[Git][security-tracker-team/security-tracker][master] two issues fixed in binutils 2.44
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Wed Feb 19 12:56:58 GMT 2025
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
36a8b469 by Moritz Muehlenhoff at 2025-02-19T13:56:24+01:00
two issues fixed in binutils 2.44
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2505,9 +2505,10 @@ CVE-2025-1180 (A vulnerability classified as problematic has been found in GNU B
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=32642
NOTE: binutils not covered by security support
CVE-2025-1179 (A vulnerability was found in GNU Binutils 2.43. It has been rated as c ...)
- - binutils <unfixed> (unimportant)
+ - binutils 2.44-1 (unimportant)
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=32640
NOTE: binutils not covered by security support
+ NOTE: No exact commits pinpointed, but upstream confirms this fixed in 2.44
CVE-2025-1178 (A vulnerability was found in GNU Binutils 2.43. It has been declared a ...)
- binutils <unfixed> (unimportant)
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=32638
@@ -21302,8 +21303,9 @@ CVE-2024-6156 (Mark Laing discovered that LXD's PKI mode, until version 5.21.2,
CVE-2024-54140 (sigstore-java is a sigstore java client for interacting with sigstore ...)
NOT-FOR-US: sigstore-java
CVE-2024-53589 (GNU objdump 2.43 is vulnerable to Buffer Overflow in the BFD (Binary F ...)
- - binutils <unfixed> (unimportant)
+ - binutils 2.44-1 (unimportant)
NOTE: https://bushido-sec.com/index.php/2024/12/05/binutils-objdump-tekhex-buffer-overflow/
+ NOTE: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=e0323071916878e0634a6e24d8250e4faff67e88 (binutils-2_44)
NOTE: binutils not covered by security support
CVE-2024-53523 (JSFinder commit d70ab9bc5221e016c08cffaf0d9ac79646c90645 is vulnerable ...)
NOT-FOR-US: JSFinder
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/36a8b4697fe01c6bfbc2e61d0eb2baf5ab422dbf
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/36a8b4697fe01c6bfbc2e61d0eb2baf5ab422dbf
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250219/04d829a8/attachment.htm>
More information about the debian-security-tracker-commits
mailing list