[Git][security-tracker-team/security-tracker][master] two issues fixed in binutils 2.44

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
36a8b469 by Moritz Muehlenhoff at 2025-02-19T13:56:24+01:00
two issues fixed in binutils 2.44

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2505,9 +2505,10 @@ CVE-2025-1180 (A vulnerability classified as problematic has been found in GNU B
 	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=32642
 	NOTE: binutils not covered by security support
 CVE-2025-1179 (A vulnerability was found in GNU Binutils 2.43. It has been rated as c ...)
-	- binutils <unfixed> (unimportant)
+	- binutils 2.44-1 (unimportant)
 	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=32640
 	NOTE: binutils not covered by security support
+	NOTE: No exact commits pinpointed, but upstream confirms this fixed in 2.44
 CVE-2025-1178 (A vulnerability was found in GNU Binutils 2.43. It has been declared a ...)
 	- binutils <unfixed> (unimportant)
 	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=32638
@@ -21302,8 +21303,9 @@ CVE-2024-6156 (Mark Laing discovered that LXD's PKI mode, until version 5.21.2,
 CVE-2024-54140 (sigstore-java is a sigstore java client for interacting with sigstore  ...)
 	NOT-FOR-US: sigstore-java
 CVE-2024-53589 (GNU objdump 2.43 is vulnerable to Buffer Overflow in the BFD (Binary F ...)
-	- binutils <unfixed> (unimportant)
+	- binutils 2.44-1 (unimportant)
 	NOTE: https://bushido-sec.com/index.php/2024/12/05/binutils-objdump-tekhex-buffer-overflow/
+	NOTE: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=e0323071916878e0634a6e24d8250e4faff67e88 (binutils-2_44)
 	NOTE: binutils not covered by security support
 CVE-2024-53523 (JSFinder commit d70ab9bc5221e016c08cffaf0d9ac79646c90645 is vulnerable ...)
 	NOT-FOR-US: JSFinder



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/36a8b4697fe01c6bfbc2e61d0eb2baf5ab422dbf

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/36a8b4697fe01c6bfbc2e61d0eb2baf5ab422dbf
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250219/04d829a8/attachment.htm>