Backport two upstream fixes for binutils 2.46.1: - CVE-2026-15003: buffer overflow in xcoff_link_add_symbols (PR 34053) - CVE-2026-18220: buffer overflow in elf32_dlx_relocate26
Both patches apply cleanly and all tests pass with no regressions. Changes v1 -> v2: - Fixed Upstream-Status placement to be in commit message (before scissors line) Test results: binutils-testsuite 2.46.1 (x86_64-oe-linux) - All tests PASSED binutils: 327 passed, 5 untested, 9 unsupported gas: 2091 passed, 4 unsupported ld: 1899 passed, 7 expected failures, 20 untested, 109 unsupported Jaipaul Cheernam (2): binutils: Patch for CVE-2026-15003 binutils: fix CVE-2026-18220 .../binutils/binutils-2.46.inc | 2 + .../binutils/binutils/CVE-2026-15003.patch | 402 ++++++++++++++++++ .../binutils/binutils/CVE-2026-18220.patch | 65 +++ 3 files changed, 469 insertions(+) create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2026-15003.patch create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2026-18220.patch
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#243264): https://lists.openembedded.org/g/openembedded-core/message/243264 Mute This Topic: https://lists.openembedded.org/mt/120714997/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
