tocsin

Debian/binutils: critical 9.1

readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to an information leak as

Action: Upgrade binutils to 2.28-3 or later.

Affected

introducedfixedlast affected
02.28-3-

Fixed versions

2.28-3

Sources

published · modified · JSON