Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
356282f9 by Salvatore Bonaccorso at 2026-07-28T08:06:40+02:00
Update status for some binutils issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -71589,10 +71589,10 @@ CVE-2026-6855 (A flaw was found in InstructLab. A
local attacker could exploit a
CVE-2026-6848 (A flaw was found in Red Hat Quay. When Red Hat Quay requests
password ...)
NOT-FOR-US: Red Hat Quay
CVE-2026-6846 (A flaw was found in binutils. A heap-buffer-overflow
vulnerability exi ...)
- - binutils <unfixed> (unimportant)
+ - binutils 2.47-1 (unimportant)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2460006
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=34049
- NOTE:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=7a089e0302382f4d4e077941156e1eaa68d01393
+ NOTE:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=7a089e0302382f4d4e077941156e1eaa68d01393
(binutils-2_47)
NOTE: binutils not covered by security support
CVE-2026-6845 (A flaw was found in binutils, specifically within the `readelf`
utilit ...)
- binutils <unfixed> (unimportant)
@@ -89804,9 +89804,9 @@ CVE-2026-4673 (Heap buffer overflow in WebAudio in
Google Chrome prior to 146.0.
- chromium 146.0.7680.164-1
[bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-4647 (A flaw was found in the GNU Binutils BFD library, a widely used
compon ...)
- - binutils <unfixed> (unimportant)
+ - binutils 2.47-1 (unimportant)
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=33919
- NOTE: Fixed by:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=9e99dbc1f19ffaf18d0250788951706066ebe7f2
+ NOTE: Fixed by:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=9e99dbc1f19ffaf18d0250788951706066ebe7f2
(binutils-2_47)
NOTE: binutils not covered by security support
CVE-2026-4645
REJECTED
@@ -96897,14 +96897,14 @@ CVE-2025-70031 (An issue pertaining to CWE-352:
Cross-Site Request Forgery was d
CVE-2025-70030 (An issue pertaining to CWE-1333: Inefficient Regular
Expression Comple ...)
NOT-FOR-US: Sunbird-Ed SunbirdEd-portal
CVE-2025-69648 (GNU Binutils thru 2.45.1 readelf contains a denial-of-service
vulnerab ...)
- - binutils <unfixed> (unimportant)
+ - binutils 2.46-1 (unimportant)
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=33641
- NOTE:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=598704a00cbac5e85c2bedd363357b5bf6fcee33
+ NOTE:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=598704a00cbac5e85c2bedd363357b5bf6fcee33
(binutils-2_46)
NOTE: binutils not covered by security support
CVE-2025-69647 (GNU Binutils thru 2.45.1 readelf contains a denial-of-service
vulnerab ...)
- - binutils <unfixed> (unimportant)
+ - binutils 2.46-1 (unimportant)
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=33640
- NOTE:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=455446bbdc8675f34808187de2bbad4682016ff7
+ NOTE:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=455446bbdc8675f34808187de2bbad4682016ff7
(binutils-2_46)
NOTE: binutils not covered by security support
CVE-2025-69279 (In nr modem, there is a possible system crash due to improper
input va ...)
NOT-FOR-US: Unisoc
@@ -97633,39 +97633,39 @@ CVE-2025-69653 (A crafted JavaScript input can
trigger an internal assertion fai
NOTE: https://github.com/bellard/quickjs/issues/467
NOTE: Fixed by:
https://github.com/bellard/quickjs/commit/1dbba8a88eaa40d15a8a9b70bb1a0b8fb5b552e6
CVE-2025-69652 (GNU Binutils thru 2.46 readelf contains a vulnerability that
leads to ...)
- - binutils <unfixed> (unimportant)
+ - binutils 2.46-1 (unimportant)
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=33701
- NOTE:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=44b79abd0fa12e7947252eb4c6e5d16ed6033e01
+ NOTE:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=44b79abd0fa12e7947252eb4c6e5d16ed6033e01
(binutils-2_46)
NOTE: binutils not covered by security support
CVE-2025-69651 (GNU Binutils thru 2.46 readelf contains a vulnerability that
leads to ...)
- - binutils <unfixed> (unimportant)
+ - binutils 2.46-1 (unimportant)
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=33700
- NOTE:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea4bc025abdba85a90e26e13f551c16a44bfa921
+ NOTE:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea4bc025abdba85a90e26e13f551c16a44bfa921
(binutils-2_46)
NOTE: binutils not covered by security support
CVE-2025-69650 (GNU Binutils thru 2.46 readelf contains a double free
vulnerability wh ...)
- - binutils <unfixed> (unimportant)
+ - binutils 2.46-1 (unimportant)
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=33698
- NOTE:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea4bc025abdba85a90e26e13f551c16a44bfa921
+ NOTE:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea4bc025abdba85a90e26e13f551c16a44bfa921
(binutils-2_46)
NOTE: binutils not covered by security support
CVE-2025-69649 (GNU Binutils thru 2.46 readelf contains a null pointer
dereference vul ...)
- - binutils <unfixed> (unimportant)
+ - binutils 2.46-1 (unimportant)
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=33697
- NOTE:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=66a3492ce68e1ae45b2489bd9a815c39ea5d7f66
+ NOTE:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=66a3492ce68e1ae45b2489bd9a815c39ea5d7f66
(binutils-2_46)
NOTE: binutils not covered by security support
CVE-2025-69646 (Binutils objdump contains a denial-of-service vulnerability
when proce ...)
- - binutils <unfixed> (unimportant)
+ - binutils 2.46-1 (unimportant)
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=33638
- NOTE:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=598704a00cbac5e85c2bedd363357b5bf6fcee33
+ NOTE:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=598704a00cbac5e85c2bedd363357b5bf6fcee33
(binutils-2_46)
NOTE: binutils not covered by security support
CVE-2025-69645 (Binutils objdump contains a denial-of-service vulnerability
when proce ...)
- - binutils <unfixed> (unimportant)
+ - binutils 2.46-1 (unimportant)
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=33637
- NOTE:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=cdb728d4da6184631989b192f1022c219dea7677
+ NOTE:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=cdb728d4da6184631989b192f1022c219dea7677
(binutils-2_46)
NOTE: binutils not covered by security support
CVE-2025-69644 (An issue was discovered in Binutils before 2.46. The objdump
contains ...)
- - binutils <unfixed> (unimportant)
+ - binutils 2.46-1 (unimportant)
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=33639
- NOTE:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=455446bbdc8675f34808187de2bbad4682016ff7
+ NOTE:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=455446bbdc8675f34808187de2bbad4682016ff7
(binutils-2_46)
NOTE: binutils not covered by security support
CVE-2025-15602 (Snipe-IT versions prior to 8.3.7 contain sensitive user
attributes rel ...)
- snipe-it <itp> (bug #1005172)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/356282f9e4152b3abf132883db50431879ebebd4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/356282f9e4152b3abf132883db50431879ebebd4
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
