GNU Binutils 2.36.1 has been released
Sat Feb 6 09:57:01 GMT 2021
We are very sorry to have to report that a problem was found with the
GNU Binutils 2.36 release. It turns out that it contained a small
portion of code that was not covered by an FSF copyright assignment.
So we have created a replacement release - 2.36.1 - with that code
In addition we found that a fix for a theoretical security
vulnerability was itself broken and could result in the archiver
program "ar" misbehaving. So we have chosen to revert the fix from
the 2.36.1 release whilst the problem is properly resolved.
The new release is available at the usual sites. Ie:
GNU Binutils Chief Maintainer
: CVE 2021-20197: https://sourceware.org/bugzilla/show_bug.cgi?id=26945
More information about the Binutils