CLSA-2026-1777949670

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1777949670.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1777949670
Upstream
Published
2026-05-05T02:54:34Z
Modified
2026-06-01T00:31:49Z
Summary
binutils: Fix of 8 CVEs
Details
  • CVE-2025-11412: fix out-of-bounds read in bfd_elf_gc_record_vtentry
  • CVE-2025-11413: fix out-of-bounds read in elf_link_add_object_symbols
  • CVE-2025-11839: fix abort in tg_tag_type with fuzzed input
  • CVE-2025-11840: fix SEGV from NULL howto name in coff reloc processing
  • CVE-2025-3198: fix memory leak in objdump display_info
  • CVE-2026-4647: fix out-of-bounds read in XCOFF relocation processing
  • CVE-2025-69645: fix abort in byte_get_little_endian from malformed DWARF
  • CVE-2025-69652: fix abort in readelf from malformed DWARF debug info
References

Affected packages

TuxCare:AlmaLinux:9.2
binutils

Package

Name
binutils
Purl
pkg:rpm/tuxcare/binutils?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.35.2-37.el9.tuxcare.els6

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1777949670.json"
binutils-devel

Package

Name
binutils-devel
Purl
pkg:rpm/tuxcare/binutils-devel?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.35.2-37.el9.tuxcare.els6

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1777949670.json"
binutils-gold

Package

Name
binutils-gold
Purl
pkg:rpm/tuxcare/binutils-gold?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.35.2-37.el9.tuxcare.els6

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1777949670.json"
cross-binutils-aarch64

Package

Name
cross-binutils-aarch64
Purl
pkg:rpm/tuxcare/cross-binutils-aarch64?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.35.2-37.el9.tuxcare.els6

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1777949670.json"
cross-binutils-ppc64le

Package

Name
cross-binutils-ppc64le
Purl
pkg:rpm/tuxcare/cross-binutils-ppc64le?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.35.2-37.el9.tuxcare.els6

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1777949670.json"
cross-binutils-s390x

Package

Name
cross-binutils-s390x
Purl
pkg:rpm/tuxcare/cross-binutils-s390x?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.35.2-37.el9.tuxcare.els6

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1777949670.json"