UbuntuUpdates.org

Package "lld-14"

Name: lld-14

Description:

LLVM-based linker
Latest version: 1:14.0.0-1ubuntu1.1
Release: jammy (22.04)
Level: security
Repository: universe
Head package: llvm-toolchain-14
Homepage: https://www.llvm.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "lld-14"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "lld-14" in Jammy

Repository Area Version
base universe 1:14.0.0-1ubuntu1
updates universe 1:14.0.0-1ubuntu1.1

Changelog

Version: 1:14.0.0-1ubuntu1.1 2023-07-27 10:07:08 UTC

  llvm-toolchain-14 (1:14.0.0-1ubuntu1.1) jammy-security; urgency=medium

  * SECURITY UPDATE: canonicalize pass crashed with segmentation fault
    - debian/patches/CVE-2023-29932.patch: Use default attributes for
      intrinsics
    - CVE-2023-29932
  * SECURITY UPDATE: convert-scf-to-spirv Pass crashed with segmentation
    fault
    - debian/patches/CVE-2023-29934.patch: Account for type conversion
      failures in scf-to-spirv
    - CVE-2023-29934
  * SECURITY UPDATE: spirv-lower-abi-attrs crashes with segmentation faults
    - debian/patches/CVE-2023-29939.patch: Fix crash in
      spirv-lower-abi-attributes when the are no SPIR-V env attributes
    - CVE-2023-29939

 -- Nishit Majithia <email address hidden> Fri, 14 Jul 2023 12:39:49 +0530
CVE-2023-29932 llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperand<mlir::OpOperand.
CVE-2023-29934 llvm-project commit 6c01b5c was discovered to contain a segmentation fault via the component mlir::Type::getDialect().
CVE-2023-29939 llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::spirv::TargetEnv::TargetEnv(mlir::spirv::TargetEn


About   -   Send Feedback to @ubuntu_updates