Oval Definition:oval:com.redhat.rhsa:def:20214593
Revision Date:2021-11-10Version:637
Title:RHSA-2021:4593: annobin security update (Moderate)
Description:Annobin provides a compiler plugin to annotate and tools to examine compiled binary files.

Security Fix(es):

  • Developer environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks (CVE-2021-42574)

    The following changes were introduced in annobin in order to facilitate detection of BiDi Unicode characters:

    This update of annobin adds a new annocheck test to detect the presence of multibyte characters in symbol names.

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2021-42574
    RHSA-2021:4593
    Platform(s):Red Hat Enterprise Linux 8
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 8 is installed
  • OR Red Hat CoreOS 4 is installed
  • AND
  • annobin is earlier than 0:9.72-1.el8_5.2
  • AND annobin is signed with Red Hat redhatrelease2 key
  • annobin-annocheck is earlier than 0:9.72-1.el8_5.2
  • AND annobin-annocheck is signed with Red Hat redhatrelease2 key
  • BACK