[rpms/binutils] rawhide: Rebase to bring in commits d9ab6e42e739fe826b02a5f868586132ea2d893a and - 0f9faaebc91bc1886a563bde6c178601b4be743b, thus fixing CVE-2026-19548.

[rpms/binutils] rawhide: Rebase to bring in commits d9ab6e42e739fe826b02a5f868586132ea2d893a and - 0f9faaebc91bc1886a563bde6c178601b4be743b, thus fixing CVE-2026-19548.

[Nick Clifton]

            A new commit has been pushed.

            Repo   : rpms/binutils
            Branch : rawhide
            Commit : e0ff1420168d9a3b490321d02cbe8041104690a7
            Author : Nick Clifton <nickc@redhat.com>
            Date   : 2026-08-19T13:25:44+01:00
            Stats  : +11/-7 in 2 file(s)
            URL    : https://src.fedoraproject.org/rpms/binutils/c/e0ff1420168d9a3b490321d02cbe8041104690a7?branch=rawhide

            Log:
            Rebase to bring in commits d9ab6e42e739fe826b02a5f868586132ea2d893a and - 0f9faaebc91bc1886a563bde6c178601b4be743b, thus fixing CVE-2026-19548.
Resolves: #2514618

---
diff --git a/binutils.spec b/binutils.spec
index dca5619..95b9914 100644
--- a/binutils.spec
+++ b/binutils.spec
@@ -7,7 +7,7 @@ Name: binutils%{?_with_debug:-debug}
 # The variable %%{source} (see below) should be set to indicate which of these
 # origins is being used.
 Version: 2.47.50
-Release: 3%{?dist}
+Release: 4%{?dist}
 License: GPL-3.0-or-later AND (GPL-3.0-or-later WITH Bison-exception-2.2) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND BSD-3-Clause AND GFDL-1.3-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later
 URL: https://sourceware.org/binutils
 
@@ -125,15 +125,15 @@ URL: https://sourceware.org/binutils
 # %%define source official-release
 # %%define source even-pre-release
 # %%define source odd-pre-release
-%define source snapshot
-# %%define source tarball
+# %%define source snapshot
+%define source tarball
 
 # For snapshots and tarballs an extension is used to indicate the commit ID.
 # We need to know that so that the source extraction process will work
 # correctly.  Note %%(echo) is used because you cannot directly set a
 # spec variable to a hexadecimal string value.
 
-%define commit_id %(echo "4e8ba93fdb2")
+%define commit_id %(echo "4ed310516eb76cbf650523a53f733060d3ae71b9")
 
 #----End of Configure Options------------------------------------------------
 
@@ -232,7 +232,7 @@ Source0: binutils-%{version}.tar.xz
 %elif "%{source}" == "snapshot"
 Source0: binutils-with-gold-%{version}-%{commit_id}.tar.xz
 %elif "%{source}" == "tarball"
-Source0: binutils-%{version}-%{commit_id}.tar.xz
+Source0: binutils-with-gold-%{version}-%{commit_id}.tar.xz
 %endif
 
 Source1: binutils-2.19.50.0.1-output-format.sed
@@ -636,7 +636,7 @@ mv ../%{gold_tarball}/elfcpp .
 %elif "%{source}" == "odd-pre-release"
 %autosetup -p1 -n binutils-%{version}
 %else
-%autosetup -p1 -n binutils-%{version} 
+%autosetup -p1 -n binutils-with-gold-%{version} 
 %endif
 
 # On ppc64 and aarch64, we might use 64KiB pages
@@ -1500,6 +1500,10 @@ exit 0
 
 #----------------------------------------------------------------------------
 %changelog
+* Wed Aug 19 2026 Nick Clifton <nickc@redhat.com> - 2.47.50-4
+- Rebase to bring in commits d9ab6e42e739fe826b02a5f868586132ea2d893a and
+- 0f9faaebc91bc1886a563bde6c178601b4be743b, thus fixing CVE-2026-19548.  (#2514618)
+
 * Thu Aug 13 2026 Nick Clifton <nickc@redhat.com> - 2.47.50-3
 - Switch from using %%bcond_with and %%bcond_without to just %%bcond <0|1>
 

diff --git a/sources b/sources
index 373fa58..340046d 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (binutils-with-gold-2.47.50-4e8ba93fdb2.tar.xz) = 0b07b1d2f819ebd01f4ff583b21cec2bdd86b4056b0f190a4d172480738c7f204e62936a135f759ebeac6fa6fa7362bd2e16505fd65e697dc309f99959a5e9f9
+SHA512 (binutils-with-gold-2.47.50-4ed310516eb76cbf650523a53f733060d3ae71b9.tar.xz) = 35fe1d48994df35979ffe763f7ae4ed2dd0b041d668146de721176e88f18e1bbf63010dac401fe7c34b946e573a89ae89fb359f4bcf976a239a6c61b75e5b90f
 SHA512 (binutils-2.19.50.0.1-output-format.sed) = 2f8686b0c8af13c98cda056824c2820416f6e2d003f70b78ccf5314525b9ee3684d421dfa83e638a2d42d06ea4d4bdaf5226b64d6ec26f7ff59c44ffb2a23dd2