{"id":"CVE-2022-38533","aliases":["ALPINE-CVE-2022-38533","AZL-10714","BELL-CVE-2022-38533","CLSA-2022-1670606482","CLSA-2026-1776963378","CLSA-2026-1779093100","DEBIAN-CVE-2022-38533","EUVD-2022-41112","GHSA-7v55-wrg9-5rfp","MGASA-2022-0425","SUSE-SU-2022:4146-1","SUSE-SU-2022:4277-1","UBUNTU-CVE-2022-38533","USN-5762-1","USN-6544-1","openSUSE-SU-2024:12631-1"],"status":"published","title":"In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32...","description":"In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in strip-new via a crafted file.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00334,"percentile":0.26983,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2022-08-25T00:00:00Z","modified":"2026-11-04T02:31:06Z","fixes":[{"ecosystem":"Alpine:v3.17","package":"binutils","fixed_in":["2.39-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"binutils","fixed_in":["2.39-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"binutils","fixed_in":["2.39-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"binutils","fixed_in":["2.39-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"binutils","fixed_in":["2.39-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"binutils","fixed_in":["2.39-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"binutils","fixed_in":["2.39-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"binutils","fixed_in":["2.39-r2"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"binutils","fixed_in":["2.37-4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils","fixed_in":["2.26.1-1ubuntu1~16.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-aarch64-linux-gnu","fixed_in":["2.26.1-1ubuntu1~16.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-alpha-linux-gnu","fixed_in":["2.26.1-1ubuntu1~16.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-arm-linux-gnueabi","fixed_in":["2.26.1-1ubuntu1~16.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-arm-linux-gnueabihf","fixed_in":["2.26.1-1ubuntu1~16.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-dev","fixed_in":["2.26.1-1ubuntu1~16.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-doc","fixed_in":["2.26.1-1ubuntu1~16.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-hppa-linux-gnu","fixed_in":["2.26.1-1ubuntu1~16.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-hppa64-linux-gnu","fixed_in":["2.26.1-1ubuntu1~16.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-m68k-linux-gnu","fixed_in":["2.26.1-1ubuntu1~16.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-mips-linux-gnu","fixed_in":["2.26.1-1ubuntu1~16.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-mips64-linux-gnuabi64","fixed_in":["2.26.1-1ubuntu1~16.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-mips64el-linux-gnuabi64","fixed_in":["2.26.1-1ubuntu1~16.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-mipsel-linux-gnu","fixed_in":["2.26.1-1ubuntu1~16.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-multiarch","fixed_in":["2.26.1-1ubuntu1~16.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-multiarch-dev","fixed_in":["2.26.1-1ubuntu1~16.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-powerpc-linux-gnu","fixed_in":["2.26.1-1ubuntu1~16.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-powerpc-linux-gnuspe","fixed_in":["2.26.1-1ubuntu1~16.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-powerpc64-linux-gnu","fixed_in":["2.26.1-1ubuntu1~16.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-powerpc64le-linux-gnu","fixed_in":["2.26.1-1ubuntu1~16.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-s390x-linux-gnu","fixed_in":["2.26.1-1ubuntu1~16.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-sh4-linux-gnu","fixed_in":["2.26.1-1ubuntu1~16.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-source","fixed_in":["2.26.1-1ubuntu1~16.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-sparc64-linux-gnu","fixed_in":["2.26.1-1ubuntu1~16.04.10+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"binutils","fixed_in":["2.39.50.20221208-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"binutils","fixed_in":["2.39.50.20221208-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"binutils","fixed_in":["2.39.50.20221208-2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"binutils","fixed_in":["2.24-5ubuntu14.2+esm6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"binutils","fixed_in":["2.26.1-1ubuntu1~16.04.8+esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"binutils","fixed_in":["2.30-21ubuntu1~18.04.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"binutils","fixed_in":["2.34-6ubuntu1.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"binutils","fixed_in":["2.38-4ubuntu2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.17","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-r2"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37-4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-aarch64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-alpha-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-arm-linux-gnueabi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-arm-linux-gnueabihf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-hppa-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-hppa64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-m68k-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-mips-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-mips64-linux-gnuabi64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-mips64el-linux-gnuabi64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-mipsel-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-multiarch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-multiarch-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-powerpc-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-powerpc-linux-gnuspe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-powerpc64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-powerpc64le-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-s390x-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-sh4-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-sparc64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-63.el9.tuxcare.els9"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"binutils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-63.el9.tuxcare.els9"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"binutils-gold","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-63.el9.tuxcare.els9"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cross-binutils-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-63.el9.tuxcare.els9"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cross-binutils-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-63.el9.tuxcare.els9"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cross-binutils-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-63.el9.tuxcare.els9"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-37.el9.tuxcare.els11"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"binutils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-37.el9.tuxcare.els11"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"binutils-gold","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-37.el9.tuxcare.els11"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"cross-binutils-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-37.el9.tuxcare.els11"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"cross-binutils-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-37.el9.tuxcare.els11"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"cross-binutils-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-37.el9.tuxcare.els11"}]}],"bundled":6},{"source":"osv","ecosystem":"Debian:12","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39.50.20221208-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39.50.20221208-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39.50.20221208-2"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.36.1-1.5.mga8"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:8","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.1-5.1.mga8"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"cross-aarch64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"cross-arm-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"cross-avr-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"cross-epiphany-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"cross-hppa-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"cross-hppa64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"cross-i386-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"cross-ia64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"cross-m68k-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"cross-mips-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"cross-ppc-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"cross-ppc64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"cross-ppc64le-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"cross-riscv64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"cross-rx-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"cross-s390-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"cross-s390x-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"cross-sparc-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"cross-sparc64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"cross-spu-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"cross-x86_64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"cross-aarch64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"cross-arm-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"cross-avr-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"cross-epiphany-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"cross-hppa-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"cross-hppa64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"cross-i386-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"cross-ia64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"cross-m68k-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"cross-mips-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"cross-ppc-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"cross-ppc64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"cross-ppc64le-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"cross-riscv64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"cross-rx-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"cross-s390-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"cross-s390x-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"cross-sparc-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"cross-sparc64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"cross-spu-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"cross-x86_64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-150100.7.40.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-9.50.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-9.50.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-9.50.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-9.50.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"cross-ppc-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-9.50.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"cross-spu-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-9.50.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-9.50.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-9.50.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-9.50.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-9.50.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-9.50.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24-5ubuntu14.2+esm6"}]}],"versions":["2.23.52.20130913-0ubuntu1","2.23.90.20131017-1ubuntu1","2.23.90.20131116-1ubuntu1","2.23.91.20131123-1ubuntu1","2.24-1ubuntu1","2.24-1ubuntu2","2.24-2ubuntu1","2.24-2ubuntu2","2.24-2ubuntu3","2.24-4ubuntu1","2.24-5ubuntu1","2.24-5ubuntu2","2.24-5ubuntu3","2.24-5ubuntu3.1","2.24-5ubuntu13","2.24-5ubuntu14","2.24-5ubuntu14.1","2.24-5ubuntu14.2","2.24-5ubuntu14.2+esm1","2.24-5ubuntu14.2+esm2","2.24-5ubuntu14.2+esm3","2.24-5ubuntu14.2+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.8+esm5"}]}],"versions":["2.25.1-6ubuntu1","2.25.51.20151022-0ubuntu2","2.25.51.20151022-0ubuntu3","2.25.51.20151027-0ubuntu1","2.25.51.20151028-0ubuntu1","2.25.51.20151106-0ubuntu1","2.25.51.20151113-1ubuntu1","2.25.51.20151113-2ubuntu1","2.25.90.20151125-1ubuntu1","2.25.90.20151125-2ubuntu1","2.25.90.20151211-0ubuntu1","2.25.90.20151211-0ubuntu2","2.25.90.20160101-1ubuntu1","2.25.90.20160101-1ubuntu2","2.26-2ubuntu1","2.26-3ubuntu1","2.26-4ubuntu1","2.26-5ubuntu1","2.26-6ubuntu1","2.26-7ubuntu2","2.26-8ubuntu1","2.26-8ubuntu2","2.26-8ubuntu2.1","2.26.1-1ubuntu1~16.04","2.26.1-1ubuntu1~16.04.1","2.26.1-1ubuntu1~16.04.3","2.26.1-1ubuntu1~16.04.4","2.26.1-1ubuntu1~16.04.5","2.26.1-1ubuntu1~16.04.6","2.26.1-1ubuntu1~16.04.7","2.26.1-1ubuntu1~16.04.8","2.26.1-1ubuntu1~16.04.8+esm1","2.26.1-1ubuntu1~16.04.8+esm3","2.26.1-1ubuntu1~16.04.8+esm4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.8"}]}],"versions":["2.29.1-4ubuntu1","2.29.1-6ubuntu1","2.29.1-7ubuntu1","2.29.1-8ubuntu1","2.29.1-10ubuntu1","2.29.1-12ubuntu1","2.30-4ubuntu1","2.30-5ubuntu1","2.30-7ubuntu1","2.30-8ubuntu1","2.30-9ubuntu1","2.30-10ubuntu1","2.30-11ubuntu1","2.30-14ubuntu2","2.30-15ubuntu1","2.30-20ubuntu2~18.04","2.30-21ubuntu1~18.04","2.30-21ubuntu1~18.04.1","2.30-21ubuntu1~18.04.2","2.30-21ubuntu1~18.04.3","2.30-21ubuntu1~18.04.4","2.30-21ubuntu1~18.04.5","2.30-21ubuntu1~18.04.7"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.4"}]}],"versions":["2.33-2ubuntu1","2.33.1-1ubuntu1","2.33.1-5ubuntu1","2.33.1-6ubuntu1","2.33.1-6ubuntu3","2.33.90.20200122-1ubuntu2","2.34-1ubuntu1","2.34-3ubuntu1","2.34-4ubuntu1","2.34-5ubuntu1","2.34-6ubuntu1","2.34-6ubuntu1.1","2.34-6ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.38-4ubuntu2.1"}]}],"versions":["2.37-7ubuntu1","2.37-9ubuntu1","2.37-10ubuntu1","2.37.50.20220106-2ubuntu1","2.37.90.20220126-0ubuntu1","2.37.90.20220130-0ubuntu2","2.38-1ubuntu1","2.38-2ubuntu1","2.38-3ubuntu1","2.38-4ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.8+esm5"}]}],"versions":["2.25.1-6ubuntu1","2.25.51.20151022-0ubuntu2","2.25.51.20151022-0ubuntu3","2.25.51.20151027-0ubuntu1","2.25.51.20151028-0ubuntu1","2.25.51.20151106-0ubuntu1","2.25.51.20151113-1ubuntu1","2.25.51.20151113-2ubuntu1","2.25.90.20151125-1ubuntu1","2.25.90.20151125-2ubuntu1","2.25.90.20151211-0ubuntu1","2.25.90.20151211-0ubuntu2","2.25.90.20160101-1ubuntu1","2.25.90.20160101-1ubuntu2","2.26-2ubuntu1","2.26-3ubuntu1","2.26-4ubuntu1","2.26-5ubuntu1","2.26-6ubuntu1","2.26-7ubuntu2","2.26-8ubuntu1","2.26-8ubuntu2","2.26-8ubuntu2.1","2.26.1-1ubuntu1~16.04","2.26.1-1ubuntu1~16.04.1","2.26.1-1ubuntu1~16.04.3","2.26.1-1ubuntu1~16.04.4","2.26.1-1ubuntu1~16.04.5","2.26.1-1ubuntu1~16.04.6","2.26.1-1ubuntu1~16.04.7","2.26.1-1ubuntu1~16.04.8","2.26.1-1ubuntu1~16.04.8+esm1","2.26.1-1ubuntu1~16.04.8+esm3","2.26.1-1ubuntu1~16.04.8+esm4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.8"}]}],"versions":["2.29.1-4ubuntu1","2.29.1-6ubuntu1","2.29.1-7ubuntu1","2.29.1-8ubuntu1","2.29.1-10ubuntu1","2.29.1-12ubuntu1","2.30-4ubuntu1","2.30-5ubuntu1","2.30-7ubuntu1","2.30-8ubuntu1","2.30-9ubuntu1","2.30-10ubuntu1","2.30-11ubuntu1","2.30-14ubuntu2","2.30-15ubuntu1","2.30-20ubuntu2~18.04","2.30-21ubuntu1~18.04","2.30-21ubuntu1~18.04.1","2.30-21ubuntu1~18.04.2","2.30-21ubuntu1~18.04.3","2.30-21ubuntu1~18.04.4","2.30-21ubuntu1~18.04.5","2.30-21ubuntu1~18.04.7"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.4"}]}],"versions":["2.33-2ubuntu1","2.33.1-1ubuntu1","2.33.1-5ubuntu1","2.33.1-6ubuntu1","2.33.1-6ubuntu3","2.33.90.20200122-1ubuntu2","2.34-1ubuntu1","2.34-3ubuntu1","2.34-4ubuntu1","2.34-5ubuntu1","2.34-6ubuntu1","2.34-6ubuntu1.1","2.34-6ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.38-4ubuntu2.1"}]}],"versions":["2.37-7ubuntu1","2.37-9ubuntu1","2.37-10ubuntu1","2.37.50.20220106-2ubuntu1","2.37.90.20220126-0ubuntu1","2.37.90.20220130-0ubuntu2","2.38-1ubuntu1","2.38-2ubuntu1","2.38-3ubuntu1","2.38-4ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24-5ubuntu14.2+esm6"}]}],"versions":["2.23.52.20130913-0ubuntu1","2.23.90.20131017-1ubuntu1","2.23.90.20131116-1ubuntu1","2.23.91.20131123-1ubuntu1","2.24-1ubuntu1","2.24-1ubuntu2","2.24-2ubuntu1","2.24-2ubuntu2","2.24-2ubuntu3","2.24-4ubuntu1","2.24-5ubuntu1","2.24-5ubuntu2","2.24-5ubuntu3","2.24-5ubuntu3.1","2.24-5ubuntu13","2.24-5ubuntu14","2.24-5ubuntu14.1","2.24-5ubuntu14.2","2.24-5ubuntu14.2+esm1","2.24-5ubuntu14.2+esm2","2.24-5ubuntu14.2+esm3","2.24-5ubuntu14.2+esm5"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.7"}]}],"versions":["2.33-2ubuntu1","2.33.1-1ubuntu1","2.33.1-5ubuntu1","2.33.1-6ubuntu1","2.33.1-6ubuntu3","2.33.90.20200122-1ubuntu2","2.34-1ubuntu1","2.34-3ubuntu1","2.34-4ubuntu1","2.34-5ubuntu1","2.34-6ubuntu1","2.34-6ubuntu1.1","2.34-6ubuntu1.3","2.34-6ubuntu1.4","2.34-6ubuntu1.5","2.34-6ubuntu1.6"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.38-4ubuntu2.4"}]}],"versions":["2.37-7ubuntu1","2.37-9ubuntu1","2.37-10ubuntu1","2.37.50.20220106-2ubuntu1","2.37.90.20220126-0ubuntu1","2.37.90.20220130-0ubuntu2","2.38-1ubuntu1","2.38-2ubuntu1","2.38-3ubuntu1","2.38-4ubuntu2","2.38-4ubuntu2.1","2.38-4ubuntu2.2","2.38-4ubuntu2.3"],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.39-2.1"}]}],"bundled":8}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"gnu","product":"binutils"}],"references":[{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=29482","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","report"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=29482#c2","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","report"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=29495","tags":["x_transferred","report"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=45d92439aebd0386ef8af76e1796d08cfe457e1d","tags":["x_transferred","web"]},{"url":"https://github.com/bminor/binutils-gdb/commit/45d92439aebd0386ef8af76e1796d08cfe457e1d","tags":["x_transferred","fix"]},{"url":"https://security.netapp.com/advisory/ntap-20221104-0007/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6AKZ2DTS3ATVN5PANNVLKLE5OP4OF25Q/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7MTEHT3G6YKJ7F7MSGWYSI4UM3XBAYXZ/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://security.gentoo.org/glsa/202309-15","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38533","tags":["web","advisory"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=45d92439aebd0386ef8af76e1796d08cfe457e1d"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6AKZ2DTS3ATVN5PANNVLKLE5OP4OF25Q"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7MTEHT3G6YKJ7F7MSGWYSI4UM3XBAYXZ"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6AKZ2DTS3ATVN5PANNVLKLE5OP4OF25Q"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7MTEHT3G6YKJ7F7MSGWYSI4UM3XBAYXZ"},{"url":"https://security.netapp.com/advisory/ntap-20221104-0007"},{"url":"https://github.com/advisories/GHSA-7v55-wrg9-5rfp"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-38533","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-38533","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16-els/CLSA-2022-1670606482","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1776963378.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1779093100.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/38xxx/CVE-2022-38533.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-38533","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0425.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31092","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/6AKZ2DTS3ATVN5PANNVLKLE5OP4OF25Q/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/4MYLS3VR4OPL5ECRWOR4ZHMGXUSCJFZY/","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224146-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1142579","tags":["report"]},{"url":"https://bugzilla.suse.com/1185597","tags":["report"]},{"url":"https://bugzilla.suse.com/1185712","tags":["report"]},{"url":"https://bugzilla.suse.com/1188374","tags":["report"]},{"url":"https://bugzilla.suse.com/1191473","tags":["report"]},{"url":"https://bugzilla.suse.com/1193929","tags":["report"]},{"url":"https://bugzilla.suse.com/1194783","tags":["report"]},{"url":"https://bugzilla.suse.com/1197592","tags":["report"]},{"url":"https://bugzilla.suse.com/1198237","tags":["report"]},{"url":"https://bugzilla.suse.com/1202816","tags":["report"]},{"url":"https://bugzilla.suse.com/1202966","tags":["report"]},{"url":"https://bugzilla.suse.com/1202967","tags":["report"]},{"url":"https://bugzilla.suse.com/1202969","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1010204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3648","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-45078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-46195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-38126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-38127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-38533","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224277-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1191908","tags":["report"]},{"url":"https://bugzilla.suse.com/1198458","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-38533","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5762-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6544-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-38533","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-19726","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-46174","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-4285","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-35205","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-38533","description":"In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in strip-new via a crafted file.","status":"published","published":"2022-08-25T00:00:00Z","modified":"2026-11-02T22:13:07.677Z","updated_at":"2026-11-03T00:01:30.510858Z"}],"euvd":[{"id":"EUVD-2022-41112","description":"In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in strip-new via a crafted file.","status":"published","published":"2022-08-25T00:00:00Z","modified":"2026-11-02T22:13:07Z","updated_at":"2026-11-03T05:08:36.239358Z"}],"ghsa":[{"id":"GHSA-7v55-wrg9-5rfp","title":"In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32...","description":"In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in strip-new via a crafted file.","status":"published","published":"2022-08-27T00:00:44Z","modified":"2026-11-03T00:32:19Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-787"],"updated_at":"2026-11-03T00:53:57.407227Z"}],"nvd":[{"id":"CVE-2022-38533","description":"In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in strip-new via a crafted file.","status":"published","published":"2022-08-26T00:15:09.317Z","modified":"2026-11-02T23:17:11.497Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-03T06:40:49.610767Z"}],"osv":[{"id":"ALPINE-CVE-2022-38533","description":"In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in strip-new via a crafted file.","status":"published","published":"2022-08-26T00:15:09.317Z","modified":"2026-11-03T07:18:33.513226686Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:51:12.284675Z"},{"id":"AZL-10714","title":"CVE-2022-38533 affecting package binutils for versions less than 2.37-4","description":"In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in strip-new via a crafted file.","status":"published","published":"2022-08-26T00:15:09Z","modified":"2026-04-21T04:21:23.627787Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:01.408755Z"},{"id":"BELL-CVE-2022-38533","title":"CVE-2022-38533 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:16:24.725167Z","modified":"2026-01-26T09:48:54.623566Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"DEBIAN-CVE-2022-38533","description":"In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in strip-new via a crafted file.","status":"published","published":"2022-08-26T00:15:09.317Z","modified":"2026-11-03T09:47:28.485132199Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T10:27:58.933618Z"},{"id":"UBUNTU-CVE-2022-38533","description":"In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in strip-new via a crafted file.","status":"published","published":"2022-08-26T00:15:00Z","modified":"2026-04-22T13:27:27.140298Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:53:55.502114Z"},{"id":"CLSA-2022-1670606482","title":"Fix CVE(s): CVE-2022-38533","description":"\n   * SECURITY UPDATE: heap-based buffer overflow\n     - debian/patches/CVE-2022-38533.patch: fix possibly heap-based buffer\n       overflow in bfd/coffcode.h.\n     - CVE-2022-38533","status":"published","published":"2022-12-09T17:21:22Z","modified":"2026-06-04T10:04:16.101681Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2026-1776963378","title":"binutils: Fix of 8 CVEs","description":"- CVE-2022-47007: fix memory leak in stab_demangle_v3_arg\n- CVE-2022-47008: fix memory leak in make_tempdir and make_tempname\n- CVE-2022-47011: fix memory leak in parse_stab_struct_fields\n- CVE-2022-47010: fix memory leak in pr_function_type\n- CVE-2022-48063: fix excessive memory allocation in load_specific_debug_section for corrupt ELF\n- CVE-2022-48064: fix SHT_NOBITS section size sanity check in find_debug_info\n- CVE-2022-48065: fix memory leak in find_abstract_instance on duplicate DW_AT_decl_file\n- CVE-2022-38533: fix rewrite_elf_program_header looping on crafted file (strip/objcopy)","status":"published","published":"2026-04-23T16:56:23Z","modified":"2026-10-21T10:45:36.75749165Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1779093100","title":"binutils: Fix of 6 CVEs","description":"- CVE-2022-38533: fix heap buffer overflow in bfd_getl32 from strip_main with crafted COFF file\n- CVE-2022-47007: fix memory leak in stab_demangle_v3_arg in stabs.c\n- CVE-2022-47008: fix memory leak in make_tempdir and make_tempname in bucomm.c\n- CVE-2022-47010: fix memory leak in pr_function_type in prdbg.c\n- CVE-2022-48064: fix excessive memory consumption in bfd_dwarf2_find_nearest_line_with_alt\n- CVE-2023-1972: fix heap buffer overflow in _bfd_elf_slurp_version_tables","status":"published","published":"2026-05-18T08:31:45Z","modified":"2026-06-01T00:32:31.43866342Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CVE-2022-38533","description":"In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in strip-new via a crafted file.","status":"published","published":"2022-08-25T00:00:00Z","modified":"2026-11-04T02:31:06.503129275Z","updated_at":"2026-11-04T02:54:44.889498Z"},{"id":"MGASA-2022-0425","title":"Updated binutils/gdb packages fix security vulnerability","description":"libiberty: Heap/stack buffer overflow in the dlang_lname function in\nd-demangle.c (CVE-2021-3826)\nbinutils: heap-based buffer overflow in bfd_getl32() when called by\nstrip_main() in objcopy.c via a crafted file (CVE-2022-38533)\n","status":"published","published":"2022-11-13T02:25:20Z","modified":"2026-04-16T04:42:54.403428928Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:12631-1","title":"binutils-2.39-2.1 on GA media","description":"These are all security issues fixed in the binutils-2.39-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:13:03.927914Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"SUSE-SU-2022:4146-1","title":"Security update for binutils","description":"This update for binutils fixes the following issues:\n\nThe following security bugs were fixed:\n\n- CVE-2019-1010204: Fixed out-of-bounds read in elfcpp/elfcpp_file.h (bsc#1142579).\n- CVE-2021-3530: Fixed stack-based buffer overflow in demangle_path() in rust-demangle.c (bsc#1185597).\n- CVE-2021-3648: Fixed infinite loop while demangling rust symbols (bsc#1188374).\n- CVE-2021-3826: Fixed heap/stack buffer overflow in the dlang_lname function in d-demangle.c (bsc#1202969).\n- CVE-2021-45078: Fixed out-of-bounds write in stab_xcoff_builtin_type() in stabs.c (bsc#1193929).\n- CVE-2021-46195: Fixed uncontrolled recursion in libiberty/rust-demangle.c (bsc#1194783).\n- CVE-2022-27943: Fixed stack exhaustion in demangle_const in (bsc#1197592).\n- CVE-2022-38126: Fixed assertion fail in the display_debug_names() function in binutils/dwarf.c (bsc#1202966).\n- CVE-2022-38127: Fixed NULL pointer dereference in the read_and_display_attr_value() function in binutils/dwarf.c (bsc#1202967).\n- CVE-2022-38533: Fixed heap out-of-bounds read in bfd_getl32 (bsc#1202816).\n\n\nThe following non-security bugs were fixed:\n  \n- SLE toolchain update of binutils, update to 2.39 from 2.37.\n- Update to 2.39:  \n  * The ELF linker will now generate a warning message if the stack is made\n    executable.  Similarly it will warn if the output binary contains a\n    segment with all three of the read, write and execute permission\n    bits set.  These warnings are intended to help developers identify\n    programs which might be vulnerable to attack via these executable\n    memory regions.\n    The warnings are enabled by default but can be disabled via a command\n    line option.  It is also possible to build a linker with the warnings\n    disabled, should that be necessary.\n  * The ELF linker now supports a --package-metadata option that allows\n    embedding a JSON payload in accordance to the Package Metadata\n    specification. \n  * In linker scripts it is now possible to use TYPE=\u003ctype\u003e in an output\n    section description to set the section type value.\n  * The objdump program now supports coloured/colored syntax\n    highlighting of its disassembler output for some architectures.\n    (Currently: AVR, RiscV, s390, x86, x86_64).\n  * The nm program now supports a --no-weak/-W option to make it ignore\n    weak symbols.\n  * The readelf and objdump programs now support a -wE option to prevent\n    them from attempting to access debuginfod servers when following\n    links.\n  * The objcopy program's --weaken, --weaken-symbol, and\n    --weaken-symbols options now works with unique symbols as well.\n\n- Update to 2.38:\n  * elfedit: Add --output-abiversion option to update ABIVERSION.\n  * Add support for the LoongArch instruction set.\n  * Tools which display symbols or strings (readelf, strings, nm, objdump)\n    have a new command line option which controls how unicode characters are\n    handled.  By default they are treated as normal for the tool.  Using\n    --unicode=locale will display them according to the current locale.\n    Using --unicode=hex will display them as hex byte values, whilst\n    --unicode=escape will display them as escape sequences.  In addition\n    using --unicode=highlight will display them as unicode escape sequences\n    highlighted in red (if supported by the output device).\n  * readelf -r dumps RELR relative relocations now.\n  * Support for efi-app-aarch64, efi-rtdrv-aarch64 and efi-bsdrv-aarch64 has been\n    added to objcopy in order to enable UEFI development using binutils.\n  * ar: Add --thin for creating thin archives. -T is a deprecated alias without\n    diagnostics. In many ar implementations -T has a different meaning, as\n    specified by X/Open System Interface.\n  * Add support for AArch64 system registers that were missing in previous\n    releases.\n  * Add support for the LoongArch instruction set.\n  * Add a command-line option, -muse-unaligned-vector-move, for x86 target\n    to encode aligned vector move as unaligned vector move.\n  * Add support for Cortex-R52+ for Arm.\n  * Add support for Cortex-A510, Cortex-A710, Cortex-X2 for AArch64.\n  * Add support for Cortex-A710 for Arm.\n  * Add support for Scalable Matrix Extension (SME) for AArch64.\n  * The --multibyte-handling=[allow|warn|warn-sym-only] option tells the\n    assembler what to when it encoutners multibyte characters in the input.  The\n    default is to allow them.  Setting the option to 'warn' will generate a\n    warning message whenever any multibyte character is encountered.  Using the\n    option to 'warn-sym-only' will make the assembler generate a warning whenever a\n    symbol is defined containing multibyte characters.  (References to undefined\n    symbols will not generate warnings).\n  * Outputs of .ds.x directive and .tfloat directive with hex input from\n    x86 assembler have been reduced from 12 bytes to 10 bytes to match the\n    output of .tfloat directive.\n  * Add support for 'armv8.8-a', 'armv9-a', 'armv9.1-a', 'armv9.2-a' and\n    'armv9.3-a' for -march in AArch64 GAS.\n  * Add support for 'armv8.7-a', 'armv8.8-a', 'armv9-a', 'armv9.1-a',\n    'armv9.2-a' and 'armv9.3-a' for -march in Arm GAS.\n  * Add support for Intel AVX512_FP16 instructions.\n  * Add -z pack-relative-relocs/-z no pack-relative-relocs to x86 ELF\n    linker to pack relative relocations in the DT_RELR section.\n  * Add support for the LoongArch architecture.\n  * Add -z indirect-extern-access/-z noindirect-extern-access to x86 ELF\n    linker to control canonical function pointers and copy relocation.\n  * Add --max-cache-size=SIZE to set the the maximum cache size to SIZE\n    bytes.\n- Explicitly enable --enable-warn-execstack=yes and\t--enable-warn-rwx-segments=yes.\n- Add gprofng subpackage.\n- Include recognition of 'z16' name for 'arch14' on s390. (bsc#1198237).\n- Add back fix for bsc#1191473, which got lost in the update to 2.38.\n- Install symlinks for all target specific tools on arm-eabi-none (bsc#1185712).\n- Enable PRU architecture for AM335x CPU (Beagle Bone Black board)\n","status":"published","published":"2022-11-21T08:57:17Z","modified":"2026-02-04T03:51:56.268349Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:4277-1","title":"Security update for binutils","description":"This update for binutils fixes the following issues:\nThe following security bugs were fixed:\n\n- CVE-2019-1010204: Fixed out-of-bounds read in elfcpp/elfcpp_file.h (bsc#1142579).\n- CVE-2021-3530: Fixed stack-based buffer overflow in demangle_path() in rust-demangle.c (bsc#1185597).\n- CVE-2021-3648: Fixed infinite loop while demangling rust symbols (bsc#1188374).\n- CVE-2021-3826: Fixed heap/stack buffer overflow in the dlang_lname function in d-demangle.c (bsc#1202969).\n- CVE-2021-45078: Fixed out-of-bounds write in stab_xcoff_builtin_type() in stabs.c (bsc#1193929).\n- CVE-2021-46195: Fixed uncontrolled recursion in libiberty/rust-demangle.c (bsc#1194783).\n- CVE-2022-27943: Fixed stack exhaustion in demangle_const in (bsc#1197592).\n- CVE-2022-38126: Fixed assertion fail in the display_debug_names() function in binutils/dwarf.c (bsc#1202966).\n- CVE-2022-38127: Fixed NULL pointer dereference in the read_and_display_attr_value() function in binutils/dwarf.c (bsc#1202967).\n- CVE-2022-38533: Fixed heap out-of-bounds read in bfd_getl32 (bsc#1202816).\n\n\nThe following non-security bugs were fixed:\n  \n- SLE toolchain update of binutils, update to 2.39 from 2.37.\n- Update to 2.39:  \n  * The ELF linker will now generate a warning message if the stack is made\n    executable.  Similarly it will warn if the output binary contains a\n    segment with all three of the read, write and execute permission\n    bits set.  These warnings are intended to help developers identify\n    programs which might be vulnerable to attack via these executable\n    memory regions.\n    The warnings are enabled by default but can be disabled via a command\n    line option.  It is also possible to build a linker with the warnings\n    disabled, should that be necessary.\n  * The ELF linker now supports a --package-metadata option that allows\n    embedding a JSON payload in accordance to the Package Metadata\n    specification. \n  * In linker scripts it is now possible to use TYPE=\u003ctype\u003e in an output\n    section description to set the section type value.\n  * The objdump program now supports coloured/colored syntax\n    highlighting of its disassembler output for some architectures.\n    (Currently: AVR, RiscV, s390, x86, x86_64).\n  * The nm program now supports a --no-weak/-W option to make it ignore\n    weak symbols.\n  * The readelf and objdump programs now support a -wE option to prevent\n    them from attempting to access debuginfod servers when following\n    links.\n  * The objcopy program's --weaken, --weaken-symbol, and\n    --weaken-symbols options now works with unique symbols as well.\n\n- Update to 2.38:\n  * elfedit: Add --output-abiversion option to update ABIVERSION.\n  * Add support for the LoongArch instruction set.\n  * Tools which display symbols or strings (readelf, strings, nm, objdump)\n    have a new command line option which controls how unicode characters are\n    handled.  By default they are treated as normal for the tool.  Using\n    --unicode=locale will display them according to the current locale.\n    Using --unicode=hex will display them as hex byte values, whilst\n    --unicode=escape will display them as escape sequences.  In addition\n    using --unicode=highlight will display them as unicode escape sequences\n    highlighted in red (if supported by the output device).\n  * readelf -r dumps RELR relative relocations now.\n  * Support for efi-app-aarch64, efi-rtdrv-aarch64 and efi-bsdrv-aarch64 has been\n    added to objcopy in order to enable UEFI development using binutils (bsc#1198458).\n  * ar: Add --thin for creating thin archives. -T is a deprecated alias without\n    diagnostics. In many ar implementations -T has a different meaning, as\n    specified by X/Open System Interface.\n  * Add support for AArch64 system registers that were missing in previous\n    releases.\n  * Add support for the LoongArch instruction set.\n  * Add a command-line option, -muse-unaligned-vector-move, for x86 target\n    to encode aligned vector move as unaligned vector move.\n  * Add support for Cortex-R52+ for Arm.\n  * Add support for Cortex-A510, Cortex-A710, Cortex-X2 for AArch64.\n  * Add support for Cortex-A710 for Arm.\n  * Add support for Scalable Matrix Extension (SME) for AArch64.\n  * The --multibyte-handling=[allow|warn|warn-sym-only] option tells the\n    assembler what to when it encoutners multibyte characters in the input.  The\n    default is to allow them.  Setting the option to 'warn' will generate a\n    warning message whenever any multibyte character is encountered.  Using the\n    option to 'warn-sym-only' will make the assembler generate a warning whenever a\n    symbol is defined containing multibyte characters.  (References to undefined\n    symbols will not generate warnings).\n  * Outputs of .ds.x directive and .tfloat directive with hex input from\n    x86 assembler have been reduced from 12 bytes to 10 bytes to match the\n    output of .tfloat directive.\n  * Add support for 'armv8.8-a', 'armv9-a', 'armv9.1-a', 'armv9.2-a' and\n    'armv9.3-a' for -march in AArch64 GAS.\n  * Add support for 'armv8.7-a', 'armv8.8-a', 'armv9-a', 'armv9.1-a',\n    'armv9.2-a' and 'armv9.3-a' for -march in Arm GAS.\n  * Add support for Intel AVX512_FP16 instructions.\n  * Add -z pack-relative-relocs/-z no pack-relative-relocs to x86 ELF\n    linker to pack relative relocations in the DT_RELR section.\n  * Add support for the LoongArch architecture.\n  * Add -z indirect-extern-access/-z noindirect-extern-access to x86 ELF\n    linker to control canonical function pointers and copy relocation.\n  * Add --max-cache-size=SIZE to set the the maximum cache size to SIZE\n    bytes.\n\n- Fixed regression that prevented .ko.debug to be loaded in crash tool (bsc#1191908).\n- Explicitly enable --enable-warn-execstack=yes and --enable-warn-rwx-segments=yes.\n- Add gprofng subpackage.\n- Include recognition of 'z16' name for 'arch14' on s390. (bsc#1198237).\n- Add back fix for bsc#1191473, which got lost in the update to 2.38.\n- Install symlinks for all target specific tools on arm-eabi-none (bsc#1185712).\n- Enable PRU architecture for AM335x CPU (Beagle Bone Black board)\n","status":"published","published":"2022-11-29T14:41:50Z","modified":"2026-02-04T02:33:36.483889Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"USN-5762-1","title":"binutils vulnerability","description":"It was discovered that GNU binutils incorrectly handled certain  COFF files.\nAn attacker could possibly use this issue to cause a crash or execute\narbitrary code.\n","status":"published","published":"2022-12-05T16:03:44Z","modified":"2026-06-25T13:31:37.735609639Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-6544-1","title":"binutils vulnerabilities","description":"It was discovered that GNU binutils incorrectly handled certain COFF files.\nAn attacker could possibly use this issue to cause a crash or execute\narbitrary code. This issue only affected Ubuntu 14.04 LTS. (CVE-2022-38533)\n\nIt was discovered that GNU binutils was not properly performing bounds\nchecks in several functions, which could lead to a buffer overflow. An\nattacker could possibly use this issue to cause a denial of service,\nexpose sensitive information or execute arbitrary code. This issue only\naffected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. \n(CVE-2022-4285, CVE-2020-19726, CVE-2021-46174)\n\nIt was discovered that GNU binutils contained a reachable assertion, which\ncould lead to an intentional assertion failure when processing certain\ncrafted DWARF files. An attacker could possibly use this issue to cause a\ndenial of service. This issue only affected Ubuntu 20.04 LTS \nand Ubuntu 22.04 LTS. (CVE-2022-35205)\n","status":"published","published":"2023-12-11T11:18:13Z","modified":"2026-06-29T13:51:00.37294694Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}