Ubuntu 22.04: Resolving Serious Memory Leak in mingw-w64-runtime
fedora
October 19, 2025
Backport fixes for CVE-2025-11082, CVE-2025-11083, CVE-2025-11494, CVE-2025-11495.
Summary
Cross compiled binutils (utilities like 'strip', 'as', 'ld') which
understand Windows executables and DLLs.
Update Information:
Backport fixes for CVE-2025-11082, CVE-2025-11083, CVE-2025-11494, CVE-2025-11495.
Topics Covered
Change Log
* Fri Oct 10 2025 Sandro Mani
References
[ 1 ] Bug #2400354 - CVE-2025-11083 mingw-binutils: GNU Binutils Linker heap-based overflow [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2400354
[ 2 ] Bug #2400358 - CVE-2025-11082 mingw-binutils: GNU Binutils Linker heap-based overflow [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2400358
[ 3 ] Bug #2402845 - CVE-2025-11495 mingw-binutils: GNU Binutils Linker heap-based overflow [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2402845
[ 4 ] Bug #2402848 - CVE-2025-11494 mingw-binutils: GNU Binutils Linker out-of-bounds read [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2402848
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-10c80b93e9' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Name: mingw-binutils
Product: Fedora 42
Version: 2.43.1
Release: 5.fc42
Summary: Cross-compiled version of binutils for Win32 and Win64 environments
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!