UbuntuUpdates.org

Package "binutils-arm-linux-gnueabihf"

Name: binutils-arm-linux-gnueabihf

Description:

GNU binary utilities, for arm-linux-gnueabihf target

Latest version: 2.44-3ubuntu1.3
Release: plucky (25.04)
Level: updates
Repository: main
Head package: binutils
Homepage: https://www.gnu.org/software/binutils/

Links


Download "binutils-arm-linux-gnueabihf"


Other versions of "binutils-arm-linux-gnueabihf" in Plucky

Repository Area Version
base main 2.44-3ubuntu1
security main 2.44-3ubuntu1.3

Changelog

Version: 2.44-3ubuntu1.3 2025-12-11 01:10:19 UTC

  binutils (2.44-3ubuntu1.3) plucky-security; urgency=medium

  * SECURITY UPDATE: Out-of-Bounds Read
    - debian/patches/CVE-2025-11412.patch: PR 33452 SEGV in
      bfd_elf_gc_record_vtentry
    - CVE-2025-11412
  * SECURITY UPDATE: Out-of-Bounds Read
    - debian/patches/CVE-2025-11413.patch: Re: elf: Disallow the empty
      global symbol name
    - CVE-2025-11413
  * SECURITY UPDATE: Out-of-Bounds Read
    - debian/patches/CVE-2025-11414.patch: elf: Return error on unsorted
      symbol table if not allowed
    - CVE-2025-11414
  * SECURITY UPDATE: Out-of-Bounds Read
    - debian/patches/CVE-2025-11494.patch: x86: Keep
      _GLOBAL_OFFSET_TABLE_ for .eh_frame
    - CVE-2025-11494
  * SECURITY UPDATE: Heap-Based Buffer Overflow
    - debian/patches/CVE-2025-11495.patch: x86: Disallow TLS relocation
      in non executable section
    - CVE-2025-11495

 -- John Breton <email address hidden> Wed, 03 Dec 2025 09:45:34 -0500

Source diff to previous version
CVE-2025-11412 A vulnerability has been found in GNU Binutils 2.45. This impacts the function bfd_elf_gc_record_vtentry of the file bfd/elflink.c of the component L
CVE-2025-11413 A vulnerability was found in GNU Binutils 2.45. Affected is the function elf_link_add_object_symbols of the file bfd/elflink.c of the component Linke
CVE-2025-11414 A vulnerability was determined in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_hash_entry of the file bfd/elflink.c of
CVE-2025-11494 A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x86_elf_late_size_sections of the file bfd/elfxx-x86.c of the component
CVE-2025-11495 A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elf_x86_64_relocate_section of the file elf64-x86-64.c of t

Version: 2.44-3ubuntu1.2 2025-12-01 19:08:18 UTC

  binutils (2.44-3ubuntu1.2) plucky-security; urgency=medium

  * SECURITY UPDATE: Unchecked Return Value
    - debian/patches/CVE-2025-11839.patch: Remove call to abort in the
      DGB debug format printing code, thus allowing the display of a
      fuzzed input file to complete without triggering an abort.
    - CVE-2025-11839
  * SECURITY UPDATE: Out-of-Bounds Read
    - debian/patches/CVE-2025-11840.patch: PR 33455 SEGV in vfinfo at
      ldmisc.c:527
    - CVE-2025-11840
  * SECURITY UPDATE: Memory Corruption
    - debian/patches/CVE-2025-1153.patch: PR 32603, ld -w misbehaviour
    - CVE-2025-1153

 -- John Breton <email address hidden> Thu, 20 Nov 2025 09:27:41 -0500

Source diff to previous version
CVE-2025-11839 A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing manipulation results i
CVE-2025-11840 A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing manipulation can lea
CVE-2025-1153 A vulnerability classified as problematic was found in GNU Binutils 2.43/2.44. Affected by this vulnerability is the function bfd_set_format of the f

Version: 2.44-3ubuntu1.1 2025-10-31 04:07:27 UTC

  binutils (2.44-3ubuntu1.1) plucky-security; urgency=medium

  * SECURITY UPDATE: Heap based buffer overflow
    - debian/patches/CVE-2025-11082.patch: avoid reads of beyond
      .eh_frame section in bfd/elf-eh-frame.c.
    - CVE-2025-11082
  * SECURITY UPDATE: Heap based buffer overflow
    - debian/patches/CVE-2025-11083.patch: fix in bfd/elfcode.h.
    - CVE-2025-11083
  * SECURITY UPDATE: Buffer overflow
    - debian/patches/CVE-2025-1147.patch: fix treating an ifunc symbol
      as a stab in binutils/nm.c, binutils/testsuite/binutils-all/nm.exp.
    - CVE-2025-1147
  * SECURITY UPDATE: Memory leak
    - debian/patches/CVE-2025-1148.patch: replace xmalloc with stat_alloc
      in ld parser in multiple files.
    - CVE-2025-1148
  * SECURITY UPDATE: Memory corruption
    - debian/patches/CVE-2025-1182.patch: fix illegal memory
      access in bdf/elflink.c.
    - CVE-2025-1182
  * SECURITY UPDATE: Memory leak
    - debian/patches/CVE-2025-3198.patch: fix memory leak
      inbinutils/bucomm.c.
    - CVE-2025-3198
  * SECURITY UPDATE: Memory corruption
    - debian/patches/CVE-2025-5244.patch: fix segfault
      in bfd/elflink.c
    - CVE-2025-5244
  * SECURITY UPDATE: Memory corruption
    - debian/patches/CVE-2025-5245.patch: fix segfault
      in binutils/debug.c
    - CVE-2025-5245
  * SECURITY UPDATE: Heap-based buffer overflow
    - debian/patches/CVE-2025-7545.patch: check size
      of copy_section in binutils/objcopy.c
    - CVE-2025-7545
  * SECURITY UPDATE: Out-of-bounds write
    - debian/patches/CVE-2025-7546.patch: fix in bfd/elf.c.
    - CVE-2025-7546
  * SECURITY UPDATE: Memory leak
    - debian/patches/CVE-2025-8225.patch: fix in binutils/dwarf.c.
    - CVE-2025-8225

 -- Leonidas Da Silva Barbosa <email address hidden> Tue, 21 Oct 2025 13:05:12 -0300

CVE-2025-11082 A flaw has been found in GNU Binutils 2.45. Impacted is the function _bfd_elf_parse_eh_frame of the file bfd/elf-eh-frame.c of the component Linker.
CVE-2025-11083 A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component
CVE-2025-1147 A vulnerability has been found in GNU Binutils 2.43 and classified as problematic. Affected by this vulnerability is the function __sanitizer::intern
CVE-2025-1148 A vulnerability was found in GNU Binutils 2.43 and classified as problematic. Affected by this issue is the function link_order_scan of the file ld/l
CVE-2025-1182 A vulnerability, which was classified as critical, was found in GNU Binutils 2.43. Affected is the function bfd_elf_reloc_symbol_deleted_p of the fil
CVE-2025-3198 A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability is the function display_info o
CVE-2025-5244 A vulnerability was found in GNU Binutils up to 2.44. It has been rated as critical. Affected by this issue is the function elf_gc_sweep of the file
CVE-2025-5245 A vulnerability classified as critical has been found in GNU Binutils up to 2.44. This affects the function debug_type_samep of the file /binutils/de
CVE-2025-7545 A vulnerability classified as problematic was found in GNU Binutils 2.45. Affected by this vulnerability is the function copy_section of the file bin
CVE-2025-7546 A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45. Affected by this issue is the function bfd_elf_set_group_c
CVE-2025-8225 A vulnerability was found in GNU Binutils 2.44 and classified as problematic. This issue affects the function process_debug_info of the file binutils



About   -   Send Feedback to @ubuntu_updates