Regarding clarification on affected versions for Bug 29732

Nick Clifton nickc@redhat.com
Fri Apr 12 10:28:22 GMT 2024


Hi Sadineni,

> In the bug https://sourceware.org/bugzilla/show_bug.cgi?id=29732 <https://sourceware.org/bugzilla/show_bug.cgi?id=29732> it is mentioned the version is 2.39. i tried to 
> reproduce the bug in binutils-2.36.1 it was not reproduced. From the following nist link https://nvd.nist.gov/vuln/detail/CVE-2022-44840 
> <https://nvd.nist.gov/vuln/detail/CVE-2022-44840> Known Affected Software Configurations it has mentioned it is Affected up to 2.39. Is binutils-2.36.1 really affected by 
> this bug?.

Yes.

The reproducer in PR 29732 may not be able to trigger the bug,
but the 2.36.1 release does contain the same faulty code as
the 2.39 release.

Cheers
   Nick



More information about the Binutils mailing list