[ubuntu/oracular-updates] binutils 2.43.1-4ubuntu1.2 (Accepted)

[Ubuntu Archive Robot]

binutils (2.43.1-4ubuntu1.2) oracular-security; urgency=medium

  * SECURITY UPDATE: Memory corruption
    - debian/patches/CVE-2025-1153.patch: introduces new variant of einfo
      called 'fatal' that always exits in ld/*.
    - CVE-2025-1153
  * SECURITY UPDATE: Heap based buffer overflow
    - debian/patches/CVE-2025-1176.patch: prevent illegal memory access
      when indexing into the sym_hashes array in bfd/elflink.c.
    - CVE-2025-1176
  * SECURITY UPDATE: Memory corruption
    - debian/patches/CVE-2025-1178.patch: prevent an abort in the bfd linkder
      when attempting to generate dynamic relocs for a corrupt input file
      in bfd/elf64-x86-64.c.
    - CVE-2025-1178
  * SECURITY UPDATE: Memory corruption
    - debian/patches/CVE-2025-1181-pre.patch: prevent illegal memory access
      when checking relocs in a corrupt ELF binary in bfd/elf-bfd.h,
      bfd/elf64-x86-64.c, bfd/elflink.c, bfd/elfxx-x86.c.
    - debian/patches/CVE-2025-1181.patch: add even more checks for corrupt
      input when processing relocations for ELF files in bdf/elflink.c.
    - CVE-2025-1181
   * SECURITY UPDATE: Memory corruption
     - debian/patches/CVE-2025-1182.patch: fix illegal memory access
       triggered by corrupt ELF input files in bfd/elflink.c.
     - CVE-2025-1182

Date: 2025-03-17 13:08:12.798024+00:00
Changed-By: leo.barbosa at canonical.com (Leonidas S. Barbosa)
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/binutils/2.43.1-4ubuntu1.2
-------------- next part --------------
Sorry, changesfile not available.