GNU Binutils 2.36.1 has been released
Nick Clifton
nickc@redhat.com
Sat Feb 6 09:57:01 GMT 2021
Hi Everyone,
We are very sorry to have to report that a problem was found with the
GNU Binutils 2.36 release. It turns out that it contained a small
portion of code that was not covered by an FSF copyright assignment.
So we have created a replacement release - 2.36.1 - with that code
removed.
In addition we found that a fix for a theoretical security
vulnerability[1] was itself broken and could result in the archiver
program "ar" misbehaving. So we have chosen to revert the fix from
the 2.36.1 release whilst the problem is properly resolved.
The new release is available at the usual sites. Ie:
https://ftp.gnu.org/gnu/binutils
https://sourceware.org/pub/binutils/releases/
Cheers
Nick Clifton
GNU Binutils Chief Maintainer
[1]: CVE 2021-20197: https://sourceware.org/bugzilla/show_bug.cgi?id=26945
More information about the Binutils
mailing list