GNU Binutils 2.36.1 has been released

Nick Clifton
Sat Feb 6 09:57:01 GMT 2021

Hi Everyone,

  We are very sorry to have to report that a problem was found with the
  GNU Binutils 2.36 release.  It turns out that it contained a small
  portion of code that was not covered by an FSF copyright assignment.
  So we have created a replacement release - 2.36.1 - with that code

  In addition we found that a fix for a theoretical security
  vulnerability[1] was itself broken and could result in the archiver
  program "ar" misbehaving.  So we have chosen to revert the fix from
  the 2.36.1 release whilst the problem is properly resolved.

  The new release is available at the usual sites.  Ie:

  Nick Clifton
  GNU Binutils Chief Maintainer

[1]: CVE 2021-20197: 

More information about the Binutils mailing list