local Security Checks
Title:SUSE: Security Advisory (SUSE-SU-2019:2916-1)
Summary:The remote host is missing an update for the 'gdb' package(s) announced via the SUSE-SU-2019:2916-1 advisory.
Description:Summary:
The remote host is missing an update for the 'gdb' package(s) announced via the SUSE-SU-2019:2916-1 advisory.

Vulnerability Insight:
This update for gdb fixes the following issues:

Update to gdb 8.3.1: (jsc#ECO-368)

Security issues fixed:
CVE-2019-1010180: Fixed a potential buffer overflow when loading ELF
sections larger than the file. (bsc#1142772)

Upgrade libipt from v2.0 to v2.0.1.
Enable librpm for version > librpm.so.3 [bsc#1145692]:
* Allow any librpm.so.x
* Add %build test to check for 'zypper install ' message Copy gdbinit from fedora master @ 25caf28. Add gdbinit.without-python,
and use it for --without=python.

Rebase to 8.3 release (as in fedora 30 @ 1e222a3).
DWARF index cache: GDB can now automatically save indices of DWARF
symbols on disk to speed up further loading of the same binaries.

Ada task switching is now supported on aarch64-elf targets when
debugging a program using the Ravenscar Profile.

Terminal styling is now available for the CLI and the TUI.

Removed support for old demangling styles arm, edg, gnu, hp and lucid.

Support for new native configuration RISC-V GNU/Linux (riscv*-*-linux*).
Implemented access to more POWER8 registers. [fate#326120, fate#325178]

Also handle most new s390 arch13 instructions. [fate#327369,
jsc#ECO-368]

Affected Software/OS:
'gdb' package(s) on HPE Helion Openstack 8, SUSE Enterprise Storage 5, SUSE Linux Enterprise Desktop 12-SP4, SUSE Linux Enterprise Server 12-SP3, SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server for SAP 12-SP3, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud Crowbar 8.

Solution:
Please install the updated package(s).

CVSS Score:
6.8

CVSS Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2019-1010180
CopyrightCopyright (C) 2021 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2024 E-Soft Inc. All rights reserved.