摘要:
binutils security update
安全等级: High
公告ID: KylinSec-SA-2025-2865
发布日期: 2025年9月12日
关联CVE: CVE-2025-7545
Binutils is a collection of binary utilities, including ar (for creating, modifying and extracting from archives), as (a family of GNU assemblers), gprof (for displaying call graph profile data), ld (the GNU linker), nm (for listing symbols from object files), objcopy (for copying and translating object files), objdump (for displaying information from object files), ranlib (for generating an index for the contents of an archive), readelf (for displaying detailed information about binary files), size (for listing the section sizes of an object or archive file), strings (for listing printable strings from files), strip (for discarding symbols), and addr2line (for converting addresses to file and line).
Security Fix(es):
A vulnerability classified as problematic was found in GNU Binutils 2.45. Affected by this vulnerability is the function copy_section of the file binutils/objcopy.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The patch is named 08c3cbe5926e4d355b5cb70bbec2b1eeb40c2944. It is recommended to apply a patch to fix this issue.(CVE-2025-7545)
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|---|---|---|
| CVE-2025-7545 | KY3.4-5A | binutils | Fixed |
| 软件名称 | 架构 | 版本号 |
|---|---|---|
| binutils | x86_64 | 2.34-38.ky3_4.kb1 |
| binutils-devel | x86_64 | 2.34-38.ky3_4.kb1 |
| binutils-help | x86_64 | 2.34-38.ky3_4.kb1 |
| binutils | aarch64 | 2.34-38.ky3_4.kb1 |
| binutils-devel | aarch64 | 2.34-38.ky3_4.kb1 |
| binutils-help | aarch64 | 2.34-38.ky3_4.kb1 |
方法一：下载安装包进行升级安装
1、通过下载链接下载需要升级的升级包保存，如 xxx.rpm
2、通过rpm命令升级，如 rpm -Uvh xxx.rpm
方法二：通过软件源进行升级安装
1、保持能够连接上互联网
2、通过yum命令升级指定的包，如 yum install 包名
