Red Hat Security Advisory: devtoolset-12-binutils security update

Fixed packages 3

Vulnerabilities 2

• Medium 5.5
  CVE-2022-4285

  An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version …

  binutils binutils binutils gdb Debian Ubuntu Azure Linux
  Jan 27, 2023
• Unscored —
  CVE-2021-3826

  Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cau…

  binutils libiberty gdb gcc-11 Debian Ubuntu
  Sep 1, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2122627
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2150768
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3269.json
• report
  https://access.redhat.com/security/cve/CVE-2021-3826
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-3826
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-3826
• report
  https://access.redhat.com/security/cve/CVE-2022-4285
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-4285
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-4285
• article
  https://sourceware.org/bugzilla/show_bug.cgi?id=29699
• article
  https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=5c831a3c7f3ca98d6aba1200353311e1a1f84c70