Threats Tagged 'cve-2025-11082'

This update includes the following RPMs:

The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities. Security Fix(es): * binutils: GNU Binutils Linker heap-based overflow (CVE-2025-11082) * binutils: GNU Binutils Linker heap-based overflow (CVE-2025-11083) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Two heap-based overflow vulnerabilities (CVE-2025-11082 and CVE-2025-11083) were discovered in the GNU Binutils Linker component of the binutils package. These vulnerabilities affect the binary utilities used for manipulating object code in various formats. Red Hat has issued a security advisory and released updated binutils packages for Red Hat Enterprise Linux 10.0 Extended Update Support to address these issues. The security impact is rated as moderate by Red Hat Product Security. No known exploits are reported in the wild at this time.