{"id":"CLSA-2026-1777949670","summary":"binutils: Fix of 8 CVEs","details":"- CVE-2025-11412: fix out-of-bounds read in bfd_elf_gc_record_vtentry\n- CVE-2025-11413: fix out-of-bounds read in elf_link_add_object_symbols\n- CVE-2025-11839: fix abort in tg_tag_type with fuzzed input\n- CVE-2025-11840: fix SEGV from NULL howto name in coff reloc processing\n- CVE-2025-3198: fix memory leak in objdump display_info\n- CVE-2026-4647: fix out-of-bounds read in XCOFF relocation processing\n- CVE-2025-69645: fix abort in byte_get_little_endian from malformed DWARF\n- CVE-2025-69652: fix abort in readelf from malformed DWARF debug info","modified":"2026-06-01T00:31:49.827708600Z","published":"2026-05-05T02:54:34Z","upstream":["CVE-2025-11412","CVE-2025-11413","CVE-2025-11839","CVE-2025-11840","CVE-2025-3198","CVE-2026-4647","CVE-2025-69645","CVE-2025-69652"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1777949670.html"}],"affected":[{"package":{"name":"binutils","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/binutils?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-37.el9.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1777949670.json"}},{"package":{"name":"binutils-devel","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/binutils-devel?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-37.el9.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1777949670.json"}},{"package":{"name":"binutils-gold","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/binutils-gold?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-37.el9.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1777949670.json"}},{"package":{"name":"cross-binutils-aarch64","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/cross-binutils-aarch64?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-37.el9.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1777949670.json"}},{"package":{"name":"cross-binutils-ppc64le","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/cross-binutils-ppc64le?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-37.el9.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1777949670.json"}},{"package":{"name":"cross-binutils-s390x","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/cross-binutils-s390x?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-37.el9.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1777949670.json"}}],"schema_version":"1.7.5"}