public inbox for binutils@sourceware.org
 help / color / mirror / Atom feed
* Regarding clarification on affected versions for Bug 29732
@ 2024-04-05 10:54 Sadineni Harish
  2024-04-12 10:28 ` Nick Clifton
  0 siblings, 1 reply; 2+ messages in thread
From: Sadineni Harish @ 2024-04-05 10:54 UTC (permalink / raw)
  To: binutils

[-- Attachment #1: Type: text/plain, Size: 428 bytes --]

In the bug https://sourceware.org/bugzilla/show_bug.cgi?id=29732 it is
mentioned the version is 2.39. i tried to reproduce the bug in
binutils-2.36.1 it was not reproduced. From the following nist link
https://nvd.nist.gov/vuln/detail/CVE-2022-44840 Known Affected Software
Configurations it has mentioned it is Affected up to 2.39.
Is binutils-2.36.1 really affected by this bug?.

Thanks in advance.

Regards,
Harish sadineni

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: Regarding clarification on affected versions for Bug 29732
  2024-04-05 10:54 Regarding clarification on affected versions for Bug 29732 Sadineni Harish
@ 2024-04-12 10:28 ` Nick Clifton
  0 siblings, 0 replies; 2+ messages in thread
From: Nick Clifton @ 2024-04-12 10:28 UTC (permalink / raw)
  To: Sadineni Harish, binutils

Hi Sadineni,

> In the bug https://sourceware.org/bugzilla/show_bug.cgi?id=29732 <https://sourceware.org/bugzilla/show_bug.cgi?id=29732> it is mentioned the version is 2.39. i tried to 
> reproduce the bug in binutils-2.36.1 it was not reproduced. From the following nist link https://nvd.nist.gov/vuln/detail/CVE-2022-44840 
> <https://nvd.nist.gov/vuln/detail/CVE-2022-44840> Known Affected Software Configurations it has mentioned it is Affected up to 2.39. Is binutils-2.36.1 really affected by 
> this bug?.

Yes.

The reproducer in PR 29732 may not be able to trigger the bug,
but the 2.36.1 release does contain the same faulty code as
the 2.39 release.

Cheers
   Nick


^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2024-04-12 10:28 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2024-04-05 10:54 Regarding clarification on affected versions for Bug 29732 Sadineni Harish
2024-04-12 10:28 ` Nick Clifton

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).