SB2025101426 - Fedora 42 update for mingw-binutils
Published: October 14, 2025
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 4 secuirty vulnerabilities.
1) Heap-based buffer overflow (CVE-ID: CVE-2025-11082)
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a boundary error within the _bfd_elf_parse_eh_frame() function in bfd/elf-eh-frame.c. A local user can trigger a heap-based buffer overflow and execute arbitrary code on the target system.
2) Heap-based buffer overflow (CVE-ID: CVE-2025-11083)
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a boundary error within the elf_swap_shdr() function in bfd/elfcode.h. A local user can trigger a heap-based buffer overflow and execute arbitrary code on the target system.
3) Buffer overflow (CVE-ID: CVE-2025-11494)
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a boundary error within the _bfd_x86_elf_late_size_sections() function in bfd/elfxx-x86.c. A local user can trigger memory corruption and execute arbitrary code on the target system.
4) Buffer overflow (CVE-ID: CVE-2025-11495)
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a boundary error within the elf_x86_64_relocate_section() function in elf64-x86-64.c. A local user can trigger memory corruption and execute arbitrary code on the target system.
Remediation
Install update from vendor's website.