Advisories » MGASA-2025-0084

Updated binutils packages fix security vulnerabilities

Publication date: 02 Mar 2025
Modification date: 02 Mar 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2024-57360 , CVE-2025-0840

Description

nm >=2.43 is affected by: Incorrect Access Control. The type of
exploitation is: local. The component is: `nm --without-symbol-version`
function. (CVE-2024-57360)
GNU Binutils objdump.c disassemble_bytes stack-based overflow.
(CVE-2025-0840)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=34053
• https://ubuntu.com/security/notices/USN-7306-1
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57360
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0840

SRPMS

9/core

• binutils-2.40-11.1.mga9