OESA-2022-1501

Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2022-1501
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2022-1501.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2022-1501
Upstream
Published
2022-01-22T11:03:29Z
Modified
2025-09-03T06:17:41.290730Z
Summary
binutils security update
Details

The GNU Binutils are a collection of binary tools. The main ones are: ld - the GNU linker. as - the GNU assembler. addr2line - Converts addresses into filenames and line numbers. ar - A utility for creating, modifying and extracting from archives. c++filt - Filter to demangle encoded C++ symbols. dlltool - Creates files for building and using DLLs. gold - A new, faster, ELF only linker, still in beta test. gprof - Displays profiling information. nlmconv - Converts object code into an NLM. nm - Lists symbols from object files. objcopy - Copies and translates object files. objdump - Displays information from object files. ranlib - Generates an index to the contents of an archive. readelf - Displays information from any ELF format object file. size - Lists the section sizes of an object or archive file. strings - Lists printable strings from files. trip - Discards symbols. windmc - A Windows compatible message compiler. windres - A compiler for Windows resource files.

Security Fix(es):

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and interpreters. Adversaries can leverage this to encode source code for compilers accepting Unicode such that targeted vulnerabilities are introduced invisibly to human reviewers.(CVE-2021-42574)

Database specific
{
    "severity": "High"
}
References

Affected packages

openEuler:20.03-LTS-SP1 / binutils

Package

Name
binutils
Purl
pkg:rpm/openEuler/binutils&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.34-19.oe1

Ecosystem specific

{
    "src": [
        "binutils-2.34-19.oe1.src.rpm"
    ],
    "x86_64": [
        "binutils-debugsource-2.34-19.oe1.x86_64.rpm",
        "binutils-help-2.34-19.oe1.x86_64.rpm",
        "binutils-devel-2.34-19.oe1.x86_64.rpm",
        "binutils-debuginfo-2.34-19.oe1.x86_64.rpm",
        "binutils-2.34-19.oe1.x86_64.rpm"
    ],
    "aarch64": [
        "binutils-2.34-19.oe1.aarch64.rpm",
        "binutils-debuginfo-2.34-19.oe1.aarch64.rpm",
        "binutils-help-2.34-19.oe1.aarch64.rpm",
        "binutils-debugsource-2.34-19.oe1.aarch64.rpm",
        "binutils-devel-2.34-19.oe1.aarch64.rpm"
    ]
}

openEuler:20.03-LTS-SP2 / binutils

Package

Name
binutils
Purl
pkg:rpm/openEuler/binutils&distro=openEuler-20.03-LTS-SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.34-19.oe1

Ecosystem specific

{
    "src": [
        "binutils-2.34-19.oe1.src.rpm"
    ],
    "x86_64": [
        "binutils-devel-2.34-19.oe1.x86_64.rpm",
        "binutils-debuginfo-2.34-19.oe1.x86_64.rpm",
        "binutils-debugsource-2.34-19.oe1.x86_64.rpm",
        "binutils-help-2.34-19.oe1.x86_64.rpm",
        "binutils-2.34-19.oe1.x86_64.rpm"
    ],
    "aarch64": [
        "binutils-2.34-19.oe1.aarch64.rpm",
        "binutils-devel-2.34-19.oe1.aarch64.rpm",
        "binutils-help-2.34-19.oe1.aarch64.rpm",
        "binutils-debuginfo-2.34-19.oe1.aarch64.rpm",
        "binutils-debugsource-2.34-19.oe1.aarch64.rpm"
    ]
}

openEuler:20.03-LTS-SP3 / binutils

Package

Name
binutils
Purl
pkg:rpm/openEuler/binutils&distro=openEuler-20.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.34-19.oe1

Ecosystem specific

{
    "src": [
        "binutils-2.34-19.oe1.src.rpm"
    ],
    "x86_64": [
        "binutils-debugsource-2.34-19.oe1.x86_64.rpm",
        "binutils-help-2.34-19.oe1.x86_64.rpm",
        "binutils-2.34-19.oe1.x86_64.rpm",
        "binutils-devel-2.34-19.oe1.x86_64.rpm",
        "binutils-debuginfo-2.34-19.oe1.x86_64.rpm"
    ],
    "aarch64": [
        "binutils-debuginfo-2.34-19.oe1.aarch64.rpm",
        "binutils-debugsource-2.34-19.oe1.aarch64.rpm",
        "binutils-2.34-19.oe1.aarch64.rpm",
        "binutils-help-2.34-19.oe1.aarch64.rpm",
        "binutils-devel-2.34-19.oe1.aarch64.rpm"
    ]
}