Stay Secure with the Latest Linux Advisories

security advisoryfedorabuffer overflow

Ubuntu 22.04: Resolving Serious Memory Leak in mingw-w64-runtime

Backport fixes for CVE-2025-11082, CVE-2025-11083, CVE-2025-11494, CVE-2025-11495.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-10c80b93e9 2025-10-19 02:36:31.438220+00:00 -------------------------------------------------------------------------------- Name : mingw-binutils Product : Fedora 42 Version : 2.43.1 Release : 5.fc42 URL : http://www.gnu.org/software/binutils/ Summary : Cross-compiled version of binutils for Win32 and Win64 environments Description : Cross compiled binutils (utilities like 'strip', 'as', 'ld') which understand Windows executables and DLLs. -------------------------------------------------------------------------------- Update Information: Backport fixes for CVE-2025-11082, CVE-2025-11083, CVE-2025-11494, CVE-2025-11495. -------------------------------------------------------------------------------- ChangeLog: * Fri Oct 10 2025 Sandro Mani - 2.43.1-5 - Backport fixes for CVE-2025-11494, CVE-2025-11495, CVE-2025-11082, CVE-2025-11083 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2400354 - CVE-2025-11083 mingw-binutils: GNU Binutils Linker heap-based overflow [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2400354 [ 2 ] Bug #2400358 - CVE-2025-11082 mingw-binutils: GNU Binutils Linker heap-based overflow [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2400358 [ 3 ] Bug #2402845 - CVE-2025-11495 mingw-binutils: GNU Binutils Linker heap-based overflow [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2402845 [ 4 ] Bug #2402848 - CVE-2025-11494 mingw-binutils: GNU Binutils Linker out-of-bounds read [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2402848 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnfupgrade --advisory FEDORA-2025-10c80b93e9' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . Critical backport fixes for mingw-binutils address multiple heap-based overflow threats in Fedora 42.. mingw-binutils, Fedora, buffer overflow, security fix. . Severity: Important. LinuxSecurity.com Team

Oct 19, 2025 •Important Fedora