RLSA-2021:4364 Moderate: binutils security update

The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities. Security Fixes: binutils: Excessive debug...

Moderate: binutils security update

The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities. Security Fixes: binutils: Excessive debug...

gcc-toolset-11-binutils bug fix and enhancement update

An update is available for gcc-toolset-11-binutils. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...

binutils:fuzz_disassemble: Dynamic-stack-buffer-overflow in extract_fields

Detailed Report: https://oss-fuzz.com/testcase?key=6235185935417344 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdisassemble Job Type: aflasanbinutils Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 4 Crash Address: 0x7fff4cef82e0 Crash State: extractfields...

binutils:fuzz_addr2line: Dynamic-stack-buffer-overflow in error_handler_internal

Detailed Report: https://oss-fuzz.com/testcase?key=5075151692103680 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzaddr2line Job Type: aflasanbinutils Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 4 Crash Address: 0x7ffee37c1a00 Crash State: errorhandlerinternal...

binutils:fuzz_disas_ext-bfd_arch_i386: Dynamic-stack-buffer-overflow in fetch_data

Detailed Report: https://oss-fuzz.com/testcase?key=6362794363060224 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdisasext-bfdarchi386 Job Type: aflasanbinutils Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE Crash Address: 0x7ffc2595b480 Crash State: fetchdata printin...

binutils:fuzz_objcopy: Use-of-uninitialized-value in cache_bwrite

Detailed Report: https://oss-fuzz.com/testcase?key=4763793289248768 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzobjcopy Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cachebwrite bfdbwrite bfdmachowritecontent...

binutils:fuzz_readelf: Stack-use-after-scope in unw_decode_r3

Detailed Report: https://oss-fuzz.com/testcase?key=5825077342502912 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzreadelf Job Type: aflasanbinutils Platform Id: linux Crash Type: Stack-use-after-scope WRITE 8 Crash Address: 0x7ffdeb3d9100 Crash State: unwdecoder3 unwdecode dumpia64unwind...

binutils:fuzz_nm: Crash in display_rel_file

Detailed Report: https://oss-fuzz.com/testcase?key=4843280903307264 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzznm Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000dfff8000 Crash State: displayrelfile displayfile fuzznm.c Sanitizer:...

binutils:fuzz_addr2line: Segv on unknown address in bfd_getl16

Detailed Report: https://oss-fuzz.com/testcase?key=5092031333007360 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzaddr2line Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: bfdgetl16 bfdmipselfrelocunshuffle...

binutils:fuzz_disassemble: Dynamic-stack-buffer-overflow in extract_fields

Detailed Report: https://oss-fuzz.com/testcase?key=6365786025885696 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdisassemble Job Type: aflasanbinutils Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 4 Crash Address: 0x7ffcec49d060 Crash State: extractfields...

openSUSE 15 Security Update : binutils (openSUSE-SU-2021:3616-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3616-1 advisory. Update to binutils 2.37: The GNU Binutils sources now requires a C99 compiler and library to build. Support for Realm Management Extension RME fo...

SUSE SLED15: binutils / binutils-devel / binutils-devel-32bit / binutils-gold / etc (SUSE-SU-2021:3616-1)

The remote SUSE Linux SLED15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3616-1 advisory. Update to binutils 2.37: The GNU Binutils sources now requires a C99 compiler and library to build. Support for Realm...

openSUSE: Security Advisory for binutils (openSUSE-SU-2021:3616-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

binutils:fuzz_objdump: Stack-use-after-scope in disassemble_section

Detailed Report: https://oss-fuzz.com/testcase?key=6226068055392256 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzobjdump Job Type: aflasanbinutils Platform Id: linux Crash Type: Stack-use-after-scope WRITE Crash Address: 0x7ffcc9e7e390 Crash State: disassemblesection bfdmapoversections...

SUSE-SU-2021:3616-1 Security update for binutils

This update for binutils fixes the following issues: Update to binutils 2.37: The GNU Binutils sources now requires a C99 compiler and library to build. Support for Realm Management Extension RME for AArch64 has been added. A new linker option '-z report-relative-reloc' for x86 ELF targets has be...

OPENSUSE-SU-2021:3616-1 Security update for binutils

This update for binutils fixes the following issues: Update to binutils 2.37: The GNU Binutils sources now requires a C99 compiler and library to build. Support for Realm Management Extension RME for AArch64 has been added. A new linker option '-z report-relative-reloc' for x86 ELF targets has be...

Security update for binutils (moderate)

openSUSE Security Update: Security update for binutils Announcement ID: openSUSE-SU-2021:3616-1 Rating: moderate References: 1179898 1179899 1179900 1179901 1179902 1179903 1180451 1180454 1180461 1181452 1182252 1183511 1184620 1184794 PM-2767 SLE-18637 SLE-19618 SLE-21561 Cross-References:...

binutils:fuzz_objdump_safe: Heap-buffer-overflow in bfd_getl32

Detailed Report: https://oss-fuzz.com/testcase?key=5691484599353344 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzobjdumpsafe Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62d000027120 Crash State: bfdgetl32...

binutils:fuzz_windres: Null-dereference READ in ubsan_GetStackTrace

Detailed Report: https://oss-fuzz.com/testcase?key=5071275568005120 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzwindres Job Type: libfuzzerubsanbinutils Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: ubsanGetStackTrace Sanitizer:...