[scarthgap,v2,0/1] binutils: fix CVE-2025-69649, and CVE-2025-69652

Message ID	20260709123740.150315-1-roland.kovacs@est.tech
Headers	show Return-Path: <roland.kovacs@est.tech> ip: 52.101.84.44, mailfrom: roland.kovacs@est.tech) From: Roland Kovacs <roland.kovacs@est.tech> To: openembedded-core@lists.openembedded.org Subject: [scarthgap][PATCH v2 0/1] binutils: fix CVE-2025-69649, and CVE-2025-69652 Date: Thu, 9 Jul 2026 14:37:39 +0200 Message-ID: <20260709123740.150315-1-roland.kovacs@est.tech> Content-Transfer-Encoding: quoted-printable Content-Type: text/plain MIME-Version: 1.0
Series	binutils: fix CVE-2025-69649, and CVE-2025-69652 \| expand [scarthgap,v2,0/1] binutils: fix CVE-2025-69649, and CVE-2025-69652 [scarthgap,v2,1/1] binutils: fix CVE-2025-69649, and CVE-2025-69652

Message ID

20260709123740.150315-1-roland.kovacs@est.tech

Headers

From: Roland Kovacs <roland.kovacs@est.tech>
To: openembedded-core@lists.openembedded.org
Subject: [scarthgap][PATCH v2 0/1] binutils: fix CVE-2025-69649,
 and CVE-2025-69652
Date: Thu,  9 Jul 2026 14:37:39 +0200
Message-ID: <20260709123740.150315-1-roland.kovacs@est.tech>
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: 
 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
X-OriginatorOrg: est.tech
X-MS-Exchange-CrossTenant-Network-Message-Id: 
 cd7a53ae-7fda-4715-c7fb-08deddb6df13
X-MS-Exchange-CrossTenant-AuthSource: DB8P189MB0732.EURP189.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 09 Jul 2026 12:37:43.1801
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: d2585e63-66b9-44b6-a76e-4f4b217d97fd
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: 
 n4uWslots0BaJB1+LuGo8kPGnCwXKB6QAnHdiF2liaDfICihdsEQ/Z95hICdKcJnu47stipTTKxyYNf1qS/zyQ==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU2PPFB830855DA
List-Id: <openembedded-core.lists.openembedded.org>
X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com
 [45.33.107.173] by
 aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for
 <openembedded-core@lists.openembedded.org>; Thu, 09 Jul 2026 12:37:50 -0000
X-Groupsio-URL: 
 https://lists.openembedded.org/g/openembedded-core/message/240576

Series

binutils: fix CVE-2025-69649, and CVE-2025-69652 | expand

Message

Roland Kovacs July 9, 2026, 12:37 p.m. UTC

Changes compared to v1:
  - Add note to CVE-2025-69649 patch on difference compared to upstream
    change.

Roland Kovacs (1):
  binutils: fix CVE-2025-69649, and CVE-2025-69652

 .../binutils/binutils-2.42.inc                |  2 +
 .../binutils/binutils/CVE-2025-69649.patch    | 44 +++++++++++++++++++
 .../binutils/binutils/CVE-2025-69652.patch    | 39 ++++++++++++++++
 3 files changed, 85 insertions(+)
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2025-69649.patch
 create mode 100644 meta/recipes-devtools/binutils/binutils/CVE-2025-69652.patch