• 公告ID (KylinSec-SA-2025-2798)

摘要:

gdb security update

安全等级: High

公告ID: KylinSec-SA-2025-2798

发布日期: 2025年9月17日

关联CVE: CVE-2025-7546  

  • 详细介绍

1. 漏洞描述

   

GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.

Security Fix(es):

A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45. Affected by this issue is the function bfd_elf_set_group_contents of the file bfd/elf.c. The manipulation leads to out-of-bounds write. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The name of the patch is 41461010eb7c79fee7a9d5f6209accdaac66cc6b. It is recommended to apply a patch to fix this issue.(CVE-2025-7546)

2. 影响范围

cve名称 产品 组件 是否受影响
CVE-2025-7546 V6 gdb Fixed

3. 影响组件

    gdb

4. 修复版本

   

V6

软件名称 架构 版本号
gdb-help noarch 14.1-5.ks6
gdb x86_64 14.1-5.ks6
gdb-gdbserver x86_64 14.1-5.ks6
gdb-headless x86_64 14.1-5.ks6
gdb aarch64 14.1-5.ks6
gdb-gdbserver aarch64 14.1-5.ks6
gdb-headless aarch64 14.1-5.ks6

5. 修复方法


方法一:下载安装包进行升级安装
1、通过下载链接下载需要升级的升级包保存,如 xxx.rpm
2、通过rpm命令升级,如 rpm -Uvh xxx.rpm

方法二:通过软件源进行升级安装
1、保持能够连接上互联网
2、通过yum命令升级指定的包,如 yum install 包名

6. 下载链接

   

V6:

x86_64:

     gdb-help   

     gdb   

     gdb-gdbserver   

     gdb-headless   

aarch64:

     gdb-help   

     gdb   

     gdb-gdbserver   

     gdb-headless   

上一篇:KylinSec-SA-2025-2839 下一篇:KylinSec-SA-2025-2894