Re: [OE-core][scarthgap][PATCH v2 2/2] binutils: fix CVE-2026-4647

["Yoann Congal" <yoann.congal@smile.fr>]

On Wed Jun 3, 2026 at 11:09 PM CEST, Yoann Congal wrote:
> On Wed May 13, 2026 at 7:27 PM CEST, Sudhir Dumbhare -X (sudumbha - E INFOCHIPS PRIVATE LIMITED at Cisco) wrote:
>> From: Sudhir Dumbhare <sudumbha@cisco.com>
>>
>> This patch applies the upstream fix [1], which addresses an out-of-bounds
>> read issue in XCOFF relocation processing, as described in [2].
>>
>> [1] https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=9e99dbc1f19ffaf18d0250788951706066ebe7f2
>> [2] https://sourceware.org/bugzilla/show_bug.cgi?id=33919
>>
>> Reference:
>> https://bugzilla.suse.com/show_bug.cgi?id=1260338
>> https://www.suse.com/security/cve/CVE-2026-4647.html
>> https://nvd.nist.gov/vuln/detail/CVE-2026-4647
>>
>> Signed-off-by: Sudhir Dumbhare <sudumbha@cisco.com>
>> ---
>
> Hello,
>
> Same as 1/2, this look like it's needed on master/wrynose. Can you send
> the fix there and ping back here?
>
> Thanks!

Hello,

I will now drop this patch. If the above situation changes, please send
a new patch.

Regards,
-- 
Yoann Congal
Smile ECS