Skip to content
OpenAdvisories
Medium RHSA-2025:23232 1 CVE

Red Hat Security Advisory: binutils security update

Published Dec 17, 2025 · Updated Oct 15, 2026

Ecosystem: Red Hat

Fixed packages 9

ReleasePackageFixed in
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream binutils-debuginfo 0:2.35.2-17.el9_0.1
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream binutils-debugsource 0:2.35.2-17.el9_0.1
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream binutils-devel 0:2.35.2-17.el9_0.1
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream binutils-gold-debuginfo 0:2.35.2-17.el9_0.1
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::baseos binutils 0:2.35.2-17.el9_0.1
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::baseos binutils-debuginfo 0:2.35.2-17.el9_0.1
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::baseos binutils-debugsource 0:2.35.2-17.el9_0.1
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::baseos binutils-gold 0:2.35.2-17.el9_0.1
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::baseos binutils-gold-debuginfo 0:2.35.2-17.el9_0.1

Vulnerabilities 1

  • Medium 5.3
    CVE-2025-11083

    GNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflow

    A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exp…

    GNU Binutils binutils binutils Debian Ubuntu Azure Linux Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2399948
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23232.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-11083
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-11083
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-11083
  • article
    https://sourceware.org/bugzilla/attachment.cgi?id=16353
  • article
    https://sourceware.org/bugzilla/show_bug.cgi?id=33457
  • article
    https://sourceware.org/bugzilla/show_bug.cgi?id=33457#c1
  • article
    https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=9ca499644a21ceb3f946d1c179c38a83be084490
  • article
    https://vuldb.com/?ctiid.326124
  • article
    https://vuldb.com/?id.326124
  • article
    https://vuldb.com/?submit.661277
  • article
    https://www.gnu.org/