GHSA-63QM-V5PW-47H7 vulnerabilities

Vulnerabilities for packages: binutils...

GHSA-C64W-HPM6-XX8W vulnerabilities

Vulnerabilities for packages: binutils...

CVE-2025-69649 vulnerabilities

Vulnerabilities for packages: binutils...

GHSA-6M68-W836-P72W vulnerabilities

Vulnerabilities for packages: binutils...

CVE-2026-6846 vulnerabilities

Vulnerabilities for packages: binutils...

binutils:fuzz_objdump_safe: Heap-buffer-overflow in parse_stab_array_type

Detailed Report: https://oss-fuzz.com/testcase?key=6591363465674752 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzobjdumpsafe Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7b85203e00f9 Crash State: parsestabarraytype...

SUSE-SU-2026:2092-1 Security update for go1.26-openssl

This update for go1.26-openssl fixes the following issues Security issues: - CVE-2026-33811: net: crash when handling long CNAME response bsc1264508. - CVE-2026-33814: net/http: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1264506. - CVE-2026-39817: cmd/go: 'go tool...

SUSE-SU-2026:2079-1 Security update for go1.25-openssl

This update for go1.25-openssl fixes the following issues Security issues: - CVE-2026-33811: net: crash when handling long CNAME response bsc1264508. - CVE-2026-33814: net/http: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1264506. - CVE-2026-39817: cmd/go: 'go tool...

The vulnerability of the GNU Binutils development tool, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure.

The vulnerability of the GNU Binutils development tooling is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a perpetrator to cause a service failure...

The vulnerability of the GNU Binutils development environment lies in the execution of a loop with an unreachable exit condition, allowing an attacker to cause a service failure.

The vulnerability of the GNU Binutils development tool lies in the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the GNU Binutils development environment lies in the execution of a loop with an unreachable exit condition, allowing a hacker to cause a service failure.

The vulnerability of the GNU Binutils development tool lies in the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

binutils:fuzz_objcopy: Use-of-uninitialized-value in cache_bwrite

Detailed Report: https://oss-fuzz.com/testcase?key=6562451239010304 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzobjcopy Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cachebwrite bfdwrite...

Advisory ROSA-SA-2026-3277

software: binutils 2.38 WASP: ROSA-CHROME unaffected versions = binutils-2.38-8 affected versions binutils-2.38-8 CVE-ID: CVE-2025-69652 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the readelf utility of the GNU Binutils package is related to incorrect processing of specially...

GNU Binutils objdump bucomm.c display_info memory leak

...

CVE-2026-6846 affecting package binutils for versions less than 2.41-12

CVE-2026-6846 affecting package binutils for versions less than 2.41-12. A patched version of the package is available...

OPENSUSE-SU-2026:20763-1 Security update for go1.25

This update for go1.25 fixes the following issues Security issues: - CVE-2026-33811: net: crash when handling long CNAME response bsc1264508. - CVE-2026-33814: net/http: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1264506. - CVE-2026-39817: cmd/go: "go tool pack" does...

SUSE-SU-2026:21804-1 Security update for go1.26

This update for go1.26 fixes the following issues Security issues: - CVE-2026-33811: net: crash when handling long CNAME response bsc1264508. - CVE-2026-33814: net/http: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1264506. - CVE-2026-39817: cmd/go: "go tool pack" does...

binutils:fuzz_addr2line: Crash in bfd_getb32

Detailed Report: https://oss-fuzz.com/testcase?key=5703459591749632 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzaddr2line Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7a61a1de27e0 Crash State: bfdgetb32 nds32elflo12reloc...

CLSA-2026-1778798046 binutils: Fix of CVE-2022-48065

CVE-2022-48065: Fix memory leak in function findabstractinstance in dwarf2.c and free allocated memory...

SUSE-SU-2026:1862-1 Security update for go1.25

This update for go1.25 fixes the following issues Security issues: - CVE-2026-33811: net: crash when handling long CNAME response bsc1264508. - CVE-2026-33814: net/http: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1264506. - CVE-2026-39817: cmd/go: 'go tool pack' does...