lp://staging/ubuntu/hoary-security/binutils

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

7. By Martin Pitt on 2006-08-16

* SECURITY UPDATE: Arbitrary code execution when building a crafted source
  with gas.
* Add debian/patches/502-messages-vsnprintf.dpatch:
  - Use vsnprintf() instead of vsprintf() to avoid overflow on overly long
    identifiers (and similar).
  - Patch backported from later stable release.
* References:
  - http://bugs.gentoo.org/show_bug.cgi?id=99464

6. By Martin Pitt on 2006-06-06

* SECURITY UPDATE: Crash and possible arbitrary code execution in apps using
  libbfd (such as 'strings').
* Add debian/patches/501_tekhex_buffer_overflow.dpatch:
  - Fix buffer overflow on hexadecimal number parsing in the Tektronix Hex
    Format BFD library backend.
  - Patch ported from CVS HEAD to 2.16.1 by Ralf S. Engelschall
    <email address hidden>, thank you!
* CVE-2006-2362

5. By Martin Pitt on 2005-05-27

Removed the additional checks from 500_security_bfd_overflow.dpatch since
it broke compilers. (Ubuntu #11249)

4. By Martin Pitt on 2005-03-18

debian/rules: Call pkgstriptranslations if present (the package does not
use debhelper, thus it does not happen automatically).

3. By James Troup <email address hidden> on 2004-05-19

debian/rules: don't use gcc-2.95 on m68k. Thanks to Adam Conrad for
pointing this out.

2. By Christopher C. Chimelis <email address hidden> on 2002-04-18

* Added patch from Gerhardt Tonn
  to fix s390 merge problem (closes: Bug#143187)
* Corrected DOW of my last changelog entry :-P

1. By Christopher C. Chimelis <email address hidden> on 2002-04-18

Import upstream version 2.12.90.0.1