Skip to content
OpenAdvisories
Medium ELSA-2025-23343 1 CVE

Moderate: binutils security update (Oracle Linux 9)

Published Dec 18, 2025 · Updated Dec 18, 2025

Summary

[2.35.2-67.0.1.1]
- Merge Oracle patches to 2.35.2-67.1.
- CVE-2025-11083
- Reviewed-by: David Faust <david.faust@oracle.com>
Oracle history:
September-24-2025 Bruce McCulloch <bruce.mcculloch@oracle.com> - 2.35.2-67.0.1
- Merge Oracle patches to 2.35.2-66.
- Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
September-5-2025 Bruce McCulloch <bruce.mcculloch@oracle.com> - 2.35.2-66.0.1
- Merge Oracle patches to 2.35.2-66.
- Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
August-4-2025 Bruce McCulloch <bruce.mcculloch@oracle.com> - 2.35.2-65.0.1
- Merge Oracle patches to 2.35.2-65.
- Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
April-10-2025 Bruce McCulloch <bruce.mcculloch@oracle.com> - 2.35.2-63.0.1
- Merge Oracle patches to 2.35.2-63.
- Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
January-10-2025 Bruce McCulloch <bruce.mcculloch@oracle.com> - 2.35.2-55.0.1
- Forward-port Oracle patches to 2.35.2-55.
- Refresh CTF patches
March-27-2024 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.35.2-43.0.1
- Forward-port Oracle patches to 2.35.2-43.
March-07-2024 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.35.2-42.0.2.1
- Do not set version info on unversion symbols. (RHEL-22601)
- Reviewed by: Elena Zannoni <elena.zannoni@oracle.com>
February-06-2024 Nick Alcock <nick.alcock@oracle.com> - 2.35.2-42.0.2
- Refresh CTF patches from upstream (2.42).
- Fix more cases where operations on child dicts could leave errors on
the parent, this time associated with CTF dict creation (upstream PR
libctf/30985).
- Fix the cu-mapped link feature (not exposed by GNU ld) to use only
the last mapping provided for a given translation unit, rather than a
random mix of first and last
- Fix dependencies of libctf.so and libctf-nobfd.so to cite the libraries
the code actually depends on. (Fixes observed link problems with
libctf-nobfd.so needing extra libraries on the link line versus upstream:
libctf.so changes done purely for consistency.)
- Add upstream commit 2e93abb858ae, allowing NONE relocs against local absolute
symbols on x86-64. (Upstream PR ld/31047).
October-10-2023 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.35.2-42.0.1
- Forward-port Oracle patches to 2.35.2-42.
August-04-2023 Nick Alcock <nick.alcock@oracle.com> - 2.35.2-37.0.2
- Refresh CTF patches from upstream.
- Avoid spurious corruption error with symtypetab section emitted by old OL8 GCCs
- Various obscure install-time linking problems
- Make objdump/readelf --ctf parameter optional; make objdump --ctf-parent take
a CTF member name, not a section name
- Improve dumping of types when some types elicit a libctf error
- Put functions as well as variables in the (misnamed) CTF variable section
- Improve handling of various forms of corrupted CTF input.
- Fix errors in comments in <ctf.h> and <ctf-api.h>
- Make CTF dicts reproducible even when conflicting types are seen
- Prevent corruption of output when linking multiple object files derived from
the same source
- Minor compiler warning and portability fixes
- Fix (unlikely) crash-inducing uninitialized memory access and wild
pointer overwrite when linking
- Fix the reported offsets of fields within unnamed structs/unions
[Orabug: 35191322]
- Fix a number of places where operations carried out on child dicts
that errored were producing errors on the parent, not the child,
so the caller never noticed them
March-28-2023 Guillermo E. Martinez <guillermo.e.martinez@oracle.com> - 2.35.2-37.0.1
- Forward-port Oracle patches from 2.35.2-24.0.1
- Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
April-25-2022 David Faust <david.faust@oracle.com> - 2.35.2-17.0.1
- Forward-port Oracle patches from 2.35.2-9.0.1 to 2.35.2-17.0.1
- Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
November-23-2021 David Faust <david.faust@oracle.com> - 2.35.2-9.0.1
- Enable libctf
- Backport all CTF improvements since 2.35.2 release, upstream commits:
6ab5b6d0f3a libctf, lookup: fix bounds of pptrtab lookup
e695879142a libctf, testsuite: fix various warnings in tests
b62d5edd0a5 libctf: fix handling of CTF symtypetab sections emitted by older GCC
ea9c2009115 libctf: try several possibilities for linker versioning flags
bef9ef8ca0f libtool.m4: fix nm BSD flag detection
bc4b1401129 libtool.m4: augment symcode for Solaris 11
7d53105d6ed libctf: link against libiberty before linking in libbfd or libctf-nobfd
ae064303efe libctf, ld: fix test results for upstream GCC
49da556c658 libctf, include: support an alternative encoding for nonrepresentable types
8592be8c7d3 ld: do not rely on the exact size of the CTF symtypetabs in test results
8f7b22ea2a9 libctf: fix ELF-in-BFD checks in the presence of ASAN
15131809c23 libctf: fix memory leak in a test
0bd65ce30a8 libctf: don't dereference out-of-bounds locations in the qualifier hashtab
5226ef61131 libctf: make ctf_bfdopen_ctfsect a debugger entry point
86f64bf43f7 libctf, serialize: functions with no args have a NULL dtd_vlen
24c877f9b19 include: always do unsigned left-shift in CTF_SET_STID
485170cdb1b libctf, dump: do not emit size or alignment if it would error
e93388417c1 Provide an inline startswith function in bfd.h
69a284867c7 libctf: support encodings for enums
e4c78f303df libctf: a couple of small error-handling fixes
d7b1416ef2c libctf: types: unify code dealing with small-vs-large struct members
08c428aff4a libctf: eliminate dtd_u, part 5: structs / unions
77d724a7ecd libctf: eliminate dtd_u, part 4: enums
986e9e3aa03 libctf: do not corrupt strings across ctf_serialize
2a05d50e90c libctf: don't lose track of all valid types upon serialization
755ba58ebef Add install dependencies for ld -> bfd and libctf -> bfd
81982d20fac libctf: eliminate dtd_u, part 3: functions
534444b1ee1 libctf: eliminate dtd_u, part 2: arrays
7879dd88efd libctf: eliminate dtd_u, part 1: int/float/slice
eefe721eadf libctf: fix GNU style for do {} while

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 9 binutils 0:2.35.2-67.0.1.el9_7.1
Oracle Linux · 9 binutils-devel 0:2.35.2-67.0.1.el9_7.1
Oracle Linux · 9 binutils-gold 0:2.35.2-67.0.1.el9_7.1

Vulnerabilities 1

  • Medium 5.3

    GNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflow

    A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exp…