CVE-2022-48064
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability...
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
5.5
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.
- Record
CVE-2022-48064- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-770
- Updated
- 2026-11-02
CVE List No score
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.
- Record
CVE-2022-48064- Updated
- 2026-11-02
EUVDEUVD-2022-50778 No score
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.
- Record
EUVD-2022-50778- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p564-948g-fpq9
5.5
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability...
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.
- Record
GHSA-p564-948g-fpq9- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-400, CWE-770
- Updated
- 2026-11-02
OSVAZL-28589
5.5
CVE-2022-48064 affecting package gdb for versions less than 11.2-6
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.
- Record
AZL-28589- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVBELL-CVE-2022-48064
5.5
- Record
BELL-CVE-2022-48064- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 21 moreShow less
OSVOESA-2023-1592
6.5
binutils security update
The GNU Binutils are a collection of binary tools. The main ones are: ld - the GNU linker. as - the GNU assembler. addr2line - Converts addresses into filenames and line numbers. ar - A utility for creating, modifying and extracting from archives. c++filt - Filter to demangle encoded C++ symbols. dlltool - Creates files for building and using DLLs. gold - A new, faster, ELF only linker, still in beta test. gprof - Displays profiling information. nlmconv - Converts object code into an NLM. nm - Lists symbols from object files. objcopy - Copies and translates object files. objdump - Displays information from object files. ranlib - Generates an index to the contents of an archive. readelf - Displays information from any ELF format object file. size - Lists the section sizes of an object or archive file. strings - Lists printable strings from files. trip - Discards symbols. windmc - A Windows compatible message compiler. windres - A compiler for Windows resource files.
Security Fix(es):
An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599.(CVE-2022-4285)
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.(CVE-2022-48064)
A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss of availability.(CVE-2023-1972)
- Record
OESA-2023-1592- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2023-1593
6.5
binutils security update
The GNU Binutils are a collection of binary tools. The main ones are: ld - the GNU linker. as - the GNU assembler. addr2line - Converts addresses into filenames and line numbers. ar - A utility for creating, modifying and extracting from archives. c++filt - Filter to demangle encoded C++ symbols. dlltool - Creates files for building and using DLLs. gold - A new, faster, ELF only linker, still in beta test. gprof - Displays profiling information. nlmconv - Converts object code into an NLM. nm - Lists symbols from object files. objcopy - Copies and translates object files. objdump - Displays information from object files. ranlib - Generates an index to the contents of an archive. readelf - Displays information from any ELF format object file. size - Lists the section sizes of an object or archive file. strings - Lists printable strings from files. trip - Discards symbols. windmc - A Windows compatible message compiler. windres - A compiler for Windows resource files.
Security Fix(es):
An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599.(CVE-2022-4285)
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.(CVE-2022-48064)
A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss of availability.(CVE-2023-1972)
- Record
OESA-2023-1593- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2023-1594
6.5
binutils security update
The GNU Binutils are a collection of binary tools. The main ones are: ld - the GNU linker. as - the GNU assembler. addr2line - Converts addresses into filenames and line numbers. ar - A utility for creating, modifying and extracting from archives. c++filt - Filter to demangle encoded C++ symbols. dlltool - Creates files for building and using DLLs. gold - A new, faster, ELF only linker, still in beta test. gprof - Displays profiling information. nlmconv - Converts object code into an NLM. nm - Lists symbols from object files. objcopy - Copies and translates object files. objdump - Displays information from object files. ranlib - Generates an index to the contents of an archive. readelf - Displays information from any ELF format object file. size - Lists the section sizes of an object or archive file. strings - Lists printable strings from files. trip - Discards symbols. windmc - A Windows compatible message compiler. windres - A compiler for Windows resource files.
Security Fix(es):
An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599.(CVE-2022-4285)
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.(CVE-2022-48064)
A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss of availability.(CVE-2023-1972)
- Record
OESA-2023-1594- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2023-1595
5.5
binutils security update
The GNU Binutils are a collection of binary tools. The main ones are: ld - the GNU linker. as - the GNU assembler. addr2line - Converts addresses into filenames and line numbers. ar - A utility for creating, modifying and extracting from archives. c++filt - Filter to demangle encoded C++ symbols. dlltool - Creates files for building and using DLLs. gold - A new, faster, ELF only linker, still in beta test. gprof - Displays profiling information. nlmconv - Converts object code into an NLM. nm - Lists symbols from object files. objcopy - Copies and translates object files. objdump - Displays information from object files. ranlib - Generates an index to the contents of an archive. readelf - Displays information from any ELF format object file. size - Lists the section sizes of an object or archive file. strings - Lists printable strings from files. trip - Discards symbols. windmc - A Windows compatible message compiler. windres - A compiler for Windows resource files.
Security Fix(es):
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.(CVE-2022-48064)
- Record
OESA-2023-1595- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2023-1596
5.5
binutils security update
The GNU Binutils are a collection of binary tools. The main ones are: ld - the GNU linker. as - the GNU assembler. addr2line - Converts addresses into filenames and line numbers. ar - A utility for creating, modifying and extracting from archives. c++filt - Filter to demangle encoded C++ symbols. dlltool - Creates files for building and using DLLs. gold - A new, faster, ELF only linker, still in beta test. gprof - Displays profiling information. nlmconv - Converts object code into an NLM. nm - Lists symbols from object files. objcopy - Copies and translates object files. objdump - Displays information from object files. ranlib - Generates an index to the contents of an archive. readelf - Displays information from any ELF format object file. size - Lists the section sizes of an object or archive file. strings - Lists printable strings from files. trip - Discards symbols. windmc - A Windows compatible message compiler. windres - A compiler for Windows resource files.
Security Fix(es):
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.(CVE-2022-48064)
- Record
OESA-2023-1596- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2025-1852
5.5
gdb security update
GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.
Security Fix(es):
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.(CVE-2022-48064)
- Record
OESA-2025-1852- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2025-1853
5.5
gdb security update
GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.
Security Fix(es):
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.(CVE-2022-48064)
- Record
OESA-2025-1853- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2025-1854
5.5
gdb security update
GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.
Security Fix(es):
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.(CVE-2022-48064)
- Record
OESA-2025-1854- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-48064
5.5
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.
- Record
UBUNTU-CVE-2022-48064- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVCLSA-2026-1776963378 No score
binutils: Fix of 8 CVEs
- CVE-2022-47007: fix memory leak in stab_demangle_v3_arg
- CVE-2022-47008: fix memory leak in make_tempdir and make_tempname
- CVE-2022-47011: fix memory leak in parse_stab_struct_fields
- CVE-2022-47010: fix memory leak in pr_function_type
- CVE-2022-48063: fix excessive memory allocation in load_specific_debug_section for corrupt ELF
- CVE-2022-48064: fix SHT_NOBITS section size sanity check in find_debug_info
- CVE-2022-48065: fix memory leak in find_abstract_instance on duplicate DW_AT_decl_file
- CVE-2022-38533: fix rewrite_elf_program_header looping on crafted file (strip/objcopy)
- Record
CLSA-2026-1776963378- Updated
- 2026-11-02
OSVCLSA-2026-1779093100 No score
binutils: Fix of 6 CVEs
- CVE-2022-38533: fix heap buffer overflow in bfd_getl32 from strip_main with crafted COFF file
- CVE-2022-47007: fix memory leak in stab_demangle_v3_arg in stabs.c
- CVE-2022-47008: fix memory leak in make_tempdir and make_tempname in bucomm.c
- CVE-2022-47010: fix memory leak in pr_function_type in prdbg.c
- CVE-2022-48064: fix excessive memory consumption in bfd_dwarf2_find_nearest_line_with_alt
- CVE-2023-1972: fix heap buffer overflow in _bfd_elf_slurp_version_tables
- Record
CLSA-2026-1779093100- Updated
- 2026-11-02
OSV No score
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.
- Record
CVE-2022-48064- Updated
- 2026-11-02
OSVDEBIAN-CVE-2022-48064 No score
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.
- Record
DEBIAN-CVE-2022-48064- Updated
- 2026-11-03
OSVopenSUSE-SU-2024:13411-1 No score
binutils-2.41-1.2 on GA media
These are all security issues fixed in the binutils-2.41-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13411-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:3695-1 No score
Security update for binutils
This update for binutils fixes the following issues:
Update to version 2.41 [jsc#PED-5778]:
-
The MIPS port now supports the Sony Interactive Entertainment Allegrex processor, used with the PlayStation Portable, which implements the MIPS II ISA along with a single-precision FPU and a few implementation-specific integer instructions.
-
Objdump's --private option can now be used on PE format files to display the fields in the file header and section headers.
-
New versioned release of libsframe: libsframe.so.1. This release introduces versioned symbols with version node name LIBSFRAME_1.0. This release also updates the ABI in an incompatible way: this includes removal of sframe_get_funcdesc_with_addr API, change in the behavior of sframe_fre_get_ra_offset and sframe_fre_get_fp_offset APIs.
-
SFrame Version 2 is now the default (and only) format version supported by gas, ld, readelf and objdump.
-
Add command-line option, --strip-section-headers, to objcopy and strip to remove ELF section header from ELF file.
-
The RISC-V port now supports the following new standard extensions:
- Zicond (conditional zero instructions)
- Zfa (additional floating-point instructions)
- Zvbb, Zvbc, Zvkg, Zvkned, Zvknh[ab], Zvksed, Zvksh, Zvkn, Zvknc, Zvkng, Zvks, Zvksc, Zvkg, Zvkt (vector crypto instructions)
-
The RISC-V port now supports the following vendor-defined extensions:
- XVentanaCondOps
-
Add support for Intel FRED, LKGS and AMX-COMPLEX instructions.
-
A new .insn directive is recognized by x86 gas.
-
Add SME2 support to the AArch64 port.
-
The linker now accepts a command line option of --remap-inputs <PATTERN>=<FILE> to relace any input file that matches <PATTERN> with <FILE>. In addition the option --remap-inputs-file=<FILE> can be used to specify a file containing any number of these remapping directives.
-
The linker command line option --print-map-locals can be used to include local symbols in a linker map. (ELF targets only).
-
For most ELF based targets, if the --enable-linker-version option is used then the version of the linker will be inserted as a string into the .comment section.
-
The linker script syntax has a new command for output sections: ASCIZ 'string' This will insert a zero-terminated string at the current location.
-
Add command-line option, -z nosectionheader, to omit ELF section header.
-
Contains fixes for these non-CVEs (not security bugs per upstreams SECURITY.md):
- bsc#1209642 aka CVE-2023-1579 aka PR29988
- bsc#1210297 aka CVE-2023-1972 aka PR30285
- bsc#1210733 aka CVE-2023-2222 aka PR29936
- bsc#1213458 aka CVE-2021-32256 aka PR105039 (gcc)
- bsc#1214565 aka CVE-2020-19726 aka PR26240
- bsc#1214567 aka CVE-2022-35206 aka PR29290
- bsc#1214579 aka CVE-2022-35205 aka PR29289
- bsc#1214580 aka CVE-2022-44840 aka PR29732
- bsc#1214604 aka CVE-2022-45703 aka PR29799
- bsc#1214611 aka CVE-2022-48065 aka PR29925
- bsc#1214619 aka CVE-2022-48064 aka PR29922
- bsc#1214620 aka CVE-2022-48063 aka PR29924
- bsc#1214623 aka CVE-2022-47696 aka PR29677
- bsc#1214624 aka CVE-2022-47695 aka PR29846
- bsc#1214625 aka CVE-2022-47673 aka PR29876
-
Fixed a compatibility problem caused by binutils-revert-rela.diff in SLE codestreams. Needed for update of glibc as that would otherwise pick up the broken relative relocs support. [bsc#1213282, jsc#PED-1435]
-
Document fixed CVEs:
- bsc#1208037 aka CVE-2023-25588 aka PR29677
- bsc#1208038 aka CVE-2023-25587 aka PR29846
- bsc#1208040 aka CVE-2023-25585 aka PR29892
- bsc#1208409 aka CVE-2023-0687 aka PR29444
-
Enable bpf-none cross target and add bpf-none to the multitarget set of supported targets.
-
Disable packed-relative-relocs for old codestreams. They generate buggy relocations when binutils-revert-rela.diff is active. [bsc#1206556]
-
Disable ZSTD debug section compress by default.
-
Enable zstd compression algorithm (instead of zlib) for debug info sections by…
- Record
SUSE-SU-2023:3695-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:3825-1 No score
Security update for binutils
This update for binutils fixes the following issues:
Update to version 2.41 [jsc#PED-5778]:
-
The MIPS port now supports the Sony Interactive Entertainment Allegrex processor, used with the PlayStation Portable, which implements the MIPS II ISA along with a single-precision FPU and a few implementation-specific integer instructions.
-
Objdump's --private option can now be used on PE format files to display the fields in the file header and section headers.
-
New versioned release of libsframe: libsframe.so.1. This release introduces versioned symbols with version node name LIBSFRAME_1.0. This release also updates the ABI in an incompatible way: this includes removal of sframe_get_funcdesc_with_addr API, change in the behavior of sframe_fre_get_ra_offset and sframe_fre_get_fp_offset APIs.
-
SFrame Version 2 is now the default (and only) format version supported by gas, ld, readelf and objdump.
-
Add command-line option, --strip-section-headers, to objcopy and strip to remove ELF section header from ELF file.
-
The RISC-V port now supports the following new standard extensions:
- Zicond (conditional zero instructions)
- Zfa (additional floating-point instructions)
- Zvbb, Zvbc, Zvkg, Zvkned, Zvknh[ab], Zvksed, Zvksh, Zvkn, Zvknc, Zvkng, Zvks, Zvksc, Zvkg, Zvkt (vector crypto instructions)
-
The RISC-V port now supports the following vendor-defined extensions:
- XVentanaCondOps
-
Add support for Intel FRED, LKGS and AMX-COMPLEX instructions.
-
A new .insn directive is recognized by x86 gas.
-
Add SME2 support to the AArch64 port.
-
The linker now accepts a command line option of --remap-inputs <PATTERN>=<FILE> to relace any input file that matches <PATTERN> with <FILE>. In addition the option --remap-inputs-file=<FILE> can be used to specify a file containing any number of these remapping directives.
-
The linker command line option --print-map-locals can be used to include local symbols in a linker map. (ELF targets only).
-
For most ELF based targets, if the --enable-linker-version option is used then the version of the linker will be inserted as a string into the .comment section.
-
The linker script syntax has a new command for output sections: ASCIZ 'string' This will insert a zero-terminated string at the current location.
-
Add command-line option, -z nosectionheader, to omit ELF section header.
-
Contains fixes for these non-CVEs (not security bugs per upstreams SECURITY.md):
- bsc#1209642 aka CVE-2023-1579 aka PR29988
- bsc#1210297 aka CVE-2023-1972 aka PR30285
- bsc#1210733 aka CVE-2023-2222 aka PR29936
- bsc#1213458 aka CVE-2021-32256 aka PR105039 (gcc)
- bsc#1214565 aka CVE-2020-19726 aka PR26240
- bsc#1214567 aka CVE-2022-35206 aka PR29290
- bsc#1214579 aka CVE-2022-35205 aka PR29289
- bsc#1214580 aka CVE-2022-44840 aka PR29732
- bsc#1214604 aka CVE-2022-45703 aka PR29799
- bsc#1214611 aka CVE-2022-48065 aka PR29925
- bsc#1214619 aka CVE-2022-48064 aka PR29922
- bsc#1214620 aka CVE-2022-48063 aka PR29924
- bsc#1214623 aka CVE-2022-47696 aka PR29677
- bsc#1214624 aka CVE-2022-47695 aka PR29846
- bsc#1214625 aka CVE-2022-47673 aka PR29876
-
This only existed only for a very short while in SLE-15, as the main variant in devel:gcc subsumed this in binutils-revert-rela.diff. Hence:
-
Document fixed CVEs:
- bsc#1208037 aka CVE-2023-25588 aka PR29677
- bsc#1208038 aka CVE-2023-25587 aka PR29846
- bsc#1208040 aka CVE-2023-25585 aka PR29892
- bsc#1208409 aka CVE-2023-0687 aka PR29444
-
Enable bpf-none cross target and add bpf-none to the multitarget set of supported targets.
-
Disable packed-relative-relocs for old codestreams. They generate buggy relocations when binutils-revert-rela.diff is active. [bsc#1206556]
-
Disable ZSTD debug section compress by default.
-
Enable zstd compression algorithm (instead of zlib) for debug info sections by default.
-
Pack libgprofng only for supported platforms.
-
Move…
- Record
SUSE-SU-2023:3825-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:0319-1 No score
Security update for gdb
This update for gdb fixes the following issues:
- Drop libdebuginfod1 BuildRequires/Recommends. The former isn't needed because there's a build requirement on libdebuginfod-devel already, which will pull the shared library. And the latter, because it's bogus since RPM auto generated dependency will take care of that requirement.
gdb was released in 13.2:
-
This version of GDB includes the following changes and enhancements:
-
Support for the following new targets has been added in both GDB and GDBserver:
* GNU/Linux/LoongArch (gdbserver) loongarch*-*-linux* * GNU/Linux/CSKY (gdbserver) csky*-*linux* -
The Windows native target now supports target async.
-
Floating-point support has now been added on LoongArch GNU/Linux.
-
New commands:
* set print nibbles [on|off] * show print nibbles * This controls whether the 'print/t' command will display binary values in groups of four bits, known as 'nibbles'. The default is 'off'. Various styling-related commands. See the gdb/NEWS file for more details. Various maintenance commands. These are normally aimed at GDB experts or developers. See the gdb/NEWS file for more details. -
Python API improvements:
* New Python API for instruction disassembly. * The new attribute 'locations' of gdb.Breakpoint returns a list of gdb.BreakpointLocation objects specifying the locations where the breakpoint is inserted into the debuggee. * New Python type gdb.BreakpointLocation. * New function gdb.format_address(ADDRESS, PROGSPACE, ARCHITECTURE) that formats ADDRESS as 'address ' * New function gdb.current_language that returns the name of the current language. Unlike gdb.parameter('language'), this will never return 'auto'. * New function gdb.print_options that returns a dictionary of the prevailing print options, in the form accepted by gdb.Value.format_string. * New method gdb.Frame.language that returns the name of the frame's language. * gdb.Value.format_string now uses the format provided by 'print', if it is called during a 'print' or other similar operation. * gdb.Value.format_string now accepts the 'summary' keyword. This can be used to request a shorter representation of a value, the way that 'set print frame-arguments scalars' does. * The gdb.register_window_type method now restricts the set of acceptable window names. The first character of a window's name must start with a character in the set [a-zA-Z], every subsequent character of a window's name must be in the set [-_.a-zA-Z0-9]. -
GDB/MI changes:
* MI version 1 is deprecated, and will be removed in GDB 14. * The async record stating the stopped reason 'breakpoint-hit' now contains an optional field locno. -
Miscellaneous improvements:
* gdb now supports zstd compressed debug sections (ELFCOMPRESS_ZSTD) for ELF. * New convenience variable $_inferior_thread_count contains the number of live threads in the current inferior. * New convenience variables $_hit_bpnum and $_hit_locno, set to the breakpoint number and the breakpoint location number of the breakpoint last hit. * The 'info breakpoints' now displays enabled breakpoint locations of disabled breakpoints as in the 'y-' state. * The format of 'disassemble /r' and 'record instruction-history /r' has changed to match the layout of GNU objdump when disassembling. * A new format '/b' has been introduce to provide the old behavior of '/r'. * The TUI no longer styles the source and assembly code highlighted by the current position indicator by default. You can however re-enable styling using the new 'set style tui-current-position' command. * It is now possible to use the 'document' command to document user-defined commands. * Support for memory tag data for AArch64 MTE.
*…
-
- Record
SUSE-SU-2024:0319-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:0898-1 No score
Security update for gdb
This update for gdb fixes the following issues:
- Drop libdebuginfod1 BuildRequires/Recommends. The former isn't needed because there's a build requirement on libdebuginfod-devel already, which will pull the shared library. And the latter, because it's bogus since RPM auto generated dependency will take care of that requirement.
gdb was released in 13.2:
-
This version of GDB includes the following changes and enhancements:
-
Support for the following new targets has been added in both GDB and GDBserver:
* GNU/Linux/LoongArch (gdbserver) loongarch*-*-linux* * GNU/Linux/CSKY (gdbserver) csky*-*linux* -
The Windows native target now supports target async.
-
Floating-point support has now been added on LoongArch GNU/Linux.
-
New commands:
* set print nibbles [on|off] * show print nibbles * This controls whether the 'print/t' command will display binary values in groups of four bits, known as 'nibbles'. The default is 'off'. Various styling-related commands. See the gdb/NEWS file for more details. Various maintenance commands. These are normally aimed at GDB experts or developers. See the gdb/NEWS file for more details. -
Python API improvements:
* New Python API for instruction disassembly. * The new attribute 'locations' of gdb.Breakpoint returns a list of gdb.BreakpointLocation objects specifying the locations where the breakpoint is inserted into the debuggee. * New Python type gdb.BreakpointLocation. * New function gdb.format_address(ADDRESS, PROGSPACE, ARCHITECTURE) that formats ADDRESS as 'address ' * New function gdb.current_language that returns the name of the current language. Unlike gdb.parameter('language'), this will never return 'auto'. * New function gdb.print_options that returns a dictionary of the prevailing print options, in the form accepted by gdb.Value.format_string. * New method gdb.Frame.language that returns the name of the frame's language. * gdb.Value.format_string now uses the format provided by 'print', if it is called during a 'print' or other similar operation. * gdb.Value.format_string now accepts the 'summary' keyword. This can be used to request a shorter representation of a value, the way that 'set print frame-arguments scalars' does. * The gdb.register_window_type method now restricts the set of acceptable window names. The first character of a window's name must start with a character in the set [a-zA-Z], every subsequent character of a window's name must be in the set [-_.a-zA-Z0-9]. -
GDB/MI changes:
* MI version 1 is deprecated, and will be removed in GDB 14. * The async record stating the stopped reason 'breakpoint-hit' now contains an optional field locno. -
Miscellaneous improvements:
* gdb now supports zstd compressed debug sections (ELFCOMPRESS_ZSTD) for ELF. * New convenience variable $_inferior_thread_count contains the number of live threads in the current inferior. * New convenience variables $_hit_bpnum and $_hit_locno, set to the breakpoint number and the breakpoint location number of the breakpoint last hit. * The 'info breakpoints' now displays enabled breakpoint locations of disabled breakpoints as in the 'y-' state. * The format of 'disassemble /r' and 'record instruction-history /r' has changed to match the layout of GNU objdump when disassembling. * A new format '/b' has been introduce to provide the old behavior of '/r'. * The TUI no longer styles the source and assembly code highlighted by the current position indicator by default. You can however re-enable styling using the new 'set style tui-current-position' command. * It is now possible to use the 'document' command to document user-defined commands. * Support for memory tag data for AArch64 MTE.
*…
-
- Record
SUSE-SU-2024:0898-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:0899-1 No score
Security update for gdb
This update for gdb fixes the following issues:
- Drop libdebuginfod1 BuildRequires/Recommends. The former isn't needed because there's a build requirement on libdebuginfod-devel already, which will pull the shared library. And the latter, because it's bogus since RPM auto generated dependency will take care of that requirement.
gdb was released in 13.2:
-
This version of GDB includes the following changes and enhancements:
-
Support for the following new targets has been added in both GDB and GDBserver:
* GNU/Linux/LoongArch (gdbserver) loongarch*-*-linux* * GNU/Linux/CSKY (gdbserver) csky*-*linux* -
The Windows native target now supports target async.
-
Floating-point support has now been added on LoongArch GNU/Linux.
-
New commands:
* set print nibbles [on|off] * show print nibbles * This controls whether the 'print/t' command will display binary values in groups of four bits, known as 'nibbles'. The default is 'off'. Various styling-related commands. See the gdb/NEWS file for more details. Various maintenance commands. These are normally aimed at GDB experts or developers. See the gdb/NEWS file for more details. -
Python API improvements:
* New Python API for instruction disassembly. * The new attribute 'locations' of gdb.Breakpoint returns a list of gdb.BreakpointLocation objects specifying the locations where the breakpoint is inserted into the debuggee. * New Python type gdb.BreakpointLocation. * New function gdb.format_address(ADDRESS, PROGSPACE, ARCHITECTURE) that formats ADDRESS as 'address ' * New function gdb.current_language that returns the name of the current language. Unlike gdb.parameter('language'), this will never return 'auto'. * New function gdb.print_options that returns a dictionary of the prevailing print options, in the form accepted by gdb.Value.format_string. * New method gdb.Frame.language that returns the name of the frame's language. * gdb.Value.format_string now uses the format provided by 'print', if it is called during a 'print' or other similar operation. * gdb.Value.format_string now accepts the 'summary' keyword. This can be used to request a shorter representation of a value, the way that 'set print frame-arguments scalars' does. * The gdb.register_window_type method now restricts the set of acceptable window names. The first character of a window's name must start with a character in the set [a-zA-Z], every subsequent character of a window's name must be in the set [-_.a-zA-Z0-9]. -
GDB/MI changes:
* MI version 1 is deprecated, and will be removed in GDB 14. * The async record stating the stopped reason 'breakpoint-hit' now contains an optional field locno. -
Miscellaneous improvements:
* gdb now supports zstd compressed debug sections (ELFCOMPRESS_ZSTD) for ELF. * New convenience variable $_inferior_thread_count contains the number of live threads in the current inferior. * New convenience variables $_hit_bpnum and $_hit_locno, set to the breakpoint number and the breakpoint location number of the breakpoint last hit. * The 'info breakpoints' now displays enabled breakpoint locations of disabled breakpoints as in the 'y-' state. * The format of 'disassemble /r' and 'record instruction-history /r' has changed to match the layout of GNU objdump when disassembling. * A new format '/b' has been introduce to provide the old behavior of '/r'. * The TUI no longer styles the source and assembly code highlighted by the current position indicator by default. You can however re-enable styling using the new 'set style tui-current-position' command. * It is now possible to use the 'document' command to document user-defined commands. * Support for memory tag data for AArch64 MTE.
*…
-
- Record
SUSE-SU-2024:0899-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:4413-1 No score
Security update for gdb
This update for gdb fixes the following issues:
Mention changes in GDB 14:
- GDB now supports the AArch64 Scalable Matrix Extension 2 (SME2), which includes a new 512 bit lookup table register named ZT0.
- GDB now supports the AArch64 Scalable Matrix Extension (SME), which includes a new matrix register named ZA, a new thread register TPIDR2 and a new vector length register SVG (streaming vector granule). GDB also supports tracking ZA state across signal frames. Some features are still under development or are dependent on ABI specs that are still in alpha stage. For example, manual function calls with ZA state don't have any special handling, and tracking of SVG changes based on DWARF information is still not implemented, but there are plans to do so in the future.
- GDB now recognizes the NO_COLOR environment variable and disables styling according to the spec. See https://no-color.org/. Styling can be re-enabled with 'set style enabled on'.
- The AArch64 'org.gnu.gdb.aarch64.pauth' Pointer Authentication feature string has been deprecated in favor of the 'org.gnu.gdb.aarch64.pauth_v2' feature string.
- GDB now has some support for integer types larger than 64 bits.
- Multi-target feature configuration. GDB now supports the individual configuration of remote targets' feature sets. Based on the current selection of a target, the commands 'set remote <name>-packet (on|off|auto)' and 'show remote <name>-packet' can be used to configure a target's feature packet and to display its configuration, respectively.
- GDB has initial built-in support for the Debugger Adapter Protocol.
- For the break command, multiple uses of the 'thread' or 'task' keywords will now give an error instead of just using the thread or task id from the last instance of the keyword. E.g.: break foo thread 1 thread 2 will now give an error rather than using 'thread 2'.
- For the watch command, multiple uses of the 'task' keyword will now give an error instead of just using the task id from the last instance of the keyword. E.g.: watch my_var task 1 task 2 will now give an error rather than using 'task 2'. The 'thread' keyword already gave an error when used multiple times with the watch command, this remains unchanged.
- The 'set print elements' setting now helps when printing large arrays. If an array would otherwise exceed max-value-size, but 'print elements' is set such that the size of elements to print is less than or equal to 'max-value-size', GDB will now still print the array, however only 'max-value-size' worth of data will be added into the value history.
- For both the break and watch commands, it is now invalid to use both the 'thread' and 'task' keywords within the same command. For example the following commnds will now give an error: break foo thread 1 task 1 watch var thread 2 task 3
- The printf command now accepts a '%V' output format which will format an expression just as the 'print' command would. Print options can be placed withing '[...]' after the '%V' to modify how the value is printed. E.g: printf '%V', some_array printf '%V[-array-indexes on]', some_array will print the array without, or with array indexes included, just as the array would be printed by the 'print' command. This functionality is also available for dprintf when dprintf-style is 'gdb'.
- When the printf command requires a string to be fetched from the inferior, GDB now uses the existing 'max-value-size' setting to the limit the memory allocated within GDB. The default 'max-value-size' is 64k. To print longer strings you should increase 'max-value-size'.
- The Ada 2022 Enum_Rep and Enum_Val attributes are now supported.
- The Ada 2022 target name symbol ('@') is now supported by the Ada expression parser.
- The 'list' command now accepts '.' as an argument, which tells GDB to print the location around the point of execution…
- Record
SUSE-SU-2024:4413-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:4414-1 No score
Security update for gdb
This update for gdb fixes the following issues:
Mention changes in GDB 14:
- GDB now supports the AArch64 Scalable Matrix Extension 2 (SME2), which includes a new 512 bit lookup table register named ZT0.
- GDB now supports the AArch64 Scalable Matrix Extension (SME), which includes a new matrix register named ZA, a new thread register TPIDR2 and a new vector length register SVG (streaming vector granule). GDB also supports tracking ZA state across signal frames. Some features are still under development or are dependent on ABI specs that are still in alpha stage. For example, manual function calls with ZA state don't have any special handling, and tracking of SVG changes based on DWARF information is still not implemented, but there are plans to do so in the future.
- GDB now recognizes the NO_COLOR environment variable and disables styling according to the spec. See https://no-color.org/. Styling can be re-enabled with 'set style enabled on'.
- The AArch64 'org.gnu.gdb.aarch64.pauth' Pointer Authentication feature string has been deprecated in favor of the 'org.gnu.gdb.aarch64.pauth_v2' feature string.
- GDB now has some support for integer types larger than 64 bits.
- Multi-target feature configuration. GDB now supports the individual configuration of remote targets' feature sets. Based on the current selection of a target, the commands 'set remote <name>-packet (on|off|auto)' and 'show remote <name>-packet' can be used to configure a target's feature packet and to display its configuration, respectively.
- GDB has initial built-in support for the Debugger Adapter Protocol.
- For the break command, multiple uses of the 'thread' or 'task' keywords will now give an error instead of just using the thread or task id from the last instance of the keyword. E.g.: break foo thread 1 thread 2 will now give an error rather than using 'thread 2'.
- For the watch command, multiple uses of the 'task' keyword will now give an error instead of just using the task id from the last instance of the keyword. E.g.: watch my_var task 1 task 2 will now give an error rather than using 'task 2'. The 'thread' keyword already gave an error when used multiple times with the watch command, this remains unchanged.
- The 'set print elements' setting now helps when printing large arrays. If an array would otherwise exceed max-value-size, but 'print elements' is set such that the size of elements to print is less than or equal to 'max-value-size', GDB will now still print the array, however only 'max-value-size' worth of data will be added into the value history.
- For both the break and watch commands, it is now invalid to use both the 'thread' and 'task' keywords within the same command. For example the following commnds will now give an error: break foo thread 1 task 1 watch var thread 2 task 3
- The printf command now accepts a '%V' output format which will format an expression just as the 'print' command would. Print options can be placed withing '[...]' after the '%V' to modify how the value is printed. E.g: printf '%V', some_array printf '%V[-array-indexes on]', some_array will print the array without, or with array indexes included, just as the array would be printed by the 'print' command. This functionality is also available for dprintf when dprintf-style is 'gdb'.
- When the printf command requires a string to be fetched from the inferior, GDB now uses the existing 'max-value-size' setting to the limit the memory allocated within GDB. The default 'max-value-size' is 64k. To print longer strings you should increase 'max-value-size'.
- The Ada 2022 Enum_Rep and Enum_Val attributes are now supported.
- The Ada 2022 target name symbol ('@') is now supported by the Ada expression parser.
- The 'list' command now accepts '.' as an argument, which tells GDB to print the location around the point of execution…
- Record
SUSE-SU-2024:4414-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gdbAzure Linux:2 |
before 11.2-6 | 11.2-6 |
binutilsAlpaquita:23 |
2.39-r2 up to 2.40-r2 | 2.40-r2 |
binutilsBellSoft Hardened Containers:23 |
2.39-r2 up to 2.40-r2 | 2.40-r2 |
binutilsTuxCare:AlmaLinux:9.6 |
before 2.35.2-63.el9.tuxcare.els9 | 2.35.2-63.el9.tuxcare.els9 |
binutils-develTuxCare:AlmaLinux:9.6 |
before 2.35.2-63.el9.tuxcare.els9 | 2.35.2-63.el9.tuxcare.els9 |
binutils-goldTuxCare:AlmaLinux:9.6 |
before 2.35.2-63.el9.tuxcare.els9 | 2.35.2-63.el9.tuxcare.els9 |
cross-binutils-aarch64TuxCare:AlmaLinux:9.6 |
before 2.35.2-63.el9.tuxcare.els9 | 2.35.2-63.el9.tuxcare.els9 |
cross-binutils-ppc64leTuxCare:AlmaLinux:9.6 |
before 2.35.2-63.el9.tuxcare.els9 | 2.35.2-63.el9.tuxcare.els9 |
cross-binutils-s390xTuxCare:AlmaLinux:9.6 |
before 2.35.2-63.el9.tuxcare.els9 | 2.35.2-63.el9.tuxcare.els9 |
binutilsTuxCare:AlmaLinux:9.2 |
before 2.35.2-37.el9.tuxcare.els11 | 2.35.2-37.el9.tuxcare.els11 |
Show 102 moreShow less
| Package | Affected | Fixed |
|---|---|---|
binutils-develTuxCare:AlmaLinux:9.2 |
before 2.35.2-37.el9.tuxcare.els11 | 2.35.2-37.el9.tuxcare.els11 |
binutils-goldTuxCare:AlmaLinux:9.2 |
before 2.35.2-37.el9.tuxcare.els11 | 2.35.2-37.el9.tuxcare.els11 |
cross-binutils-aarch64TuxCare:AlmaLinux:9.2 |
before 2.35.2-37.el9.tuxcare.els11 | 2.35.2-37.el9.tuxcare.els11 |
cross-binutils-ppc64leTuxCare:AlmaLinux:9.2 |
before 2.35.2-37.el9.tuxcare.els11 | 2.35.2-37.el9.tuxcare.els11 |
cross-binutils-s390xTuxCare:AlmaLinux:9.2 |
before 2.35.2-37.el9.tuxcare.els11 | 2.35.2-37.el9.tuxcare.els11 |
binutilsDebian:12 |
before 2.40-2 | 2.40-2 |
binutilsDebian:13 |
before 2.40-2 | 2.40-2 |
binutilsDebian:14 |
before 2.40-2 | 2.40-2 |
binutilsopenEuler:22.03-LTS |
before 2.37-25.oe2203 | 2.37-25.oe2203 |
binutilsopenEuler:22.03-LTS-SP1 |
before 2.37-23.oe2203sp1 | 2.37-23.oe2203sp1 |
binutilsopenEuler:22.03-LTS-SP2 |
before 2.37-23.oe2203sp2 | 2.37-23.oe2203sp2 |
binutilsopenEuler:20.03-LTS-SP1 |
before 2.34-28.oe1 | 2.34-28.oe1 |
binutilsopenEuler:20.03-LTS-SP3 |
before 2.34-28.oe1 | 2.34-28.oe1 |
gdbopenEuler:22.03-LTS-SP4 |
before 11.1-10.oe2203sp4 | 11.1-10.oe2203sp4 |
gdbopenEuler:20.03-LTS-SP4 |
before 9.2-10.oe2003sp4 | 9.2-10.oe2003sp4 |
gdbopenEuler:22.03-LTS-SP3 |
before 11.1-10.oe2203sp3 | 11.1-10.oe2203sp3 |
binutilsSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 2.41-9.53.1 | 2.41-9.53.1 |
binutilsSUSE:Linux Enterprise Server 12 SP5 |
before 2.41-9.53.1 | 2.41-9.53.1 |
binutilsSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 2.41-9.53.1 | 2.41-9.53.1 |
binutilsSUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
binutilsSUSE:Linux Enterprise Module for Basesystem 15 SP5 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
binutilsSUSE:Linux Enterprise Module for Development Tools 15 SP4 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
binutilsSUSE:Linux Enterprise Module for Development Tools 15 SP5 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
binutilsSUSE:Linux Enterprise Module for Package Hub 15 SP4 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
binutilsSUSE:Linux Enterprise Module for Package Hub 15 SP5 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
binutilsSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
binutilsSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
binutilsSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
binutilsSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
binutilsSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
binutilsSUSE:Linux Enterprise Server 15 SP2-LTSS |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
binutilsSUSE:Linux Enterprise Server 15 SP3-LTSS |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
binutilsSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
binutilsSUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
binutilsSUSE:Linux Enterprise Server for SAP Applications 15 SP3 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
binutilsSUSE:Manager Proxy 4.2 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
binutilsSUSE:Manager Server 4.2 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
binutilsSUSE:Enterprise Storage 7.1 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
binutilsopenSUSE:Leap 15.4 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
binutilsopenSUSE:Leap 15.5 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
cross-aarch64-binutilsopenSUSE:Leap 15.5 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
cross-arm-binutilsopenSUSE:Leap 15.5 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
cross-avr-binutilsopenSUSE:Leap 15.5 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
cross-epiphany-binutilsopenSUSE:Leap 15.5 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
cross-hppa-binutilsopenSUSE:Leap 15.5 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
cross-hppa64-binutilsopenSUSE:Leap 15.5 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
cross-i386-binutilsopenSUSE:Leap 15.5 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
cross-ia64-binutilsopenSUSE:Leap 15.5 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
cross-m68k-binutilsopenSUSE:Leap 15.5 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
cross-mips-binutilsopenSUSE:Leap 15.5 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
cross-ppc-binutilsopenSUSE:Leap 15.5 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
cross-ppc64-binutilsopenSUSE:Leap 15.5 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
cross-ppc64le-binutilsopenSUSE:Leap 15.5 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
cross-riscv64-binutilsopenSUSE:Leap 15.5 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
cross-rx-binutilsopenSUSE:Leap 15.5 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
cross-s390-binutilsopenSUSE:Leap 15.5 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
cross-s390x-binutilsopenSUSE:Leap 15.5 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
cross-sparc-binutilsopenSUSE:Leap 15.5 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
cross-sparc64-binutilsopenSUSE:Leap 15.5 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
cross-spu-binutilsopenSUSE:Leap 15.5 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
cross-x86_64-binutilsopenSUSE:Leap 15.5 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
cross-xtensa-binutilsopenSUSE:Leap 15.5 |
before 2.41-150100.7.46.1 | 2.41-150100.7.46.1 |
gdbSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 13.2-2.23.1 | 13.2-2.23.1 |
gdbSUSE:Linux Enterprise Server 12 SP5 |
before 13.2-2.23.1 | 13.2-2.23.1 |
gdbSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 13.2-2.23.1 | 13.2-2.23.1 |
gdbSUSE:Linux Enterprise Module for Development Tools 15 SP5 |
before 13.2-150400.15.14.1 | 13.2-150400.15.14.1 |
gdbSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS |
before 13.2-150400.15.14.1 | 13.2-150400.15.14.1 |
gdbSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS |
before 13.2-150400.15.14.1 | 13.2-150400.15.14.1 |
gdbSUSE:Linux Enterprise Server 15 SP4-LTSS |
before 13.2-150400.15.14.1 | 13.2-150400.15.14.1 |
gdbSUSE:Linux Enterprise Server for SAP Applications 15 SP4 |
before 13.2-150400.15.14.1 | 13.2-150400.15.14.1 |
gdbopenSUSE:Leap 15.5 |
before 13.2-150400.15.14.1 | 13.2-150400.15.14.1 |
gdb-testresultsopenSUSE:Leap 15.5 |
before 13.2-150400.15.14.4 | 13.2-150400.15.14.4 |
gdbSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 13.2-150100.8.39.1 | 13.2-150100.8.39.1 |
gdbSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS |
before 13.2-150100.8.39.1 | 13.2-150100.8.39.1 |
gdbSUSE:Linux Enterprise Server 15 SP2-LTSS |
before 13.2-150100.8.39.1 | 13.2-150100.8.39.1 |
gdbSUSE:Linux Enterprise Server 15 SP3-LTSS |
before 13.2-150100.8.39.1 | 13.2-150100.8.39.1 |
gdbSUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 13.2-150100.8.39.1 | 13.2-150100.8.39.1 |
gdbSUSE:Linux Enterprise Server for SAP Applications 15 SP3 |
before 13.2-150100.8.39.1 | 13.2-150100.8.39.1 |
gdbSUSE:Enterprise Storage 7.1 |
before 13.2-150100.8.39.1 | 13.2-150100.8.39.1 |
gdbSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 14.2-150100.8.45.1 | 14.2-150100.8.45.1 |
gdbSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS |
before 14.2-150100.8.45.1 | 14.2-150100.8.45.1 |
gdbSUSE:Linux Enterprise Server 15 SP2-LTSS |
before 14.2-150100.8.45.1 | 14.2-150100.8.45.1 |
gdbSUSE:Linux Enterprise Server 15 SP3-LTSS |
before 14.2-150100.8.45.1 | 14.2-150100.8.45.1 |
gdbSUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 14.2-150100.8.45.1 | 14.2-150100.8.45.1 |
gdbSUSE:Linux Enterprise Server for SAP Applications 15 SP3 |
before 14.2-150100.8.45.1 | 14.2-150100.8.45.1 |
gdbSUSE:Enterprise Storage 7.1 |
before 14.2-150100.8.45.1 | 14.2-150100.8.45.1 |
gdbSUSE:Linux Enterprise Module for Development Tools 15 SP5 |
before 14.2-150400.15.20.1 | 14.2-150400.15.20.1 |
gdbSUSE:Linux Enterprise Module for Development Tools 15 SP6 |
before 14.2-150400.15.20.1 | 14.2-150400.15.20.1 |
gdbSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS |
before 14.2-150400.15.20.1 | 14.2-150400.15.20.1 |
gdbSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS |
before 14.2-150400.15.20.1 | 14.2-150400.15.20.1 |
gdbSUSE:Linux Enterprise Server 15 SP4-LTSS |
before 14.2-150400.15.20.1 | 14.2-150400.15.20.1 |
gdbSUSE:Linux Enterprise Server for SAP Applications 15 SP4 |
before 14.2-150400.15.20.1 | 14.2-150400.15.20.1 |
gdbopenSUSE:Leap 15.5 |
before 14.2-150400.15.20.1 | 14.2-150400.15.20.1 |
gdb-testresultsopenSUSE:Leap 15.5 |
before 14.2-150400.15.20.1 | 14.2-150400.15.20.1 |
gdbopenSUSE:Leap 15.6 |
before 14.2-150400.15.20.1 | 14.2-150400.15.20.1 |
gdb-testresultsopenSUSE:Leap 15.6 |
before 14.2-150400.15.20.1 | 14.2-150400.15.20.1 |
binutilsUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 2.23.52.20130913-0ubuntu12.23.90.20131017-1ubuntu12.23.90.20131116-1ubuntu12.23.91.20131123-1ubuntu12.24-1ubuntu1 Show 20 moreShow less2.24-1ubuntu22.24-2ubuntu12.24-2ubuntu22.24-2ubuntu32.24-4ubuntu12.24-5ubuntu12.24-5ubuntu22.24-5ubuntu32.24-5ubuntu3.12.24-5ubuntu132.24-5ubuntu142.24-5ubuntu14.12.24-5ubuntu14.22.24-5ubuntu14.2+esm12.24-5ubuntu14.2+esm22.24-5ubuntu14.2+esm32.24-5ubuntu14.2+esm52.24-5ubuntu14.2+esm62.24-5ubuntu14.2+esm72.24-5ubuntu14.2+esm8 |
None known |
binutilsUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 2.25.1-6ubuntu12.25.51.20151022-0ubuntu22.25.51.20151022-0ubuntu32.25.51.20151027-0ubuntu12.25.51.20151028-0ubuntu1 Show 37 moreShow less2.25.51.20151106-0ubuntu12.25.51.20151113-1ubuntu12.25.51.20151113-2ubuntu12.25.90.20151125-1ubuntu12.25.90.20151125-2ubuntu12.25.90.20151211-0ubuntu12.25.90.20151211-0ubuntu22.25.90.20160101-1ubuntu12.25.90.20160101-1ubuntu22.26-2ubuntu12.26-3ubuntu12.26-4ubuntu12.26-5ubuntu12.26-6ubuntu12.26-7ubuntu22.26-8ubuntu12.26-8ubuntu22.26-8ubuntu2.12.26.1-1ubuntu1~16.042.26.1-1ubuntu1~16.04.12.26.1-1ubuntu1~16.04.32.26.1-1ubuntu1~16.04.42.26.1-1ubuntu1~16.04.52.26.1-1ubuntu1~16.04.62.26.1-1ubuntu1~16.04.72.26.1-1ubuntu1~16.04.82.26.1-1ubuntu1~16.04.8+esm12.26.1-1ubuntu1~16.04.8+esm32.26.1-1ubuntu1~16.04.8+esm42.26.1-1ubuntu1~16.04.8+esm52.26.1-1ubuntu1~16.04.8+esm62.26.1-1ubuntu1~16.04.8+esm72.26.1-1ubuntu1~16.04.8+esm92.26.1-1ubuntu1~16.04.8+esm112.26.1-1ubuntu1~16.04.8+esm122.26.1-1ubuntu1~16.04.8+esm132.26.1-1ubuntu1~16.04.8+esm14 |
None known |
binutilsUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 2.29.1-4ubuntu12.29.1-6ubuntu12.29.1-7ubuntu12.29.1-8ubuntu12.29.1-10ubuntu1 Show 25 moreShow less2.29.1-12ubuntu12.30-4ubuntu12.30-5ubuntu12.30-7ubuntu12.30-8ubuntu12.30-9ubuntu12.30-10ubuntu12.30-11ubuntu12.30-14ubuntu22.30-15ubuntu12.30-20ubuntu2~18.042.30-21ubuntu1~18.042.30-21ubuntu1~18.04.12.30-21ubuntu1~18.04.22.30-21ubuntu1~18.04.32.30-21ubuntu1~18.04.42.30-21ubuntu1~18.04.52.30-21ubuntu1~18.04.72.30-21ubuntu1~18.04.82.30-21ubuntu1~18.04.92.30-21ubuntu1~18.04.9+esm12.30-21ubuntu1~18.04.9+esm32.30-21ubuntu1~18.04.9+esm42.30-21ubuntu1~18.04.9+esm52.30-21ubuntu1~18.04.9+esm13 |
None known |
binutilsUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 2.33-2ubuntu12.33.1-1ubuntu12.33.1-5ubuntu12.33.1-6ubuntu12.33.1-6ubuntu3 Show 18 moreShow less2.33.90.20200122-1ubuntu22.34-1ubuntu12.34-3ubuntu12.34-4ubuntu12.34-5ubuntu12.34-6ubuntu12.34-6ubuntu1.12.34-6ubuntu1.32.34-6ubuntu1.42.34-6ubuntu1.52.34-6ubuntu1.62.34-6ubuntu1.72.34-6ubuntu1.82.34-6ubuntu1.92.34-6ubuntu1.102.34-6ubuntu1.112.34-6ubuntu1.11+esm12.34-6ubuntu1.11+esm2 |
None known |
binutilsUbuntu:22.04:LTS |
All versions, plus listed versions 2.37-7ubuntu12.37-9ubuntu12.37-10ubuntu12.37.50.20220106-2ubuntu12.37.90.20220126-0ubuntu1 Show 16 moreShow less2.37.90.20220130-0ubuntu22.38-1ubuntu12.38-2ubuntu12.38-3ubuntu12.38-4ubuntu22.38-4ubuntu2.12.38-4ubuntu2.22.38-4ubuntu2.32.38-4ubuntu2.42.38-4ubuntu2.52.38-4ubuntu2.62.38-4ubuntu2.72.38-4ubuntu2.82.38-4ubuntu2.102.38-4ubuntu2.112.38-4ubuntu2.12 |
None known |
binutilsopenSUSE:Tumbleweed |
before 2.41-1.2 | 2.41-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-48064 is a medium vulnerability (CVSS 5.5) in Gnu Binutils, published August 22, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.61%, the 49th percentile. Fixed in gdb 11.2-6.
References
sourceware.org/bugzilla/show_bug.cgi?id=29922
sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=8f2c64de86bc3d7556121fe296dd679000283931
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3XKYUAIORNQ32IZUOZFURECZKEXOHX7Z
security.netapp.com/advisory/ntap-20231006-0008
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NSUNHSOWWLLNGHRM5TUBNCJHEYHPDX2M
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KGSKF4GH7425S6XFDQMWTJGD5U47BAZN
Show 79 moreShow less
nvd.nist.gov/vuln/detail/CVE-2022-48064
sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=8f2c64de86bc3d7556121fe296dd679000283931
lists.fedoraproject.org/archives/list/[email protected]/message/3XKYUAIORNQ32IZUOZFURECZKEXOHX7Z
lists.fedoraproject.org/archives/list/[email protected]/message/NSUNHSOWWLLNGHRM5TUBNCJHEYHPDX2M
lists.fedoraproject.org/archives/list/[email protected]/message/KGSKF4GH7425S6XFDQMWTJGD5U47BAZN
github.com/advisories/GHSA-p564-948g-fpq9
docs.bell-sw.com/security/cves/CVE-2022-48064
errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1776963378.html
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1779093100.html
github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48064.json
security-tracker.debian.org/tracker/CVE-2022-48064
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1592
nvd.nist.gov/vuln/detail/CVE-2022-4285
nvd.nist.gov/vuln/detail/CVE-2023-1972
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1593
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1594
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1595
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1596
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1852
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1853
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1854
suse.com/support/update/announcement/2023/suse-su-20233695-1
bugzilla.suse.com/1200962
bugzilla.suse.com/1206080
bugzilla.suse.com/1206556
bugzilla.suse.com/1208037
bugzilla.suse.com/1208038
bugzilla.suse.com/1208040
bugzilla.suse.com/1208409
bugzilla.suse.com/1209642
bugzilla.suse.com/1210297
bugzilla.suse.com/1210733
bugzilla.suse.com/1213282
bugzilla.suse.com/1213458
bugzilla.suse.com/1214565
bugzilla.suse.com/1214567
bugzilla.suse.com/1214579
bugzilla.suse.com/1214580
bugzilla.suse.com/1214604
bugzilla.suse.com/1214611
bugzilla.suse.com/1214619
bugzilla.suse.com/1214620
bugzilla.suse.com/1214623
bugzilla.suse.com/1214624
bugzilla.suse.com/1214625
suse.com/security/cve/CVE-2020-19726
suse.com/security/cve/CVE-2021-32256
suse.com/security/cve/CVE-2022-35205
suse.com/security/cve/CVE-2022-35206
suse.com/security/cve/CVE-2022-4285
suse.com/security/cve/CVE-2022-44840
suse.com/security/cve/CVE-2022-45703
suse.com/security/cve/CVE-2022-47673
suse.com/security/cve/CVE-2022-47695
suse.com/security/cve/CVE-2022-47696
suse.com/security/cve/CVE-2022-48063
suse.com/security/cve/CVE-2022-48064
suse.com/security/cve/CVE-2022-48065
suse.com/security/cve/CVE-2023-0687
suse.com/security/cve/CVE-2023-1579
suse.com/security/cve/CVE-2023-1972
suse.com/security/cve/CVE-2023-2222
suse.com/security/cve/CVE-2023-25585
suse.com/security/cve/CVE-2023-25587
suse.com/security/cve/CVE-2023-25588
suse.com/support/update/announcement/2023/suse-su-20233825-1
suse.com/support/update/announcement/2024/suse-su-20240319-1
bugzilla.suse.com/1068950
bugzilla.suse.com/1081527
bugzilla.suse.com/1211052
suse.com/security/cve/CVE-2017-16829
suse.com/security/cve/CVE-2018-7208
suse.com/support/update/announcement/2024/suse-su-20240898-1
suse.com/support/update/announcement/2024/suse-su-20240899-1
suse.com/support/update/announcement/2024/suse-su-20244413-1
bugzilla.suse.com/1220490
suse.com/support/update/announcement/2024/suse-su-20244414-1
ubuntu.com/security/CVE-2022-48064
cve.org/CVERecord?id=CVE-2022-48064
Left out here: the rest of 7 source descriptions. The JSON record has them.