Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
36a8b469 by Moritz Muehlenhoff at 2025-02-19T13:56:24+01:00
two issues fixed in binutils 2.44
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2505,9 +2505,10 @@ CVE-2025-1180 (A vulnerability classified as problematic
has been found in GNU B
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=32642
NOTE: binutils not covered by security support
CVE-2025-1179 (A vulnerability was found in GNU Binutils 2.43. It has been
rated as c ...)
- - binutils <unfixed> (unimportant)
+ - binutils 2.44-1 (unimportant)
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=32640
NOTE: binutils not covered by security support
+ NOTE: No exact commits pinpointed, but upstream confirms this fixed in
2.44
CVE-2025-1178 (A vulnerability was found in GNU Binutils 2.43. It has been
declared a ...)
- binutils <unfixed> (unimportant)
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=32638
@@ -21302,8 +21303,9 @@ CVE-2024-6156 (Mark Laing discovered that LXD's PKI
mode, until version 5.21.2,
CVE-2024-54140 (sigstore-java is a sigstore java client for interacting with
sigstore ...)
NOT-FOR-US: sigstore-java
CVE-2024-53589 (GNU objdump 2.43 is vulnerable to Buffer Overflow in the BFD
(Binary F ...)
- - binutils <unfixed> (unimportant)
+ - binutils 2.44-1 (unimportant)
NOTE:
https://bushido-sec.com/index.php/2024/12/05/binutils-objdump-tekhex-buffer-overflow/
+ NOTE:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=e0323071916878e0634a6e24d8250e4faff67e88
(binutils-2_44)
NOTE: binutils not covered by security support
CVE-2024-53523 (JSFinder commit d70ab9bc5221e016c08cffaf0d9ac79646c90645 is
vulnerable ...)
NOT-FOR-US: JSFinder
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/36a8b4697fe01c6bfbc2e61d0eb2baf5ab422dbf
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/36a8b4697fe01c6bfbc2e61d0eb2baf5ab422dbf
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
