Mageia alert MGASA-2025-0084 (binutils)

From:
             
 
Mageia Updates <updates-announce@ml.mageia.org>
To:
             
 
updates-announce@ml.mageia.org
Subject:
             
 
[updates-announce] MGASA-2025-0084: Updated binutils packages fix security vulnerabilities
Date:
             
 
Sun, 02 Mar 2025 08:19:18 +0100
Message-ID:
             
 
<20250302071918.2C01D9FFE9@duvel.mageia.org>
Archive-link:
             
 
Article
MGASA-2025-0084 - Updated binutils packages fix security vulnerabilities

Publication date: 02 Mar 2025
URL: https://advisories.mageia.org/MGASA-2025-0084.html
Type: security
Affected Mageia releases: 9
CVE: CVE-2024-57360,
     CVE-2025-0840

Description:
nm >=2.43 is affected by: Incorrect Access Control. The type of
exploitation is: local. The component is: `nm --without-symbol-version`
function. (CVE-2024-57360)
GNU Binutils objdump.c disassemble_bytes stack-based overflow.
(CVE-2025-0840)

References:
- https://bugs.mageia.org/show_bug.cgi?id=34053
- https://ubuntu.com/security/notices/USN-7306-1
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0840

SRPMS:
- 9/core/binutils-2.40-11.1.mga9