UbuntuUpdates.org

Package "binutils"

Name: binutils

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • GNU binary utilities, for alpha-linux-gnu target
  • GNU binary utilities, for alpha-linux-gnu target (debug symbols)
  • GNU binary utilities, for arc-linux-gnu target
  • GNU binary utilities, for arc-linux-gnu target (debug symbols)
Latest version: 2.45-7ubuntu1.1
Release: questing (25.10)
Level: security
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "binutils" in Questing

Repository Area Version
base main 2.45-7ubuntu1
base universe 2.45-7ubuntu1
security main 2.45-7ubuntu1.1
updates main 2.45-7ubuntu1.1
updates universe 2.45-7ubuntu1.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2.45-7ubuntu1.1 2025-12-01 19:08:21 UTC

  binutils (2.45-7ubuntu1.1) questing-security; urgency=medium

  * SECURITY UPDATE: Unchecked Return Value
    - debian/patches/CVE-2025-11839.patch: Remove call to abort in the
      DGB debug format printing code, thus allowing the display of a
      fuzzed input file to complete without triggering an abort.
    - CVE-2025-11839
  * SECURITY UPDATE: Out-of-Bounds Read
    - debian/patches/CVE-2025-11840.patch: PR 33455 SEGV in vfinfo at
      ldmisc.c:527
    - CVE-2025-11840

 -- John Breton <email address hidden> Thu, 20 Nov 2025 08:19:54 -0500
CVE-2025-11839 A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing manipulation results i
CVE-2025-11840 A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing manipulation can lea


About   -   Send Feedback to @ubuntu_updates