Regarding clarification on affected versions for Bug 29732
Nick Clifton
nickc@redhat.com
Fri Apr 12 10:28:22 GMT 2024
Hi Sadineni,
> In the bug https://sourceware.org/bugzilla/show_bug.cgi?id=29732 <https://sourceware.org/bugzilla/show_bug.cgi?id=29732> it is mentioned the version is 2.39. i tried to
> reproduce the bug in binutils-2.36.1 it was not reproduced. From the following nist link https://nvd.nist.gov/vuln/detail/CVE-2022-44840
> <https://nvd.nist.gov/vuln/detail/CVE-2022-44840> Known Affected Software Configurations it has mentioned it is Affected up to 2.39. Is binutils-2.36.1 really affected by
> this bug?.
Yes.
The reproducer in PR 29732 may not be able to trigger the bug,
but the 2.36.1 release does contain the same faulty code as
the 2.39 release.
Cheers
Nick
More information about the Binutils
mailing list