Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
FS#42773 - [binutils] backport some security fixes
Attached to Project:
Community Packages
Opened by Allan McRae (Allan) - Thursday, 13 November 2014, 13:04 GMT
Last edited by Anatol Pomozov (anatolik) - Tuesday, 30 December 2014, 00:27 GMT
Opened by Allan McRae (Allan) - Thursday, 13 November 2014, 13:04 GMT
Last edited by Anatol Pomozov (anatolik) - Tuesday, 30 December 2014, 00:27 GMT
This task depends upon
we may want to file separate bug reports for those packages.
Also severity "Low" is really underestimated as some of those (oob-write, stack/heap corruption) could result in code execution (which Michal Zalewski already proofed in one PoC by overwriting the IP (instruction pointer))