Backport four upstream fixes for binutils 2.42: - CVE-2025-1147: nm segfault with --ifunc-chars=-- (PR 32556) - CVE-2025-8224: abort in _bfd_doprnt due to shstrtabsize overflow (PR 32109) - CVE-2026-15003: buffer overflow in xcoff_link_add_symbols (PR 34053) - CVE-2026-18220: buffer overflow in elf32_dlx_relocate26
CVE-2025-8224 is adapted for 2.42 (uses _bfd_alloc_and_read instead of _bfd_mmap_readonly_persistent). All other patches apply cleanly. Changes v1 -> v2: - Fixed Upstream-Status placement to be in commit message (before scissors line) Test results: binutils-cross-testsuite 2.42 (x86_64-oe-linux): Before: binutils: 302 passed, 2 unexpected failures, 1 untested, 7 unsupported gas: 1871 passed, 4 unexpected failures, 2 unsupported ld: 1728 passed, 5 unexpected failures, 7 expected failures, 1 unresolved, 20 untested, 99 unsupported After: binutils: 304 passed, 2 unexpected failures, 1 untested, 7 unsupported gas: 1871 passed, 4 unexpected failures, 2 unsupported ld: 1728 passed, 5 unexpected failures, 7 expected failures, 1 unresolved, 20 untested, 99 unsupported No regressions. +2 new passes from nm --ifunc-chars=-- tests (CVE-2025-1147). Jaipaul Cheernam (4): binutils: fix CVE-2025-1147 binutils: fix CVE-2025-8224 binutils: fix CVE-2026-15003 binutils: fix CVE-2026-18220 .../binutils/binutils-2.42.inc | 4 + .../binutils/binutils/CVE-2025-1147.patch | 110 +++++ .../binutils/binutils/CVE-2025-8224.patch | 54 +++ .../binutils/binutils/CVE-2026-15003.patch | 400 ++++++++++++++++++ .../binutils/binutils/CVE-2026-18220.patch | 65 +++ 5 files changed, 633 insertions(+) create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2025-1147.patch create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2025-8224.patch create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2026-15003.patch create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2026-18220.patch
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#243271): https://lists.openembedded.org/g/openembedded-core/message/243271 Mute This Topic: https://lists.openembedded.org/mt/120715673/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
