SUSE-SU-2020:3552-1 Security update for binutils

This update for binutils fixes the following issues: binutils was updated to version 2.35.1 jscECO-2373 Additional branch fixes applied on top of 2.35.1: Fixes PR26520, aka bsc1179036, a problem in addr2line with certain DWARF variable descriptions. Also fixes PR26711, PR26656, PR26655, PR26929,...

binutils -- excessive debug section size can cause excessive memory consumption in bfd's dwarf2.c read_section()

Hao Wang reports: There's a flaw in the BFD library of binutils in versions before 2.36. An attacker who supplies a crafted file to an application linked with BFD, and using the DWARF functionality, could cause an impact to system availability by way of excessive memory consumption...

PT-2020-6735

Name of the Vulnerable Software and Affected Versions binutils versions prior to 2.36 Description The issue is related to insufficient input validation in the read section function of the dwarf2.c component in the GNU Binutils development tool. This allows a remote attacker to cause a denial of...

PT-2021-13876

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.35.1 Description: A flaw was found in GNU Binutils, where there is a heap-based buffer overflow in bfd elf slurp secondary reloc section in elf.c due to the number of symbols not calculated correctly. The highest threat...

RHEL 8 : binutils (RHSA-2020:4465)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4465 advisory. The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar...

PT-2021-7941

Name of the Vulnerable Software and Affected Versions binutils versions prior to 2.34 Description The issue is related to a flaw in the bfd pef parse function stubs function of bfd/pef.c in binutils, which could allow an attacker to cause a NULL pointer dereference by submitting a crafted file to...

PT-2021-7942

Name of the Vulnerable Software and Affected Versions binutils versions prior to 2.34 Description The issue is caused by a heap buffer overflow in the bfd pef parse function stubs function in bfd/pef.c, which can lead to an out-of-bounds read. This can be exploited by submitting a crafted PEF fil...

PT-2021-7940

Name of the Vulnerable Software and Affected Versions binutils versions prior to 2.34 Description The issue is related to a flaw in the /opcodes/tic4x-dis.c component of binutils, which can cause the usage of uninitialized memory when a crafted input file is processed. This can lead to a threat t...

binutils:fuzz_bfd: Heap-buffer-overflow in bfd_section_from_shdr

Detailed Report: https://oss-fuzz.com/testcase?key=5648264294301696 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzbfd Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x605000037f4c Crash State: bfdsectionfromshdr...

Oracle Linux 8 : binutils (ELSA-2020-4465)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4465 advisory. 2.30-79.0.1 - Forward-port Oracle patches from 2.30-75.0.1 - Reviewed-by: Jose E. Marchesi 2.30-79 - Fix x86 assemblers handling of non-8-bit displacements...

binutils security update

2.30-79.0.1 - Forward-port Oracle patches from 2.30-75.0.1 - Reviewed-by: Jose E. Marchesi 2.30-79 - Fix x86 assemblers handling of non-8-bit displacements. 1869401 2.30-77 - Add tests missing from PTGNUSEGMENT patch. 1870039 2.30-75.0.1 - Forward-port Oracle patches to OL8.3 beta. 2.30-76 - Have...

EulerOS Virtualization 3.0.6.6 : binutils (EulerOS-SA-2020-2463)

According to the version of the binutils packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - rememberKtype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2020-2463)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

binutils: denial of service via crafted ELF file

findabstractinstance in dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.32, allows remote attackers to cause a denial of service infinite recursion and application crash via a crafted ELF file...

Low: Red Hat Security Advisory: binutils security update

An update for binutils is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2020-2330)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

new packages: gcc-toolset-10-binutils

GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. This enhancement update adds the gcc-toolset-10-binutils packages to AlmaLinux Eneterprise Linux 8. For instructions on usage, see Using GC...

Low: binutils security update

The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities. Security Fixes: binutils: denial of service v...

openSUSE: Security Advisory for binutils (openSUSE-SU-2020:1804-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for binutils (openSUSE-SU-2020:1790-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...