Summary
[2.40-21.0.1.1]
- Forward-port Oracle patches to 2.40-21.1.
- CVE-2025-11083
- Reviewed-by: David Faust <david.faust@oracle.com>
Oracle history:
April-02-2024 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.40-21.0.1
- Forward-port Oracle patchs to 2.40-21.
- Reviewed-by: Cupertino Miranda <cupertino.miranda@oracle.com>
December-15-2023 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.40-13.0.1
- libctf, link: fix CU-mapped links with CTF_LINK_EMPTY_CU_MAPPINGS.
Backport of upstream commit 869a750c0ec0abcab84e38a43a1ed73321ef4371.
[Orabug: 36113992]
- Reviewed-by: David Faust <david.faust@oracle.com>
[2.40-21.1]
- Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130652)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | gcc-toolset-13-binutils | 0:2.40-21.0.1.el9_7.1 |
| Oracle Linux · 9 | gcc-toolset-13-binutils-devel | 0:2.40-21.0.1.el9_7.1 |
| Oracle Linux · 9 | gcc-toolset-13-binutils-gold | 0:2.40-21.0.1.el9_7.1 |
Vulnerabilities 1
-
Medium 5.3
GNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflow
A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exp…