RLSA-2024:2353

See a problem?
Please try reporting it to the source first.

Source

https://errata.rockylinux.org/RLSA-2024:2353

Import Source

https://storage.googleapis.com/resf-osv-data/RLSA-2024:2353.json

JSON Data

https://api.osv.dev/v1/vulns/RLSA-2024:2353

Published

2025-05-07T19:13:05.465265Z

Modified

2025-05-07T20:08:43.933905Z

Upstream

CVE-2023-1579

Severity

7.0 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator

Summary

Moderate: mingw components security update

Details

MinGW (Minimalist GNU for Windows) is a free and open source software development environment to create Microsoft Windows applications.

Security Fix(es):

binutils: Heap-buffer-overflow binutils-gdb/bfd/libbfd.c in bfd_getl64 (CVE-2023-1579)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.

References

Credits

- Rocky Enterprise Software Foundation
- Red Hat

Affected packages

Rocky Linux:9 / mingw-binutils

Package

Name: mingw-binutils
Purl: pkg:rpm/rocky-linux/mingw-binutils?distro=rocky-linux-9&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.41-3.el9

Rocky Linux:9 / mingw-crt

Package

Name: mingw-crt
Purl: pkg:rpm/rocky-linux/mingw-crt?distro=rocky-linux-9&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:11.0.1-3.el9

Rocky Linux:9 / mingw-filesystem

Package

Name: mingw-filesystem
Purl: pkg:rpm/rocky-linux/mingw-filesystem?distro=rocky-linux-9&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:148-3.el9

Rocky Linux:9 / mingw-gcc

Package

Name: mingw-gcc
Purl: pkg:rpm/rocky-linux/mingw-gcc?distro=rocky-linux-9&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:13.2.1-7.el9

Rocky Linux:9 / mingw-headers

Package

Name: mingw-headers
Purl: pkg:rpm/rocky-linux/mingw-headers?distro=rocky-linux-9&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:11.0.1-3.el9

Rocky Linux:9 / mingw-libffi

Package

Name: mingw-libffi
Purl: pkg:rpm/rocky-linux/mingw-libffi?distro=rocky-linux-9&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:3.4.4-5.el9

Rocky Linux:9 / mingw-w64-tools

Package

Name: mingw-w64-tools
Purl: pkg:rpm/rocky-linux/mingw-w64-tools?distro=rocky-linux-9&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:11.0.1-3.el9

Rocky Linux:9 / mingw-winpthreads

Package

Name: mingw-winpthreads
Purl: pkg:rpm/rocky-linux/mingw-winpthreads?distro=rocky-linux-9&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:11.0.1-3.el9

Rocky Linux:9 / mingw-zlib

Package

Name: mingw-zlib
Purl: pkg:rpm/rocky-linux/mingw-zlib?distro=rocky-linux-9&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.3.1-1.el9