binutils: A vulnerability was found in GNU Binutils 2.43 and classified asproblematic

A vulnerability was found in GNU Binutils 2.43 and classified asproblematic. Affected by this issue is the function link_order_scan of thefile ld/ldelfgen.c of the component ld. The manipulation leads to memoryleak. The attack may be launched remotely. The complexity of an attack israther high. The exploitation is known to be difficult. The exploit hasbeen disclosed to the public and may be used. It is recommended to apply apatch to fix this issue. The code maintainer explains: "I'm not going tocommit some of the leak fixes I've been working on to the 2.44 branch dueto concern that would destabilise ld. All of the reported leaks in thisbugzilla have been fixed on binutils master."

Where it's fixed