Red Hat Security Advisory

RHSA-2023:3269

devtoolset-12-binutils security update

Released 2023-05-23 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Software Collections for RHEL Workstation(v. 7) devtoolset-12-binutils-2.36.1-6.el7, devtoolset-12-binutils-devel-2.36.1-6.el7
Red Hat Software Collections for RHEL(v. 7) devtoolset-12-binutils-2.36.1-6.el7, devtoolset-12-binutils-devel-2.36.1-6.el7

Fixes 2 records

TI-2021-02757 CVE-2021-3826 · GHSA-88rg-m78j-x8xw

Memory corruption in gcc

LOW 32

Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01504 Published 2022-09-01 Partial fix CWE-119

TI-2022-03924 CVE-2022-4285 · GHSA-qx33-qxjc-p36p

NULL pointer dereference in binutils

LOW 25

An illegal memory access flaw was found in the binutils package.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00446 Published 2023-01-27 Partial fix CWE-476