http://bugzilla.opensuse.org/show_bug.cgi?id=1038880 Bug ID: 1038880 Summary: VUL-1: binutils: shift exponent 64 is too large for 64-bit type 'unsigned long' Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team@suse.de Reporter: mikhail.kasimov@gmail.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- Created attachment 724894 --> http://bugzilla.opensuse.org/attachment.cgi?id=724894&action=edit binutils-shifttoolarge_reproducer Ref: https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/ ======================================================================= # readelf -a $FILE /tmp/portage/sys-devel/binutils-9999/work/binutils/binutils/readelf.c:16941:18: runtime error: shift exponent 64 is too large for 64-bit type 'unsigned long' Affected version: master at 2017-04-12 (dunno about other versions) Fixed version: N/A Reproducer: https://github.com/asarubbo/poc/blob/master/00274-binutils-shifttoolarge Commit fix: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ddef72cdc10d82ba0... ======================================================================= (open-)SUSE: https://software.opensuse.org/package/binutils 2.28 (TW, official repo) 2.26.1 (42.{1,2}, official repo) -- You are receiving this mail because: You are on the CC list for the bug.