diff --git a/CVE-2023-1579.patch b/CVE-2023-1579.patch new file mode 100644 index 0000000..8ad26d8 --- /dev/null +++ b/CVE-2023-1579.patch @@ -0,0 +1,12 @@ +diff -rupN binutils-2.39/bfd/dwarf2.c binutils-2.39-new/bfd/dwarf2.c +--- binutils-2.39/bfd/dwarf2.c 2022-07-29 13:59:58.000000000 +0200 ++++ binutils-2.39-new/bfd/dwarf2.c 2023-03-23 17:18:48.301359559 +0100 +@@ -1375,7 +1375,7 @@ read_indexed_address (uint64_t idx, stru + offset += unit->dwarf_addr_offset; + if (offset < unit->dwarf_addr_offset + || offset > file->dwarf_addr_size +- || file->dwarf_addr_size - offset < unit->offset_size) ++ || file->dwarf_addr_size - offset < unit->addr_size) + return 0; + + info_ptr = file->dwarf_addr_buffer + offset; diff --git a/mingw-binutils.spec b/mingw-binutils.spec index aa65441..b069d3d 100644 --- a/mingw-binutils.spec +++ b/mingw-binutils.spec @@ -3,7 +3,7 @@ Name: mingw-binutils Version: 2.39 -Release: 5%{?dist} +Release: 6%{?dist} Summary: Cross-compiled version of binutils for Win32 and Win64 environments License: GPLv2+ and LGPLv2+ and GPLv3+ and LGPLv3+ @@ -138,6 +138,9 @@ Patch22: CVE-2022-4285.patch # Backport patch for CVE-2023-25587 Patch23: CVE-2023-25587.patch +# Backport patch for CVE-2023-1579.patch +Patch24: CVE-2023-1579.patch + BuildRequires: make BuildRequires: gcc @@ -470,6 +473,9 @@ rm -rf %{buildroot}%{_mandir}/man1/* %changelog +* Thu Mar 23 2023 Sandro Mani - 2.39-6 +- Backport patch for CVE-2023-1579 + * Tue Mar 07 2023 Sandro Mani - 2.39-5 - Backport patch for CVE-2023-25587