RHBA-2016:1148 - Bug Fix Advisory

Topic

Updated devtoolset-4-binutils packages that fix several bugs and add various enhancements are now available for Red Hat Developer Toolset 4.1.

Description

Binutils is a collection of binary utilities, including ar (for creating, modifying, and extracting from archives), as (a family of GNU assemblers), gprof (for displaying call graph profile data), ld (the GNU linker), nm (for listing symbols from object files), objcopy (for copying and translating object files), objdump (for displaying information from object files), ranlib (for generating an index for the contents of an archive), readelf (for displaying detailed information about binary files), size (for listing the section sizes of an object or archive file), strings (for listing printable strings from files), strip (for discarding symbols), and addr2line (for converting addresses to file and line). The devtoolset-4-binutils packages provide the Red Hat Developer Toolset version of binutils.

The devtoolset-4-binutils packages have been upgraded to upstream version 2.25.1, which provides a number of bug fixes and enhancements over the previous version. (BZ#1306297, BZ#1306298)

For detailed changes, see the Red Hat Developer Toolset 4.1 User Guide linked from the References section.

This update also fixes the following bug:

• Previously, running the readelf command on a binary file that was corrupted in a certain way could lead to reading from unallocated memory. As a consequence, the readelf program terminated unexpectedly with a segmentation fault and could also generate a core file. To fix this bug, extra code has been added to the readelf program to detect negative offsets in the unwind data section, and the behavior has been modified to report these offsets as errors instead of attempting to follow them. As a result, readelf returns an error message helping to diagnose the corruption in the supplied binary file in this scenario. (BZ#1260034, BZ#1260035)

In addition, this update adds the following enhancement:

• This update add support for Intel's OSPKE instructions, as documented in the Intel64 and IA-32 Architectures Software Developerâs Manual Volume 2, September 2015. (BZ#1309347)

Users of devtoolset-4-binutils are advised to upgrade to these updated packages, which fix these bugs and add these enhancements.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Software Collections (for RHEL Server) 1 for RHEL 7.7 x86_64
• Red Hat Software Collections (for RHEL Server) 1 for RHEL 7.6 x86_64
• Red Hat Software Collections (for RHEL Server) 1 for RHEL 7.5 x86_64
• Red Hat Software Collections (for RHEL Server) 1 for RHEL 7.4 x86_64
• Red Hat Software Collections (for RHEL Server) 1 for RHEL 7.3 x86_64
• Red Hat Software Collections (for RHEL Server) 1 for RHEL 7.2 x86_64
• Red Hat Software Collections (for RHEL Server) 1 for RHEL 7.1 x86_64
• Red Hat Software Collections (for RHEL Server) 1 for RHEL 7 x86_64
• Red Hat Software Collections (for RHEL Server) 1 for RHEL 6.7 x86_64
• Red Hat Software Collections (for RHEL Server) 1 for RHEL 6.6 x86_64
• Red Hat Software Collections (for RHEL Server) 1 for RHEL 6 x86_64
• Red Hat Software Collections (for RHEL Workstation) 1 for RHEL 7 x86_64
• Red Hat Software Collections (for RHEL Workstation) 1 for RHEL 6 x86_64

Fixes

• BZ - 1260034 - Specially crafted binary can cause readelf to read from an arbitrary address-
• BZ - 1260035 - Specially crafted binary can cause readelf to read from an arbitrary address-
• BZ - 1312376 - Failures in the GOLD testsuite show up as problems in rpmdiff

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#normal