Skip to content
OpenAdvisories
Medium RHSA-2025:23405 2 CVEs

Red Hat Security Advisory: binutils security update

Published Dec 19, 2025 · Updated Oct 15, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 binutils 0:2.41-53.el10_0.2
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 binutils-debuginfo 0:2.41-53.el10_0.2
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 binutils-debugsource 0:2.41-53.el10_0.2
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 binutils-devel 0:2.41-53.el10_0.2
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 binutils-gold 0:2.41-53.el10_0.2
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 binutils-gold-debuginfo 0:2.41-53.el10_0.2
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 binutils-gprofng-debuginfo 0:2.41-53.el10_0.2
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 cross-binutils-aarch64-debuginfo 0:2.41-53.el10_0.2
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 cross-binutils-ppc64le-debuginfo 0:2.41-53.el10_0.2
Red Hat · RHEL 10.0 EUS enterprise_linux_eus:10.0 cross-binutils-s390x-debuginfo 0:2.41-53.el10_0.2

Vulnerabilities 2

  • Medium 5.3
    CVE-2025-11082

    GNU Binutils Linker elf-eh-frame.c _bfd_elf_parse_eh_frame heap-based overflow

    A flaw has been found in GNU Binutils 2.45. Impacted is the function _bfd_elf_parse_eh_frame of the file bfd/elf-eh-frame.c of the component Linker. Executing manipulation can lead to heap-based buffer overflow. The attack is restricted to local execution. Th…

    GNU Binutils binutils binutils Debian Ubuntu Azure Linux Wolfi
  • Medium 5.3
    CVE-2025-11083

    GNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflow

    A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exp…

    GNU Binutils binutils binutils Debian Ubuntu Azure Linux Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2399943
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2399948
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23405.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-11082
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-11082
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-11082
  • article
    https://sourceware.org/bugzilla/attachment.cgi?id=16358
  • article
    https://sourceware.org/bugzilla/show_bug.cgi?id=33464
  • article
    https://sourceware.org/bugzilla/show_bug.cgi?id=33464#c2
  • article
    https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea1a0737c7692737a644af0486b71e4a392cbca8
  • article
    https://vuldb.com/?ctiid.326123
  • article
    https://vuldb.com/?id.326123
  • article
    https://vuldb.com/?submit.661276
  • article
    https://www.gnu.org/
  • report
    https://access.redhat.com/security/cve/CVE-2025-11083
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-11083
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-11083
  • article
    https://sourceware.org/bugzilla/attachment.cgi?id=16353
  • article
    https://sourceware.org/bugzilla/show_bug.cgi?id=33457
  • article
    https://sourceware.org/bugzilla/show_bug.cgi?id=33457#c1
  • article
    https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=9ca499644a21ceb3f946d1c179c38a83be084490
  • article
    https://vuldb.com/?ctiid.326124
  • article
    https://vuldb.com/?id.326124
  • article
    https://vuldb.com/?submit.661277