Ubuntu alert USN-7718-1 (binutils)

From:
             
 
"Leonidas S. Barbosa" <leo.barbosa@canonical.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-7718-1] GNU binutils vulnerability
Date:
             
 
Tue, 26 Aug 2025 14:51:05 -0300
Message-ID:
             
 
<12e5dc58ddf4013629671e8a3c1ac5f66dc2abbc.camel@canonical.com>
=======================================================================

Ubuntu Security Notice USN-7718-1
August 26, 2025

binutils vulnerability
=======================================================================


A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.04 LTS

Summary:

GNU binutils could be made to crash if it received a specially crafted
input.

Software Description:
- binutils: GNU assembler, linker and binary utilities

Details:

It was discovered that GNU binutils incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a crash.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS
  binutils                        2.26.1-1ubuntu1~16.04.8+esm12
                                  Available with Ubuntu Pro
  binutils-multiarch              2.26.1-1ubuntu1~16.04.8+esm12
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary
changes.

References:
  https://ubuntu.com/security/notices/USN-7718-1
  CVE-2025-7545




Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=xA1h
-----END PGP SIGNATURE-----