https://sourceware.org/bugzilla/show_bug.cgi?id=23786
--- Comment #5 from Mark Wielaard <mark at klomp dot org> --- For reference this was assigned CVE-2018-18521. Note that this bug was not in a generic library, just in the code shared by the eu-ar and eu-ranlib binaries. -- You are receiving this mail because: You are on the CC list for the bug.