diff --git a/backport-CVE-2025-11840.patch b/backport-CVE-2025-11840.patch new file mode 100644 index 0000000000000000000000000000000000000000..7a942ba92d18a30a563b7a3e3b0a251da0708ad3 --- /dev/null +++ b/backport-CVE-2025-11840.patch @@ -0,0 +1,35 @@ +From f6b0f53a36820da91eadfa9f466c22f92e4256e0 Mon Sep 17 00:00:00 2001 +From: Alan Modra +Date: Mon, 3 Nov 2025 09:03:37 +1030 +Subject: [PATCH] PR 33455 SEGV in vfinfo at ldmisc.c:527 + +A reloc howto set up with EMPTY_HOWTO has a NULL name. More than one +place emitting diagnostics assumes a reloc howto won't have a NULL +name. + + PR 33455 + * coffcode.h (coff_slurp_reloc_table): Don't allow a howto with + a NULL name. + +Reference:https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=f6b0f53a36820da91eadfa9f466c22f92e4256e0 +Conflict:NA +--- + bfd/coffcode.h | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/bfd/coffcode.h b/bfd/coffcode.h +index 1e5acc0032c..ce1e39131b4 100644 +--- a/bfd/coffcode.h ++++ b/bfd/coffcode.h +@@ -5345,7 +5345,7 @@ coff_slurp_reloc_table (bfd * abfd, sec_ptr asect, asymbol ** symbols) + RTYPE2HOWTO (cache_ptr, &dst); + #endif /* RELOC_PROCESSING */ + +- if (cache_ptr->howto == NULL) ++ if (cache_ptr->howto == NULL || cache_ptr->howto->name == NULL) + { + _bfd_error_handler + /* xgettext:c-format */ +-- +2.33.0 + diff --git a/gdb.spec b/gdb.spec index 26c38f047b7a7a26ebb84237a0891527dd30f0d0..5553958188d939bc1390f5daf92bbe09ef6db2b6 100644 --- a/gdb.spec +++ b/gdb.spec @@ -1,6 +1,6 @@ Name: gdb Version: 11.1 -Release: 15 +Release: 16 License: GPLv3+ and GPLv3+ with exceptions and GPLv2+ and GPLv2+ with exceptions and GPL+ and LGPLv2+ and LGPLv3+ and BSD and Public Domain and GFDL-1.3 Source: ftp://sourceware.org/pub/gdb/releases/gdb-%{version}.tar.xz @@ -115,6 +115,7 @@ Patch96: backport-0003-CVE-2021-32256.patch Patch97: backport-0001-CVE-2025-11083.patch Patch98: backport-0002-CVE-2025-11083.patch Patch99: backport-CVE-2025-11412.patch +Patch100: backport-CVE-2025-11840.patch %global gdb_src gdb-%{version} %global gdb_build build-%{_target_platform} @@ -391,6 +392,9 @@ rm -f $RPM_BUILD_ROOT%{_datadir}/gdb/python/gdb/command/backtrace.py %{_infodir}/gdb.info* %changelog +* Tue Nov 04 2025 wangxiao - 11.1-16 +- fix CVE-2025-11840 + * Fri Oct 31 2025 wangxiao - 11.1-15 - fix CVE-2025-11412