Advisories » MGASA-2025-0116

Updated radare2 packages fix security vulnerabilities

Publication date: 26 Mar 2025
Modification date: 26 Mar 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2024-56737 , CVE-2025-1744 , CVE-2025-1864

Description

Buffer overflow in the HFS parser from grub2. (CVE-2024-56737)
Out-of-bounds Write in radare2. (CVE-2025-1744)
Buffer Overflow and Potential Code Execution in Radare2. (CVE-2025-1864)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=34122
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JESFQCNT2ONAGTVQXEDREBQFC7NUDPEC/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56737
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1744
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1864

SRPMS

9/core

• radare2-5.8.8-1.6.mga9