RHSA-2015:2079Medium

Red Hat Security Advisory: binutils security, bug fix, and enhancement update

Published
November 19, 2015
Last Modified
November 7, 2026

🔗 CVE IDs covered (8)

CVE-2014-8484 →CVE-2014-8485 →CVE-2014-8501 →CVE-2014-8502 →CVE-2014-8503 →CVE-2014-8504 →CVE-2014-8737 →CVE-2014-8738 →

📋 Description

CVE-2014-8484 — binutils: invalid read flaw in libbfd CVE-2014-8485 — binutils: lack of range checking leading to controlled write in _bfd_elf_setup_sections() CVE-2014-8501 — binutils: out-of-bounds write when parsing specially crafted PE executable CVE-2014-8502 — binutils: heap overflow in objdump when parsing a crafted ELF/PE binary file (incomplete fix for CVE-2014-8485) CVE-2014-8503 — binutils: stack overflow in objdump when parsing specially crafted ihex file CVE-2014-8504 — binutils: stack overflow in the SREC parser CVE-2014-8737 — binutils: directory traversal vulnerability CVE-2014-8738 — binutils: out of bounds memory write

🎯 Affected products48

  • Red Hat Enterprise Linux Client (v. 7)
  • Red Hat Enterprise Linux Client Optional (v. 7)
  • Red Hat Enterprise Linux ComputeNode (v. 7)
  • Red Hat Enterprise Linux ComputeNode Optional (v. 7)
  • Red Hat Enterprise Linux Server (v. 7)
  • Red Hat Enterprise Linux Workstation (v. 7)
  • binutils-0:2.23.52.0.1-55.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • binutils-0:2.23.52.0.1-55.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • binutils-0:2.23.52.0.1-55.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)
  • binutils-0:2.23.52.0.1-55.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)
  • binutils-0:2.23.52.0.1-55.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)
  • binutils-0:2.23.52.0.1-55.el7.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)
  • binutils-0:2.23.52.0.1-55.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)
  • binutils-0:2.23.52.0.1-55.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • binutils-0:2.23.52.0.1-55.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)
  • binutils-0:2.23.52.0.1-55.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)
  • binutils-0:2.23.52.0.1-55.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • binutils-0:2.23.52.0.1-55.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • binutils-debuginfo-0:2.23.52.0.1-55.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • binutils-debuginfo-0:2.23.52.0.1-55.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)
  • binutils-debuginfo-0:2.23.52.0.1-55.el7.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)
  • binutils-debuginfo-0:2.23.52.0.1-55.el7.i686 as a component of Red Hat Enterprise Linux Server (v. 7)
  • binutils-debuginfo-0:2.23.52.0.1-55.el7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • binutils-debuginfo-0:2.23.52.0.1-55.el7.ppc as a component of Red Hat Enterprise Linux Server (v. 7)
  • binutils-debuginfo-0:2.23.52.0.1-55.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • binutils-debuginfo-0:2.23.52.0.1-55.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)
  • binutils-debuginfo-0:2.23.52.0.1-55.el7.s390 as a component of Red Hat Enterprise Linux Server (v. 7)
  • binutils-debuginfo-0:2.23.52.0.1-55.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)
  • binutils-debuginfo-0:2.23.52.0.1-55.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)
  • binutils-debuginfo-0:2.23.52.0.1-55.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)
  • +18 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (16)