Updated devtoolset-4-binutils packages that fix several bugs and add variousenhancements are now available for Red Hat Developer Toolset 4.1.
Binutils is a collection of binary utilities, including ar (for creating,modifying, and extracting from archives), as (a family of GNU assemblers), gprof(for displaying call graph profile data), ld (the GNU linker), nm (for listingsymbols from object files), objcopy (for copying and translating object files),objdump (for displaying information from object files), ranlib (for generatingan index for the contents of an archive), readelf (for displaying detailedinformation about binary files), size (for listing the section sizes of anobject or archive file), strings (for listing printable strings from files),strip (for discarding symbols), and addr2line (for converting addresses to fileand line).

The devtoolset-4-binutils packages provide the Red Hat DeveloperToolset version of binutils.The devtoolset-4-binutils packages have been upgraded to upstream version2.25.1, which provides a number of bug fixes and enhancements over the previousversion. (BZ#1306297, BZ#1306298)For detailed changes, see the Red Hat Developer Toolset 4.1 User Guide linkedfrom the References section.This update also fixes the following bug:* Previously, running the readelf command on a binary file that was corrupted ina certain way could lead to reading from unallocated memory.

As a consequence,the readelf program terminated unexpectedly with a segmentation fault and couldalso generate a core file.

To fix this bug, extra code has been added to thereadelf program to detect negative offsets in the unwind data section, and thebehavior has been modified to report these offsets as errors instead ofattempting to follow them.

As a result, readelf returns an error message helpingto diagnose the corruption in the supplied binary file in this scenario.(BZ#1260034, BZ#1260035)In addition, this update adds the following enhancement:* This update add support for Intel’s OSPKE instructions, as documented in theIntel64 and IA-32 Architectures Software Developerâs Manual Volume 2, September2015. (BZ#1309347)Users of devtoolset-4-binutils are advised to upgrade to these updated packages,which fix these bugs and add these enhancements.
Before applying this update, make sure all previously released erratarelevant to your system have been applied.For details on how to apply this update, refer to:https://access.redhat.com/articles/11258Red Hat Software Collections 1 for RHEL 6

    MD5: 07d289971f03679e2414c42aa3d000d4SHA-256: 7f58f811c219711bdabe83a739552af23b2389a50e17e849bfc7e82742cfa393
    MD5: ce2a9db63031247260a082fa0fbc5b7aSHA-256: e088cfaad586cd67aec6bda53535a8673349f709b937864e4692a36a1bd1ef9e
    MD5: ad9ff3c0490fe60f24f2142a94e2203aSHA-256: 28f3c5990d2743856490fb3bc2eb32e62dde68353d60e01f5ecf4b915e4be5b3
    MD5: bbb2c5731bbfaec17b7b48c0b6119e02SHA-256: ad6d43fa9209afaa5a175c73a345b222e2571085b7f32f39d7f35176d4128829
    MD5: 9a8fde3c2c4dfcfe2ca001a819359f64SHA-256: 40e4358ddcd501810369f444ee0656dbb377e06c3e23baadb9ad331b32524fc8
    MD5: ad9056b5c5df96f54f7a0f9558417c0bSHA-256: 3bae94f8da5e0caa6c1a0bd776f17b1ffa4b0ffd0c91f63afc6d8eb6c2e0e8c6
Red Hat Software Collections 1 for RHEL 7

    MD5: 2ac881f0b64dccabd310e1fe466c837cSHA-256: 5619320d8875735915f90ece141536c71a32ea802c9ad897d7c96f9595e5bb92
    MD5: 21011e37708a87c5e11942ca8e1484b7SHA-256: d408227c6d9671f4ceba1d3b07f5475671fceecc874b267d5f648b4ca6a6fd31
    MD5: 208828928a16a5dbf276082e15cdb02aSHA-256: 29df25e4761226e215c65cd2b0cf195e9c8ebb880985aa68f9904e5f7c9dd8e5
    MD5: ca722b21e521a0a22c953477e86f290dSHA-256: 7dd7cc4194c233149338336236894d30abab696acc774296306130716699180d
    MD5: d07ff28b4c10b3b9b0f4c55065c52fcdSHA-256: 0f0fc7353a726d0ddebbc11f9671c6e858e092e21304d7c197d05956bb871e53
    MD5: 3b3ca4b0e206b3648f8aae91c9719395SHA-256: 75268f17a26d7fc2e3c99eee5ae50438caae1c0ebebb443e6e46eee6e477c2c1
(The unlinked packages above are only available from the Red Hat Network)

1260034 – Specially crafted binary can cause readelf to read from an arbitrary address-1260035 – Specially crafted binary can cause readelf to read from an arbitrary address-1312376 – Failures in the GOLD testsuite show up as problems in rpmdiff

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from: