[Bug 281070] devel/binutils: update 2.40 → 2.43, fix 4 CVEs

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=281070

--- Comment #24 from commit-hook at FreeBSD.org ---
A commit in branch main references this bug:

URL:
https://cgit.FreeBSD.org/ports/commit/?id=50ba4c61028c62d1deb28779d81ea1c235a53791

commit 50ba4c61028c62d1deb28779d81ea1c235a53791
Author:     Cy Schubert <cy at FreeBSD.org>
AuthorDate: 2024-08-25 21:04:53 +0000
Commit:     Cy Schubert <cy at FreeBSD.org>
CommitDate: 2024-09-06 14:21:02 +0000

    devel/binutils: update to 2.43

    Original patch (files/patch-* and native pkg-plist) by
    alster at vinterdalen.se. I separated cosmetic and other changes not
    related to the update into three prior commits and fixed
    pkg-plist packaging failures.

    The process used to fix pkg-plist problems resulted in correct sorting
    of ldscripts pkg-plist information. This part of the change should have
    been proactively fixed but the issue wasn't discovered until merging
    orphaned files back into the various pkg-plist files. Rather than
    introduce possible new breakage while trying to preemptively sort
    pkg-plist in a prior commit, let's just accept this change with the
    upgrade.

    PR:             281070
    Security:       CVE-2023-1972, CVE-2023-25585, CVE-2023-25586,
                    CVE-2023-25588
    Exp-run by:     antoine

 devel/binutils/Makefile                            |   4 +-
 devel/binutils/distinfo                            |   6 +-
 devel/binutils/files/extra-patch-no-info           |  15 ++-
 devel/binutils/files/patch-bfd_elf.c (gone)        |  39 --------
 .../binutils/files/patch-commit-5e9091dab88 (gone) | 108 ---------------------
 devel/binutils/files/patch-ld_ldlang.c (gone)      |  12 ---
 devel/binutils/pkg-plist                           |  13 ++-
 devel/binutils/pkg-plist-aarch64                   |  27 ++++++
 devel/binutils/pkg-plist-aarch64-none-elf          |  54 +++++++++++
 devel/binutils/pkg-plist-amd64                     |  45 +++++++++
 devel/binutils/pkg-plist-arm-gnueabi               |  27 ++++++
 devel/binutils/pkg-plist-arm-none-eabi             |   9 ++
 devel/binutils/pkg-plist-avr                       |  32 ++++++
 devel/binutils/pkg-plist-i386                      |  27 ++++++
 devel/binutils/pkg-plist-mingw32                   |   1 +
 devel/binutils/pkg-plist-mips                      | 108 +++++++++++++++++++++
 devel/binutils/pkg-plist-mips64                    | 108 +++++++++++++++++++++
 devel/binutils/pkg-plist-powerpc                   |  27 ++++++
 devel/binutils/pkg-plist-powerpc64                 |  36 +++++++
 devel/binutils/pkg-plist-powerpc64le               |  62 +++++++-----
 devel/binutils/pkg-plist-riscv32-unknown-elf       |  36 +++++++
 devel/binutils/pkg-plist-riscv64                   |  36 +++++++
 devel/binutils/pkg-plist-riscv64-none-elf          |  36 +++++++
 devel/binutils/pkg-plist-s390x                     |  68 ++++++++-----
 24 files changed, 716 insertions(+), 220 deletions(-)

-- 
You are receiving this mail because:
You are on the CC list for the bug.