Red Hat Security Advisory: binutils security update

Fixed packages 6

Vulnerabilities 4

• Medium 6.3
  CVE-2021-20197

  There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar…

  binutils binutils crash Debian Ubuntu Azure Linux
  Mar 26, 2021
• Unscored —
  CVE-2020-35448

  An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1…

  binutils mingw-w64-binutils binutils-cross-embedded Debian Alpine
  Dec 27, 2020
• Unscored —
  CVE-2021-20284

  A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_…

  binutils Debian
  Mar 26, 2021
• Unscored —
  CVE-2021-3487 Rejected

  Non Security Issue. See the binutils security policy for more details, https://sourceware.org/cgit/binutils-gdb/tree/bi…

  binutils binutils Ubuntu Alpine
  Apr 15, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1913743
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1924068
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1930988
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1935785
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1937784
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1946518
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1946977
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1947111
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1950478
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1969775
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4364.json
• report
  https://access.redhat.com/security/cve/CVE-2020-35448
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-35448
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-35448
• report
  https://access.redhat.com/security/cve/CVE-2021-3487
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-3487
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-3487
• report
  https://access.redhat.com/security/cve/CVE-2021-20197
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-20197
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-20197
• report
  https://access.redhat.com/security/cve/CVE-2021-20284
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-20284
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-20284