Summary
[2.41-3.1]
- Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130636)
* Thu Feb 20 2025 Nick Clifton <nickc@redhat.com>
- Backport fixes for PR 32082 and PR 32153 in order to fix the PR 20267 linker tests.
[2.41-3]
- NVR Bump to allow rebuilding with GTS-14 gcc. (RHEL-53519)
[2.41-2]
- Fix s390x testsuite errors to allow building for RHEL-8. (RHEL-30410)
[2.41-1]
- Initial import of upstream 2.41 release with patches from Fedora 40. (RHEL-30410)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | gcc-toolset-14-binutils | 0:2.41-4.el8_10.1 |
| Oracle Linux · 8 | gcc-toolset-14-binutils-devel | 0:2.41-4.el8_10.1 |
| Oracle Linux · 8 | gcc-toolset-14-binutils-gold | 0:2.41-4.el8_10.1 |
| Oracle Linux · 8 | gcc-toolset-14-binutils-gprofng | 0:2.41-4.el8_10.1 |
Vulnerabilities 1
-
Medium 5.3
GNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflow
A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exp…