GHSA-8444-P2RX-H3VP vulnerabilities

Vulnerabilities for packages: binutils...

CVE-2026-3442 vulnerabilities

Vulnerabilities for packages: binutils...

binutils: Race window allows users to own arbitrary files

There is an open race window when writing output in the following utilities in GNU binutils1: ar, objcopy, strip, and ranlib. When these utilities are run as a privileged user presumably as part of a script updating binaries across different users, an unprivileged user can trick these utilities...