binutils-2.30-75.el8

The binutils packages provide a collection of binary utilities for the
manipulation of object code in various object file formats. It includes the ar,
as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and
addr2line utilities.

Security Fix(es):

* binutils: integer overflow leading to a SEGV in
_bfd_dwarf2_find_nearest_line in dwarf2.c (CVE-2019-17451)

* binutils: Improper Input Validation, Signed/Unsigned Comparison,
Out-of-bounds Read in gold/fileread.cc and elfcpp/elfcpp_file.h leads to denial
of service (CVE-2019-1010204)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

Bug Fix(es):

- Stop the BFD library from issueing warning messages about allocated sections
being found outside of loadable segments. (#1630115)
- Fix linker testsuite failures for the aarch64 and s390x targets. (#1632775,
#1809101)
- Fix building the binutils with address sanitization enabled. (#1678323)
- Add support for the PT_GNU_PROPERTY segment. (#1721606)
- Fix an internal error in the GOLD linker. (#1722715)
- Fix the generation of corrupt .note.gnu.property notes. (#1723533)
- Stop objcopy's --set-section-flags option from setting the 'shared' flag on
non-COFF binaries. (#1807308)
- Fix a bug in the secondary reloc processing code. (#1809186)
- Prevent the s/390 linker from rewriting the GOT access for certain symbol
types. (#1846972)

CVE-2019-1010204
GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by:
Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read. The
impact is: Denial of service. The component is: gold/fileread.cc:497,
elfcpp/elfcpp_file.h:644. The attack vector is: An ELF file with an invalid
e_shoff header field must be opened.
CVE-2019-17451
An issue was discovered in the Binary File Descriptor (BFD) library (aka
libbfd), as distributed in GNU Binutils 2.32. It is an integer overflow leading
to a SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c, as demonstrated by nm.