binutils (2.45-7ubuntu1.2) questing-security; urgency=medium

  * SECURITY UPDATE: Out-of-Bounds Read
    - debian/patches/CVE-2025-11081.patch: PR 33406 SEGV in
      dump_dwarf_section
    - CVE-2025-11081
  * SECURITY UPDATE: Heap-Based Buffer Overflow
    - debian/patches/CVE-2025-11082.patch: elf: Don't read beyond
      .eh_frame section size
    - CVE-2025-11082
  * SECURITY UPDATE: Heap-Based Buffer Overflow
    - debian/patches/CVE-2025-11083.patch: elf: Don't match corrupt
      section header in linker input
    - CVE-2025-11083
  * SECURITY UPDATE: Out-of-Bounds Read
    - debian/patches/CVE-2025-11412.patch: PR 33452 SEGV in
      bfd_elf_gc_record_vtentry
    - CVE-2025-11412
  * SECURITY UPDATE: Out-of-Bounds Read
    - debian/patches/CVE-2025-11413.patch: Re: elf: Disallow the empty
      global symbol name
    - CVE-2025-11413
  * SECURITY UPDATE: Out-of-Bounds Read
    - debian/patches/CVE-2025-11414.patch: elf: Return error on unsorted
      symbol table if not allowed
    - CVE-2025-11414
  * SECURITY UPDATE: Out-of-Bounds Read
    - debian/patches/CVE-2025-11494.patch: x86: Keep
      _GLOBAL_OFFSET_TABLE_ for .eh_frame
    - CVE-2025-11494
  * SECURITY UPDATE: Heap-Based Buffer Overflow
    - debian/patches/CVE-2025-11495.patch: x86: Disallow TLS relocation
      in non executable section
    - CVE-2025-11495

 -- John Breton <john.breton@canonical.com>  Wed, 03 Dec 2025 09:27:38 -0500

binutils (2.45-7ubuntu1.1) questing-security; urgency=medium

  * SECURITY UPDATE: Unchecked Return Value
    - debian/patches/CVE-2025-11839.patch: Remove call to abort in the
      DGB debug format printing code, thus allowing the display of a
      fuzzed input file to complete without triggering an abort.
    - CVE-2025-11839
  * SECURITY UPDATE: Out-of-Bounds Read
    - debian/patches/CVE-2025-11840.patch: PR 33455 SEGV in vfinfo at
      ldmisc.c:527
    - CVE-2025-11840

 -- John Breton <john.breton@canonical.com>  Thu, 20 Nov 2025 08:19:54 -0500

binutils (2.45-7ubuntu1) questing; urgency=medium

  * Merge with Debian; remaining changes:
    - Build from upstream sources.

 -- Matthias Klose <doko@ubuntu.com>  Wed, 10 Sep 2025 10:34:19 +0200

binutils (2.45-7) unstable; urgency=medium

  * Strip libsframe.a. Closes: #1114662.

 -- Matthias Klose <doko@debian.org>  Mon, 08 Sep 2025 10:27:06 +0200

binutils (2.45-6ubuntu1) questing; urgency=medium

  * Merge with Debian; remaining changes:
    - Build from upstream sources.

 -- Matthias Klose <doko@ubuntu.com>  Tue, 02 Sep 2025 10:24:29 +0200

binutils (2.45-6) unstable; urgency=medium

  * New upstream snapshot, taken from the 2.45 branch.
    - strip: Don't check target_defaulted in input BFD.
    - PR binutils/33230, strip: Treat "default" output_target as unspecified.
    - PR binutils/33246, strip: Don't treat fat IR objects as plugin object.
  * Disable "non-SP/FP register X in .cfi_def_cfa" warning. Closes: #1112585.

 -- Matthias Klose <doko@debian.org>  Tue, 02 Sep 2025 10:16:56 +0200

binutils (2.45-5) unstable; urgency=medium

  * libsframe-dev: Adjust breaks/replaces relations. Closes: #1111464.
  * Disable ".cfi_escape with op" warning.

 -- Matthias Klose <doko@debian.org>  Thu, 28 Aug 2025 09:03:05 +0200

binutils (2.45-4) unstable; urgency=medium

  * New upstream snapshot, taken from the 2.45 branch.
    - libctf: link: rejig lazy opening to not need weak symbols.
    - libctf: don't run tests requiring deduplicating linker
      unless one is in use.
    - libctf: exclude always-emitted Solaris symbols from the symtypetab.
    - libctf: get libctf-nobfd.ver from the right place with Solaris ld.
    - libctf: do not use mmap on Solaris 11.
  * binutils: Drop dependency on binutils-gold again.
  * Remove explicit GCC 14 build dependency. Closes: #1105026.
  * binutils-dev: Drop the dependency on libsframe-dev.
  * Update VCS attributes.

 -- Matthias Klose <doko@debian.org>  Sat, 16 Aug 2025 19:13:24 +0200

binutils (2.45-3ubuntu3) questing; urgency=medium

  * binutils: Drop dependency on binutils-gold.

 -- Matthias Klose <doko@ubuntu.com>  Sun, 10 Aug 2025 13:59:37 +0200

binutils (2.45-3ubuntu2) questing; urgency=medium

  * Merge with Debian; remaining changes:
    - Build from upstream sources.

 -- Matthias Klose <doko@ubuntu.com>  Sun, 10 Aug 2025 09:49:40 +0200

# For older changelog entries, run 'apt-get changelog binutils-common'
