🛡️ SUSE-SU-2021:3616-1 — binutils (CVE-2020-16590 +12 more)

Security update for binutils

This update for binutils fixes the following issues:

Update to binutils 2.37:

• The GNU Binutils sources now requires a C99 compiler and library to

build.

• Support for Realm Management Extension (RME) for AArch64 has been

added.

• A new linker option '-z report-relative-reloc' for x86 ELF targets

has been added to report dynamic relative relocations.

• A new linker option '-z start-stop-gc' has been added to disable

special treatment of __start_*/__stop_* references when

--gc-sections.

• A new linker options '-Bno-symbolic' has been added which will

cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.

• The readelf tool has a new command line option which can be used to

specify how the numeric values of symbols are reported.

--sym-base=0|8|10|16 tells readelf to display the values in base 8,

base 10 or base 16. A sym base of 0 represents the default action

of displaying values under 10000 in base 10 and values above that in

base 16.

• A new format has been added to the nm program. Specifying

'--format=just-symbols' (or just using -j) will tell the program to

only display symbol names and nothing else.

• A new command line option '--keep-section-symbols' has been added to

objcopy and strip. This stops the removal of unused section symbols

when the file is copied. Removing these symbols saves space, but

sometimes they are needed by other tools.

• The '--weaken', '--weaken-symbol' and '--weaken-symbols' options

supported by objcopy now make undefined symbols weak on targets that

support weak symbols.

• Readelf and objdump can now display and use the contents of .debug_sup

sections.

• Readelf and objdump will now follow links to separate debug info

files by default. This behaviour can be stopped via the use of the

new '-wN' or '--debug-dump=no-follow-links' options for readelf and

the '-WN' or '--dwarf=no-follow-links' options for objdump. Also

the old behaviour can be restored by the use of the

'--enable-follow-debug-links=no' configure time option.

The semantics of the =follow-links option have also been slightly

changed. When enabled, the option allows for the loading of symbol

tables and string tables from the separate files which can be used

to enhance the information displayed when dumping other sections,

but it does not automatically imply that information from the

separate files should be displayed.

If other debug section display options are also enabled (eg

'--debug-dump=info') then the contents of matching sections in both

the main file and the separate debuginfo file *will* be displayed.

This is because in most cases the debug section will only be present

in one of the files.

If however non-debug section display options are enabled (eg

'--sections') then the contents of matching parts of the separate

debuginfo file will *not* be displayed. This is because in most

cases the user probably only wanted to load the symbol information

from the separate debuginfo file. In order to change this behaviour

a new command line option --process-links can be used. This will

allow di0pslay options to applied to both the main file and any

separate debuginfo files.

• Nm has a new command line option: '--quiet'. This suppresses 'no

symbols' diagnostic.

Update to binutils 2.36:

New features in the Assembler:

• General:
• When setting the link order attribute of ELF sections, it is now

possible to use a numeric section index instead of symbol name.

• Added a .nop directive to generate a single no-op instruction in

a target neutral manner. This instruction does have an effect on

DWARF line number generation, if that is active.

• Removed --reduce-memory-overheads and --hash-size as gas now

uses hash tables that can be expand and shrink automatically.

• X86/x86_64:
• Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key

Locker instructions.

• Support non-absolute segment values for lcall and ljmp.
• Add {disp16} pseudo prefix to x86 assembler.
• Configure with --enable-x86-used-note by default for Linux/x86.
• ARM/AArch64:
• Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,

Cortex-R82, Neoverse V1, and Neoverse N2 cores.

• Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded

Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call

Stack Recorder Extension) and BRBE (Branch Record Buffer

Extension) system registers.

• Add support for Armv8-R and Armv8.7-A ISA extensions.
• Add support for DSB memory nXS barrier, WFET and WFIT

instruction for Armv8.7.

• Add support for +csre feature for -march. Add CSR PDEC

instruction for CSRE feature in AArch64.

• Add support for +flagm feature for -march in Armv8.4 AArch64.
• Add support for +ls64 feature for -march in Armv8.7

AArch64. Add atomic 64-byte load/store instructions for this

feature.

• Add sup