Skip to content
OpenAdvisories
Medium ELSA-2026-0108 1 CVE

Moderate: gcc-toolset-15-binutils security update (Oracle Linux 10)

Published Jan 6, 2026 · Updated Jan 6, 2026

Ecosystem: Oracle Linux

Summary

[2.44-7.1]
- Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130616)

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 10 gcc-toolset-15-binutils 0:2.44-7.el10_1.1
Oracle Linux · 10 gcc-toolset-15-binutils-devel 0:2.44-7.el10_1.1
Oracle Linux · 10 gcc-toolset-15-binutils-gold 0:2.44-7.el10_1.1
Oracle Linux · 10 gcc-toolset-15-binutils-gprofng 0:2.44-7.el10_1.1

Vulnerabilities 1

  • Medium 5.3
    CVE-2025-11083

    GNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflow

    A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exp…

    GNU Binutils binutils binutils Debian Ubuntu Azure Linux Wolfi