Ubuntu 24.10 USN-7306-1: High Severity Binutils Security Flaws

ubuntu

February 26, 2025

Several security issues were fixed in GNU binutils.

Summary

Several security issues were fixed in GNU binutils.

Software Description:

- binutils: GNU assembler, linker and binary utilities

Details:

It was discovered that GNU binutils in nm tool is affected by an

incorrect access control. An attacker could possibly use this issue

to cause a crash. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04

LTS, and Ubuntu 24.10. (CVE-2024-57360)

It was discovered that GNU binutils incorrectly handled certain inputs.

An attacker could possibly use this issue to cause a crash or execute

arbitrary code. (CVE-2025-0840)

Topics Covered

security advisory high severity software update access control Ubuntu arbitrary code ubuntu binutils software vulnerability

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.10
  binutils                        2.43.1-4ubuntu1.1
  binutils-multiarch              2.43.1-4ubuntu1.1

Ubuntu 24.04 LTS
  binutils                        2.42-4ubuntu2.4
  binutils-multiarch              2.42-4ubuntu2.4

Ubuntu 22.04 LTS
  binutils                        2.38-4ubuntu2.7
  binutils-multiarch              2.38-4ubuntu2.7

Ubuntu 20.04 LTS
  binutils                        2.34-6ubuntu1.10
  binutils-multiarch              2.34-6ubuntu1.10

In general, a standard system update will make all the necessary changes.