Summary
[2.30-128.0.1]
- Forward port Oracle patches to 2.30-128
- CVE-2025-11083
Reviewed-by: TBD
Oracle history:
October-8-2025 Bruce McCulloch <bruce.mcculloch@oracle.com> - 2.30-127.0.1
- Forward port Oracle patches to 2.30-127.
- Muting some failing ld-ctf tests.
Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
November-14-2024 Bruce McCulloch <bruce.mcculloch@oracle.com> - 2.30-125.0.1
- Forward port Oracle patches from 2.30-125
Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
February-06-2024 Nick Alcock <nick.alcock@oracle.com> - 2.30-123.0.2
- Refresh CTF patches from upstream (2.42).
- Fix more cases where operations on child dicts could leave errors on
the parent, this time associated with CTF dict creation (upstream PR
libctf/30985).
- Fix the cu-mapped link feature (not exposed by GNU ld) to use only
the last mapping provided for a given translation unit, rather than a
random mix of first and last
- Fix dependencies of libctf.so and libctf-nobfd.so to cite the libraries
the code actually depends on. (Fixes observed link problems with
libctf-nobfd.so needing extra libraries on the link line versus upstream:
libctf.so changes done purely for consistency.)
October-10-2023 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.30-123.0.1
- Forward-port Oracle patches to 2.30-123.
Reviewed-by: David Faust <david.faust@oracle.com>
August-02-2023 Nick Alcock <nick.alcock@oracle.com> - 2.30-119.0.2
- Refresh CTF patches from upstream.
- Avoid spurious corruption error with symtypetab section emitted by old OL8 GCCs
- Various obscure install-time linking problems
- Make objdump/readelf --ctf parameter optional; make objdump --ctf-parent take
a CTF member name, not a section name
- Improve dumping of types when some types elicit a libctf error
- Put functions as well as variables in the (misnamed) CTF variable section
- Improve handling of various forms of corrupted CTF input.
- Fix errors in comments in <ctf.h> and <ctf-api.h>
- Make CTF dicts reproducible even when conflicting types are seen
- Prevent corruption of output when linking multiple object files derived from
the same source
- Minor compiler warning and portability fixes
- Fix (unlikely) crash-inducing uninitialized memory access and wild
pointer overwrite when linking
- Fix the reported offsets of fields within unnamed structs/unions
[Orabug: 35191322]
- Fix a number of places where operations carried out on child dicts
that errored were producing errors on the parent, not the child,
so the caller never noticed them
March-28-2023 Guillermo E. Martinez <guillermo.e.martinez@oracle.com> - 2.30-119.0.1
- Forward-port Oracle patches from 2.30-117.0.3 to 2.30-119.0.1
- Remove Oracle patch: binutils-bfd-plugin-lib64.patch
- Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
October-20-2022 Guillermo E. Martinez <guillermo.e.martinez@oracle.com> - 2.30-117.0.3
- Backport of upstream patches:
- [binutils-gdb] Add an option to objcopy to change the alignment of sections.
fa463e9fc644e7a3bad39aa73bf6be72ea865805.
- [binutils-gdb] Change objcopy's --set-section-alignment option to take a byte
alignment value rather than a power of two alignment value.
de4859eacb74a440d9fd61e4a0f051e3737a05dd
- [Orabug: 34721268]
- Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
October-06-2022 Guillermo E. Martinez <guillermo.e.martinez@oracle.com> - 2.30-117.0.2
- Add missed Oracle patches:
- binutils-aarch64-veneers-fix.patch.
- binutils-aarch64-add-support-efi.patch.
- Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
September-28-2022 Guillermo E. Martinez <guillermo.e.martinez@oracle.com> - 2.30-117.0.1
- Forward-port of Oracle patches from 2.30-113.0.3
- Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
August-04-2022 Guillermo E. Martinez <guillermo.e.martinez@oracle.com> - 2.30-113.0.3
- Backport of upstream patches:
- [binutils-gdb][AArch64] Re: Add support for AArch64 EFI (efi-*-aarch64)
d91c67e8730354c43fae86fa98fe593925882365.
- [binutils-gdb][AArch64] Re: AArch64: Add support for AArch64 EFI (efi-*-aarch64)
32384aa396e7e87fe02cc838722b8e80ec88ec10.
- [binutils-gdb][AArch64] AArch64: Add support for AArch64 EFI (efi-*-aarch64).
b69c9d41e89498442cb5af5287f378b3583dd445.
- [Orabug: 34453890]
- Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
- Reviewed-by: David Faust <david.faust@oracle.com>
July-14-2022 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.30-113.0.2
- Backport of upstream patch:
[binutils-gdb][ld][AArch64] Fix group_sections algorithm
cff69cf4cf97e1eb4c2cca8e985e403b1a97c059.
- [Orabug: 34237729]
- Reviewed-by: Indu Bhagat <indu.bhagat@oracle.com>
March-29-2022 Diego de Dios <diego.m.martinez@oracle.com> - 2.30-113.0.1
- Forward-port Oracle patches from 2.30-108.0.2.1 to 2.30-113.0.1
- Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
November-16-2021 David Faust <david.faust@oracle.com> - 2.30-108.0.2.1
- Forward-port Oracle patches from 2.30-108.0.2 to 2.30-108.0.2.1
- Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
November-02-2021 David Faust <david.faust@oracle.com> - 2.30-108.0.2
- Forward-port the following update:
[2.30-93.0.4
- Backport fix for fencepost bug in CTF pptrtab usage causing coredumps
- Backport test result fixes for new GCC-based CTF generation
[Orabug: 33344570]
- Reviewed-by: David Faust <david.faust@oracle.com>
- Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
October-05-2021 David Faust <david.faust@oracle.com> - 2.30-108.0.1
- Forward-port Oracle patches from 2.30-93.0.3 to 2.30-108.0.1
- Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>
August-17-2021 David Faust <david.faust@oracle.com> - 2.30-93.0.3
- Fix BFD library incorrectly attempting to load 32-bit plugins on OL8.
- [Orabug: 33219039]
June-16-2021 Nick Alcock <nick.alcock@oracle.com> - 2.30.93.0.2
- Backport the fully-functional CTF deduplicator. The spurious conflicts
i
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | binutils | 0:2.30-128.0.1.el8_10 |
| Oracle Linux · 8 | binutils-devel | 0:2.30-128.0.1.el8_10 |
Vulnerabilities 1
-
Medium 5.3
GNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflow
A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exp…