On Mon Jul 6, 2026 at 7:46 PM CEST, Sudhir Dumbhare via lists.openembedded.org wrote: > From: Sudhir Dumbhare <[email protected]> > > This patch applies the upstream fix [1], which addresses two out-of-bounds > read issues in bfd/xcofflink.c within xcoff_link_add_symbols(). The changes > shown in [2] are referenced by [3] and [4]. > > [1] > https://sourceware.org/git/?p=binutils-gdb.git;a=commit;h=c2bf7de1eb77a91d7a3c86d56408bf57de540faf > [2] > https://sourceware.org/git/?p=binutils-gdb.git;a=blobdiff;f=bfd/xcofflink.c;h=1781182fa6a3f92e5e91996f8b0dcf3ab192679b;hp=fde21c9f9583baff05e72e390e6bb896d02f9d43;hb=c2bf7de1eb77a91d7a3c86d56408bf57de540faf;hpb=d7f532cb3a46527 > [3] https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-3441 > [4] https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-3442 > > Reference: > https://nvd.nist.gov/vuln/detail/CVE-2026-3441 > https://nvd.nist.gov/vuln/detail/CVE-2026-3442 > https://www.suse.com/security/cve/CVE-2026-3441.html > https://www.suse.com/security/cve/CVE-2026-3442.html > > Signed-off-by: Sudhir Dumbhare <[email protected]> > --- > .../binutils/binutils-2.46.inc | 1 + > .../CVE-2026-3441_CVE-2026-3442.patch | 51 +++++++++++++++++++ > 2 files changed, 52 insertions(+) > create mode 100644 > meta/recipes-devtools/binutils/binutils/CVE-2026-3441_CVE-2026-3442.patch
Because binutils was upgraded in master to 2.47 (with this patch in it), It should be considered fixed. Could you send a modification request to NVD to help clean the data? Also, please consider sending a CVE_STATUS patch for this CVE for master. Thanks! -- Yoann Congal Smile ECS
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#244486): https://lists.openembedded.org/g/openembedded-core/message/244486 Mute This Topic: https://lists.openembedded.org/mt/120143923/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
