I have several servers running with Xenial (16.04 LTS). I ran a security scanning tool (AWS Inspector) that shows a list of unpatched CVE vulnerabilities on the server. A lot of them relate to binutils, for example https://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-6323.html
I can see that on that Canonical link above the package update is marked as needed, however I do:
sudo apt-get update
sudo apt-get upgrade --dry-run
I see no patches. I have recently run an upgrade successfully, so nothing new to pick up. But binutils is still triggering the alert and is at version 2.26.1-1ubuntu1~16.04.8.
Is there a way to upgrade binutils to patch these vulnerabilities on Xenial? Or is this a false alarm?