[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248585

 
 

909

 
 

195621

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

RHSA-2021:4595-01 -- Redhat binutils

ID: oval:org.secpod.oval:def:86341Date: (C)2022-12-27   (M)2024-04-17
Class: PATCHFamily: unix




The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities. Security Fix: * Developer environment: Unicode"s bidirectional override characters can cause trojan source attacks The following changes were introduced in binutils in order to facilitate detection of BiDi Unicode characters: Tools which display names or strings have a new command line option --unicode / -U which controls how Unicode characters are handled. Using and;--unicode=default and; will treat them as normal for the tool. This is the default behaviour when --unicode option is not used. Using and;--unicode=localeand; will display them according to the current locale. Using and;--unicode=hexand; will display them as hex byte values. Using and;--unicode=escape and; will display them as Unicode escape sequences. Using and;--unicode=highlight and; will display them as Unicode escape sequences highlighted in red, if supported by the output device. For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.

Platform:
CentOS 8
Product:
binutils
Reference:
RHSA-2021:4595-01
CVE-2021-42574
CVE    1
CVE-2021-42574
CPE    2
cpe:/o:centos:centos:8
cpe:/a:sourceware:binutils

© SecPod Technologies