OESA-2021-1098

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1098

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2021-1098.json

JSON Data

https://api.test.osv.dev/v1/vulns/OESA-2021-1098

Upstream

CVE-2020-0551

CVE-2020-16592

Published

2021-04-07T11:02:43Z

Modified

2025-08-12T05:04:50.903245Z

Summary

binutils security update

Details

The GNU Binutils are a collection of binary tools. The main ones are: ld - the GNU linker. as - the GNU assembler. addr2line - Converts addresses into filenames and line numbers. ar - A utility for creating, modifying and extracting from archives. c++filt - Filter to demangle encoded C++ symbols. dlltool - Creates files for building and using DLLs. gold - A new, faster, ELF only linker, still in beta test. gprof - Displays profiling information. nlmconv - Converts object code into an NLM. nm - Lists symbols from object files. objcopy - Copies and translates object files. objdump - Displays information from object files. ranlib - Generates an index to the contents of an archive. readelf - Displays information from any ELF format object file. size - Lists the section sizes of an object or archive file. strings - Lists printable strings from files. trip - Discards symbols. windmc - A Windows compatible message compiler. windres - A compiler for Windows resource files.

Security Fix(es):

Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. The list of affected products is provided in intel-sa-00334: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00334.html(CVE-2020-0551)

A use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU Binutils 2.34 in bfdhashlookup, as demonstrated in nm-new, that can cause a denial of service via a crafted file.(CVE-2020-16592)

Database specific

{
    "severity": "Medium"
}

References

Affected packages

openEuler:20.03-LTS / binutils

Package

Name: binutils
Purl: pkg:rpm/openEuler/binutils&distro=openEuler-20.03-LTS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.34-8.oe1

Ecosystem specific

{
    "aarch64": [
        "binutils-2.34-9.oe1.aarch64.rpm",
        "binutils-debuginfo-2.34-9.oe1.aarch64.rpm",
        "binutils-debugsource-2.34-9.oe1.aarch64.rpm",
        "binutils-help-2.34-9.oe1.aarch64.rpm",
        "binutils-devel-2.34-9.oe1.aarch64.rpm",
        "binutils-2.34-8.oe1.aarch64.rpm",
        "binutils-debugsource-2.34-8.oe1.aarch64.rpm",
        "binutils-devel-2.34-8.oe1.aarch64.rpm",
        "binutils-help-2.34-8.oe1.aarch64.rpm",
        "binutils-debuginfo-2.34-8.oe1.aarch64.rpm"
    ],
    "src": [
        "binutils-2.34-9.oe1.src.rpm",
        "binutils-2.34-8.oe1.src.rpm"
    ],
    "x86_64": [
        "binutils-help-2.34-9.oe1.x86_64.rpm",
        "binutils-debugsource-2.34-9.oe1.x86_64.rpm",
        "binutils-devel-2.34-9.oe1.x86_64.rpm",
        "binutils-2.34-9.oe1.x86_64.rpm",
        "binutils-debuginfo-2.34-9.oe1.x86_64.rpm",
        "binutils-devel-2.34-8.oe1.x86_64.rpm",
        "binutils-debugsource-2.34-8.oe1.x86_64.rpm",
        "binutils-debuginfo-2.34-8.oe1.x86_64.rpm",
        "binutils-2.34-8.oe1.x86_64.rpm",
        "binutils-help-2.34-8.oe1.x86_64.rpm"
    ]
}

openEuler:20.03-LTS-SP1 / binutils

Package

Name: binutils
Purl: pkg:rpm/openEuler/binutils&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.34-8.oe1

Ecosystem specific

{
    "aarch64": [
        "binutils-2.34-8.oe1.aarch64.rpm",
        "binutils-debugsource-2.34-8.oe1.aarch64.rpm",
        "binutils-devel-2.34-8.oe1.aarch64.rpm",
        "binutils-help-2.34-8.oe1.aarch64.rpm",
        "binutils-debuginfo-2.34-8.oe1.aarch64.rpm"
    ],
    "src": [
        "binutils-2.34-8.oe1.src.rpm"
    ],
    "x86_64": [
        "binutils-devel-2.34-8.oe1.x86_64.rpm",
        "binutils-debugsource-2.34-8.oe1.x86_64.rpm",
        "binutils-debuginfo-2.34-8.oe1.x86_64.rpm",
        "binutils-2.34-8.oe1.x86_64.rpm",
        "binutils-help-2.34-8.oe1.x86_64.rpm"
    ]
}