From: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
To: openembedded-core@lists.openembedded.org
Cc: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
Subject: [wrynose][PATCH 0/2] binutils: fix CVE-2026-15003 and CVE-2026-18220
Date: Wed, 12 Aug 2026 10:54:30 +0200 [thread overview]
Message-ID: <20260812085432.22810-1-jaipaul.cheernam@est.tech> (raw)
In-Reply-To: <20260807140902.4732-1-jaipaul.cheernam@est.tech>
Backport two upstream fixes for binutils 2.46.1:
- CVE-2026-15003: buffer overflow in xcoff_link_add_symbols (PR 34053)
- CVE-2026-18220: buffer overflow in elf32_dlx_relocate26
Both patches apply cleanly and all tests pass with no regressions.
Test results:
binutils-testsuite 2.46.1 (x86_64-oe-linux) - All tests PASSED
binutils: 327 passed, 5 untested, 9 unsupported
gas: 2091 passed, 4 unsupported
ld: 1899 passed, 7 expected failures, 20 untested, 109 unsupported
Jaipaul Cheernam (2):
binutils: Patch for CVE-2026-15003
binutils: fix CVE-2026-18220
.../binutils/binutils-2.46.inc | 2 +
.../binutils/binutils/CVE-2026-15003.patch | 402 ++++++++++++++++++
.../binutils/binutils/CVE-2026-18220.patch | 65 +++
3 files changed, 469 insertions(+)
create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2026-15003.patch
create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2026-18220.patch
next prev parent reply other threads:[~2026-08-12 8:54 UTC|newest]
Thread overview: 12+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-08-07 14:09 [wrynose][PATCH] binutils: Patch for CVE-2026-15003 Jaipaul Cheernam
2026-08-12 7:29 ` [wrynose][PATCH 0/2] binutils: fix CVE-2026-15003 and CVE-2026-18220 Jaipaul Cheernam
2026-08-12 7:29 ` [wrynose][PATCH 1/2] binutils: Patch for CVE-2026-15003 Jaipaul Cheernam
2026-08-12 7:29 ` [wrynose][PATCH 2/2] binutils: fix CVE-2026-18220 Jaipaul Cheernam
2026-08-12 7:48 ` Patchtest results for " patchtest
2026-08-12 8:54 ` Jaipaul Cheernam [this message]
2026-08-12 8:54 ` [wrynose][PATCH 1/2] binutils: Patch for CVE-2026-15003 Jaipaul Cheernam
2026-08-12 8:54 ` [wrynose][PATCH 2/2] binutils: fix CVE-2026-18220 Jaipaul Cheernam
2026-08-12 8:56 ` [wrynose][PATCH 0/2] binutils: fix CVE-2026-15003 and CVE-2026-18220 Jaipaul Cheernam
2026-08-12 8:56 ` [wrynose][PATCH v2 " Jaipaul Cheernam
2026-08-12 8:56 ` [wrynose][PATCH v2 1/2] binutils: Patch for CVE-2026-15003 Jaipaul Cheernam
2026-08-12 8:56 ` [wrynose][PATCH v2 2/2] binutils: fix CVE-2026-18220 Jaipaul Cheernam
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260812085432.22810-1-jaipaul.cheernam@est.tech \
--to=jaipaul.cheernam@est.tech \
--cc=openembedded-core@lists.openembedded.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox