RHSA-2019:2197: Low: elfutils security, bug fix, and enhancement update

The elfutils packages contain a number of utility programs and libraries related to the creation and maintenance of executable code.The following packages have been upgraded to a later upstream version: elfutils (0.176). (BZ#1676504)Security Fix(es): elfutils: Heap-based buffer over-read in libdw/dwarfgetaranges.c:dwarfgetaranges() via crafted file (CVE-2018-16062) elfutils: Double-free due to double decompression of sections in crafted ELF causes crash (CVE-2018-16402) elfutils: Heap-based buffer over-read in libdw/dwarfgetabbrev.c and libwd/dwarfhasattr.c causes crash (CVE-2018-16403) elfutils: invalid memory address dereference was discovered in dwflsegmentreportmodule.c in libdwfl (CVE-2018-18310) elfutils: eu-size cannot handle recursive ar files (CVE-2018-18520) elfutils: Divide-by-zero in arlibaddsymbols function in arlib.c (CVE-2018-18521) elfutils: heap-based buffer over-read in readsrclines in dwarfgetsrclines.c in libdw (CVE-2019-7149) elfutils: segmentation fault in elf64xlatetom in libelf/elf32xlatetom.c (CVE-2019-7150) elfutils: Out of bound write in elfcvtnote in libelf/notexlate.h (CVE-2019-7664) elfutils: heap-based buffer over-read in function elf32xlatetom in elf32xlatetom.c (CVE-2019-7665) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Additional Changes:For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section.