Fedora 33: mingw-binutils 2020-18ec0bf4bb

Backport patches for CVE-2020-16592 and CVE-2020-16598

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-18ec0bf4bb
2020-12-27 01:38:17.458526
--------------------------------------------------------------------------------

Name        : mingw-binutils
Product     : Fedora 33
Version     : 2.34
Release     : 4.fc33
URL         : https://www.gnu.org/software/binutils/
Summary     : Cross-compiled version of binutils for Win32 and Win64 environments
Description :
Cross compiled binutils (utilities like 'strip', 'as', 'ld') which
understand Windows executables and DLLs.

--------------------------------------------------------------------------------
Update Information:

Backport patches for CVE-2020-16592 and CVE-2020-16598
--------------------------------------------------------------------------------
ChangeLog:

* Fri Dec 18 2020 Sandro Mani  - 2.34-4
- Backport patches for CVE-2020-16592, CVE-2020-16598
* Wed Jul 29 2020 Sandro Mani  - 2.34-3
- Fix ld --version output
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1906758 - CVE-2020-16598 mingw-binutils: binutils: Null Pointer Dereference in debug_get_real_type could result in DoS [fedora-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=1906758
  [ 2 ] Bug #1906779 - CVE-2020-16592 mingw-binutils: binutils: use-after-free in bfd_hash_lookup could result in DoS [fedora-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=1906779
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-18ec0bf4bb' at the command
line. For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it.
To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it.
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it.