diff --git a/SPECS/gdb/CVE-2025-1178.patch b/SPECS/gdb/CVE-2025-1178.patch new file mode 100644 index 00000000000..889cd0916c6 --- /dev/null +++ b/SPECS/gdb/CVE-2025-1178.patch @@ -0,0 +1,37 @@ +From 0cc915268f9e0fa68f8543556a0f7fe9ebb24e7b Mon Sep 17 00:00:00 2001 +From: Nick Clifton +Date: Wed, 5 Feb 2025 13:26:51 +0000 +Subject: [PATCH] Prevent an abort in the bfd linker when attempting to + generate dynamic relocs for a corrupt input file. + +PR 32638 + +Signed-off-by: Azure Linux Security Servicing Account +Upstream-reference: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=75086e9de1707281172cc77f178e7949a4414ed0;a=patch; +--- + bfd/elf64-x86-64.c | 9 +++++++++ + 1 file changed, 9 insertions(+) + +diff --git a/bfd/elf64-x86-64.c b/bfd/elf64-x86-64.c +index 8cf733d..4fd5d01 100644 +--- a/bfd/elf64-x86-64.c ++++ b/bfd/elf64-x86-64.c +@@ -4646,6 +4646,15 @@ elf_x86_64_finish_dynamic_symbol (bfd *output_bfd, + + if (generate_dynamic_reloc) + { ++ /* If the relgot section has not been created, then ++ generate an error instead of a reloc. cf PR 32638. */ ++ if (relgot == NULL || relgot->size == 0) ++ { ++ info->callbacks->einfo (_("%F%pB: Unable to generate dynamic relocs because a suitable section does not exist\n"), ++ output_bfd); ++ return false; ++ } ++ + if (relative_reloc_name != NULL + && htab->params->report_relative_reloc) + _bfd_x86_elf_link_report_relative_reloc +-- +2.45.4 + diff --git a/SPECS/gdb/gdb.spec b/SPECS/gdb/gdb.spec index a7fa3dd8ddb..b09ee883a51 100644 --- a/SPECS/gdb/gdb.spec +++ b/SPECS/gdb/gdb.spec @@ -1,7 +1,7 @@ Summary: C debugger Name: gdb Version: 13.2 -Release: 8%{?dist} +Release: 9%{?dist} License: GPLv2+ Vendor: Microsoft Corporation Distribution: Azure Linux @@ -15,6 +15,7 @@ Patch3: CVE-2025-7546.patch Patch4: CVE-2025-11082.patch Patch5: CVE-2026-4647.patch Patch6: CVE-2026-6846.patch +Patch7: CVE-2025-1178.patch BuildRequires: expat-devel BuildRequires: gcc-c++ @@ -109,6 +110,9 @@ make check TESTS='gdb.base/default.exp' %{_mandir}/*/* %changelog +* Tue May 19 2026 Azure Linux Security Servicing Account - 13.2-9 +- Patch for CVE-2025-1178 + * Mon May 04 2026 Azure Linux Security Servicing Account - 13.2-8 - Patch for CVE-2026-6846