{"id":"CVE-2026-3441","aliases":["BELL-CVE-2026-3441","CLSA-2026-1775721575","CLSA-2026-1775722568","CLSA-2026-1776069305","CLSA-2026-1776069613","CLSA-2026-1776083558","CLSA-2026-1776156000","CLSA-2026-1776156481","CLSA-2026-1776673982","CLSA-2026-1778237657","CLSA-2026-1778674192","CLSA-2026-1779266445","DEBIAN-CVE-2026-3441","EUVD-2026-12194","GHSA-8444-p2rx-h3vp","RHSA-2026:33527","RHSA-2026:39022","ROOT-OS-ALPINE-319-CVE-2026-3441","ROOT-OS-ALPINE-321-CVE-2026-3441","ROOT-OS-ALPINE-322-CVE-2026-3441","ROOT-OS-ALPINE-323-CVE-2026-3441","ROOT-OS-ALPINE-324-CVE-2026-3441","UBUNTU-CVE-2026-3441","openSUSE-SU-2026:11932-1"],"status":"published","title":"Binutils: gnu binutils: information disclosure via specially crafted xcoff object file","description":"A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an out-of-bounds read in the bfd linker, allows an attacker to gain access to sensitive information. By convincing a user to process a specially crafted XCOFF object file, an attacker can trigger this flaw, potentially leading to information disclosure or an application level denial of service.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00191,"percentile":0.08775,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2026-03-06T06:09:08.457165Z","modified":"2026-11-06T10:05:05Z","fixes":[{"ecosystem":"Root:Alpine:3.19","package":"binutils","fixed_in":["2.41-r10071","2.41-r10072"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.19","package":"rootio-binutils","fixed_in":["2.41-r10071","2.41-r10072"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.21","package":"binutils","fixed_in":["2.43.1-r30072","2.43.1-r30071","2.43.1-r30073"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.21","package":"rootio-binutils","fixed_in":["2.43.1-r30072","2.43.1-r30071","2.43.1-r30073"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.22","package":"binutils","fixed_in":["2.44-r30072","2.44-r30073"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.22","package":"rootio-binutils","fixed_in":["2.44-r30072","2.44-r30073"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.23","package":"binutils","fixed_in":["2.45.1-r00071","2.45.1-r00072","2.45.1-r00073"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.23","package":"rootio-binutils","fixed_in":["2.45.1-r00071","2.45.1-r00072","2.45.1-r00073"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.24","package":"binutils","fixed_in":["2.45.1-r10073","2.45.1-r10074"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.24","package":"rootio-binutils","fixed_in":["2.45.1-r10073","2.45.1-r10074"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.20.51.0.2-5.48.0.3.el6.tuxcare.ol.els7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"binutils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.20.51.0.2-5.48.0.3.el6.tuxcare.ol.els7"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.20.51.0.2-5.48.1.el6.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"binutils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.20.51.0.2-5.48.1.el6.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27-44.base.el7_9.1.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"binutils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27-44.base.el7_9.1.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-aarch64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-alpha-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-arm-linux-gnueabi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-arm-linux-gnueabihf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-for-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-for-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-hppa-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-hppa64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-i686-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-i686-kfreebsd-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-i686-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-ia64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-m68k-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-multiarch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-multiarch-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-powerpc-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-powerpc64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-powerpc64le-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-riscv64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-s390x-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-sh4-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-sparc64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-x86-64-kfreebsd-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-x86-64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"binutils-x86-64-linux-gnux32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libbinutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libctf-nobfd0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libctf0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-6ubuntu1.11+tuxcare.els7"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-123.el8.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"binutils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-123.el8.tuxcare.els5"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27-44.base.0.3.el7_9.1.tuxcare.els3"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"binutils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27-44.base.0.3.el7_9.1.tuxcare.els3"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-aarch64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-alpha-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-arm-linux-gnueabi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-arm-linux-gnueabihf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-hppa-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-hppa64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-m68k-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-mips-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-mips64-linux-gnuabi64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-mips64el-linux-gnuabi64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-mipsel-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-multiarch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-multiarch-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-powerpc-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-powerpc-linux-gnuspe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-powerpc64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-powerpc64le-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-s390x-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-sh4-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"binutils-sparc64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1ubuntu1~16.04.10+tuxcare.els20"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-63.el9.tuxcare.els8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"binutils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-63.el9.tuxcare.els8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"binutils-gold","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-63.el9.tuxcare.els8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cross-binutils-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-63.el9.tuxcare.els8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cross-binutils-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-63.el9.tuxcare.els8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cross-binutils-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-63.el9.tuxcare.els8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-93.el8_4.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"binutils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-93.el8_4.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-aarch64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-alpha-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-arm-linux-gnueabi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-arm-linux-gnueabihf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-for-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-for-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-hppa-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-hppa64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-i686-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-i686-kfreebsd-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-i686-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-ia64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-m68k-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-mips-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-mips64el-linux-gnuabi64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-mipsel-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-multiarch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-multiarch-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-powerpc-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-powerpc-linux-gnuspe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-powerpc64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-powerpc64le-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-riscv64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-s390x-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-sh4-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-sparc64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-x86-64-kfreebsd-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-x86-64-linux-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"binutils-x86-64-linux-gnux32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libbinutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-16+tuxcare.els12"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-37.el9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"binutils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-37.el9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"binutils-gold","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-37.el9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"cross-binutils-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-37.el9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"cross-binutils-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-37.el9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"cross-binutils-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-37.el9.tuxcare.els12"}]}],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.40-2","2.40.50.20230111-1","2.40.50.20230215-1","2.40.50.20230501-1","2.40.50.20230510-1","2.40.50.20230602-1","2.40.50.20230611-1","2.40.50.20230611-2","2.40.50.20230622-1","2.40.50.20230625-1","2.40.50.20230630-1","2.40.90.20230705-1","2.40.90.20230714-1","2.40.90.20230714-2","2.40.90.20230720-1","2.40.90.20230729-1","2.40.90.20230729-2","2.41-1","2.41-2","2.41-3","2.41-4","2.41-5","2.41-6","2.41-7","2.41.50.20230731-1","2.41.50.20230803-1","2.41.50.20230905-1","2.41.50.20231010-1","2.41.50.20231101-1","2.41.50.20231125-1","2.41.50.20231202-1","2.41.50.20231206-1","2.41.50.20231214-1","2.41.50.20231227-1","2.41.90.20240115-1","2.41.90.20240122-1","2.42-1","2.42-2","2.42-2+hurd.1","2.42-3","2.42-4","2.42.50.20240614-1","2.42.50.20240618-1","2.42.50.20240625-1","2.42.50.20240710-1","2.42.90.20240720-1","2.42.90.20240720-2","2.43-1","2.43-2","2.43.1-1","2.43.1-2","2.43.1-3","2.43.1-4","2.43.1-5","2.43.50.20240817-1","2.43.50.20240909-1","2.43.50.20241004-1","2.43.50.20241112-1","2.43.50.20241126-1","2.43.50.20241126-2","2.43.50.20241126-3","2.43.50.20241204-1","2.43.50.20241204-2","2.43.50.20241210-1","2.43.50.20241215-1","2.43.50.20241221-1","2.43.50.20241230-1","2.43.50.20250108-1","2.43.90.20250122-1","2.43.90.20250122-2","2.43.90.20250127-1","2.43.90.20250202-1","2.44-1","2.44-2","2.44-3","2.44.50.20250201-1","2.44.50.20250207-1","2.44.50.20250218-1","2.44.50.20250218-2","2.44.50.20250309-1","2.44.50.20250405-1","2.44.50.20250502-1","2.44.50.20250520-1","2.44.50.20250528-1","2.44.50.20250707-1","2.44.90.20250719-1","2.45-1","2.45-2","2.45-3","2.45-4","2.45-5","2.45-6","2.45-7","2.45-8","2.45.50.20250813-1","2.45.50.20250903-1","2.45.50.20251005-1","2.45.50.20251023-1","2.45.50.20251023-2","2.45.50.20251122-1","2.45.50.20251125-1","2.45.50.20251201-1","2.45.50.20251209-1","2.45.50.20260116-1","2.45.50.20260119-1","2.45.90.20260125-1","2.45.90.20260201-1","2.46-1","2.46-2","2.46-3","2.46.50.20260216-1","2.46.50.20260509-1","2.46.50.20260519-1","2.46.50.20260608-1","2.46.50.20260617-1","2.46.90.20260712-1","2.47-1","2.47-2","2.47-3","2.47-4","2.47-5","2.47-6","2.47.50.20260813-1","2.47.50.20260813-2","2.47.50.20260813-3","2.47.50.20260901-1","2.47.50.20261004-1","2.47.50.20261020-1","2.47.50.20261021-1"]},{"source":"osv","ecosystem":"Debian:13","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.44-3","2.44.50.20250201-1","2.44.50.20250207-1","2.44.50.20250218-1","2.44.50.20250218-2","2.44.50.20250309-1","2.44.50.20250405-1","2.44.50.20250502-1","2.44.50.20250520-1","2.44.50.20250528-1","2.44.50.20250707-1","2.44.90.20250719-1","2.45-1","2.45-2","2.45-3","2.45-4","2.45-5","2.45-6","2.45-7","2.45-8","2.45.50.20250813-1","2.45.50.20250903-1","2.45.50.20251005-1","2.45.50.20251023-1","2.45.50.20251023-2","2.45.50.20251122-1","2.45.50.20251125-1","2.45.50.20251201-1","2.45.50.20251209-1","2.45.50.20260116-1","2.45.50.20260119-1","2.45.90.20260125-1","2.45.90.20260201-1","2.46-1","2.46-2","2.46-3","2.46.50.20260216-1","2.46.50.20260509-1","2.46.50.20260519-1","2.46.50.20260608-1","2.46.50.20260617-1","2.46.90.20260712-1","2.47-1","2.47-2","2.47-3","2.47-4","2.47-5","2.47-6","2.47.50.20260813-1","2.47.50.20260813-2","2.47.50.20260813-3","2.47.50.20260901-1","2.47.50.20261004-1","2.47.50.20261020-1","2.47.50.20261021-1"]},{"source":"osv","ecosystem":"Debian:14","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.44-3","2.44.50.20250201-1","2.44.50.20250207-1","2.44.50.20250218-1","2.44.50.20250218-2","2.44.50.20250309-1","2.44.50.20250405-1","2.44.50.20250502-1","2.44.50.20250520-1","2.44.50.20250528-1","2.44.50.20250707-1","2.44.90.20250719-1","2.45-1","2.45-2","2.45-3","2.45-4","2.45-5","2.45-6","2.45-7","2.45-8","2.45.50.20250813-1","2.45.50.20250903-1","2.45.50.20251005-1","2.45.50.20251023-1","2.45.50.20251023-2","2.45.50.20251122-1","2.45.50.20251125-1","2.45.50.20251201-1","2.45.50.20251209-1","2.45.50.20260116-1","2.45.50.20260119-1","2.45.90.20260125-1","2.45.90.20260201-1","2.46-1","2.46-2","2.46-3","2.46.50.20260216-1","2.46.50.20260509-1","2.46.50.20260519-1","2.46.50.20260608-1","2.46.50.20260617-1","2.46.90.20260712-1","2.47-1","2.47-2","2.47-3","2.47-4","2.47-5","2.47-6","2.47.50.20260813-1","2.47.50.20260813-2","2.47.50.20260813-3","2.47.50.20260901-1","2.47.50.20261004-1","2.47.50.20261020-1","2.47.50.20261021-1"]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.45.1-5.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"binutils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.45.1-5.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"binutils-gold","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.45.1-5.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"binutils-gprofng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.45.1-5.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.46.1-1.hum1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"binutils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.46.1-1.hum1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"binutils-gold","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.46.1-1.hum1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"binutils-gprofng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.46.1-1.hum1"}]}],"bundled":7},{"source":"osv","ecosystem":"Root:Alpine:3.19","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.41-r10071"},{"fixed":"2.41-r10072"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.19","package":"rootio-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.41-r10071"},{"fixed":"2.41-r10072"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.21","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.43.1-r30072"},{"fixed":"2.43.1-r30071"},{"fixed":"2.43.1-r30073"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.21","package":"rootio-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.43.1-r30072"},{"fixed":"2.43.1-r30071"},{"fixed":"2.43.1-r30073"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.22","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44-r30072"},{"fixed":"2.44-r30073"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.22","package":"rootio-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44-r30072"},{"fixed":"2.44-r30073"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.23","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.1-r00071"},{"fixed":"2.45.1-r00072"},{"fixed":"2.45.1-r00073"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.23","package":"rootio-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.1-r00071"},{"fixed":"2.45.1-r00072"},{"fixed":"2.45.1-r00073"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.24","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.1-r10073"},{"fixed":"2.45.1-r10074"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.24","package":"rootio-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.1-r10073"},{"fixed":"2.45.1-r10074"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.23.52.20130913-0ubuntu1","2.23.90.20131017-1ubuntu1","2.23.90.20131116-1ubuntu1","2.23.91.20131123-1ubuntu1","2.24-1ubuntu1","2.24-1ubuntu2","2.24-2ubuntu1","2.24-2ubuntu2","2.24-2ubuntu3","2.24-4ubuntu1","2.24-5ubuntu1","2.24-5ubuntu2","2.24-5ubuntu3","2.24-5ubuntu3.1","2.24-5ubuntu13","2.24-5ubuntu14","2.24-5ubuntu14.1","2.24-5ubuntu14.2","2.24-5ubuntu14.2+esm1","2.24-5ubuntu14.2+esm2","2.24-5ubuntu14.2+esm3","2.24-5ubuntu14.2+esm5","2.24-5ubuntu14.2+esm6","2.24-5ubuntu14.2+esm7","2.24-5ubuntu14.2+esm8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.25.1-6ubuntu1","2.25.51.20151022-0ubuntu2","2.25.51.20151022-0ubuntu3","2.25.51.20151027-0ubuntu1","2.25.51.20151028-0ubuntu1","2.25.51.20151106-0ubuntu1","2.25.51.20151113-1ubuntu1","2.25.51.20151113-2ubuntu1","2.25.90.20151125-1ubuntu1","2.25.90.20151125-2ubuntu1","2.25.90.20151211-0ubuntu1","2.25.90.20151211-0ubuntu2","2.25.90.20160101-1ubuntu1","2.25.90.20160101-1ubuntu2","2.26-2ubuntu1","2.26-3ubuntu1","2.26-4ubuntu1","2.26-5ubuntu1","2.26-6ubuntu1","2.26-7ubuntu2","2.26-8ubuntu1","2.26-8ubuntu2","2.26-8ubuntu2.1","2.26.1-1ubuntu1~16.04","2.26.1-1ubuntu1~16.04.1","2.26.1-1ubuntu1~16.04.3","2.26.1-1ubuntu1~16.04.4","2.26.1-1ubuntu1~16.04.5","2.26.1-1ubuntu1~16.04.6","2.26.1-1ubuntu1~16.04.7","2.26.1-1ubuntu1~16.04.8","2.26.1-1ubuntu1~16.04.8+esm1","2.26.1-1ubuntu1~16.04.8+esm3","2.26.1-1ubuntu1~16.04.8+esm4","2.26.1-1ubuntu1~16.04.8+esm5","2.26.1-1ubuntu1~16.04.8+esm6","2.26.1-1ubuntu1~16.04.8+esm7","2.26.1-1ubuntu1~16.04.8+esm9","2.26.1-1ubuntu1~16.04.8+esm11","2.26.1-1ubuntu1~16.04.8+esm12","2.26.1-1ubuntu1~16.04.8+esm13","2.26.1-1ubuntu1~16.04.8+esm14"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.29.1-4ubuntu1","2.29.1-6ubuntu1","2.29.1-7ubuntu1","2.29.1-8ubuntu1","2.29.1-10ubuntu1","2.29.1-12ubuntu1","2.30-4ubuntu1","2.30-5ubuntu1","2.30-7ubuntu1","2.30-8ubuntu1","2.30-9ubuntu1","2.30-10ubuntu1","2.30-11ubuntu1","2.30-14ubuntu2","2.30-15ubuntu1","2.30-20ubuntu2~18.04","2.30-21ubuntu1~18.04","2.30-21ubuntu1~18.04.1","2.30-21ubuntu1~18.04.2","2.30-21ubuntu1~18.04.3","2.30-21ubuntu1~18.04.4","2.30-21ubuntu1~18.04.5","2.30-21ubuntu1~18.04.7","2.30-21ubuntu1~18.04.8","2.30-21ubuntu1~18.04.9","2.30-21ubuntu1~18.04.9+esm1","2.30-21ubuntu1~18.04.9+esm3","2.30-21ubuntu1~18.04.9+esm4","2.30-21ubuntu1~18.04.9+esm5","2.30-21ubuntu1~18.04.9+esm13"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.33-2ubuntu1","2.33.1-1ubuntu1","2.33.1-5ubuntu1","2.33.1-6ubuntu1","2.33.1-6ubuntu3","2.33.90.20200122-1ubuntu2","2.34-1ubuntu1","2.34-3ubuntu1","2.34-4ubuntu1","2.34-5ubuntu1","2.34-6ubuntu1","2.34-6ubuntu1.1","2.34-6ubuntu1.3","2.34-6ubuntu1.4","2.34-6ubuntu1.5","2.34-6ubuntu1.6","2.34-6ubuntu1.7","2.34-6ubuntu1.8","2.34-6ubuntu1.9","2.34-6ubuntu1.10","2.34-6ubuntu1.11","2.34-6ubuntu1.11+esm1","2.34-6ubuntu1.11+esm2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.37-7ubuntu1","2.37-9ubuntu1","2.37-10ubuntu1","2.37.50.20220106-2ubuntu1","2.37.90.20220126-0ubuntu1","2.37.90.20220130-0ubuntu2","2.38-1ubuntu1","2.38-2ubuntu1","2.38-3ubuntu1","2.38-4ubuntu2","2.38-4ubuntu2.1","2.38-4ubuntu2.2","2.38-4ubuntu2.3","2.38-4ubuntu2.4","2.38-4ubuntu2.5","2.38-4ubuntu2.6","2.38-4ubuntu2.7","2.38-4ubuntu2.8","2.38-4ubuntu2.10","2.38-4ubuntu2.11","2.38-4ubuntu2.12"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.41-5ubuntu1","2.41-6ubuntu1","2.41.50.20231206-1ubuntu1","2.41.50.20231214-1ubuntu1","2.41.50.20231227-1ubuntu1","2.41.90.20240122-1ubuntu1","2.42-2ubuntu1","2.42-3ubuntu1","2.42-4ubuntu1","2.42-4ubuntu2","2.42-4ubuntu2.3","2.42-4ubuntu2.4","2.42-4ubuntu2.5","2.42-4ubuntu2.6","2.42-4ubuntu2.7","2.42-4ubuntu2.8","2.42-4ubuntu2.10"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.44-3ubuntu1","2.44.50.20250602-0ubuntu1","2.44.50.20250604-0ubuntu2","2.44.50.20250616-0ubuntu1","2.44.50.20250707-1ubuntu1","2.45-1ubuntu1","2.45-3ubuntu3","2.45-6ubuntu1","2.45-7ubuntu1","2.45-7ubuntu1.1","2.45-7ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.46-3ubuntu2","2.46.50.20260608-1ubuntu1","2.47-2ubuntu1","2.47-6ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.45-7ubuntu1","2.45-7ubuntu2","2.45-8ubuntu1","2.45.50.20251125-1ubuntu1","2.45.50.20251201-1ubuntu1","2.45.50.20251209-1ubuntu1","2.45.50.20260119-1ubuntu1","2.46-1ubuntu1","2.46-2ubuntu1","2.46-3ubuntu1","2.46-3ubuntu2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.47-1.1"}]}],"bundled":16}],"products":[{"vendor":"gnu","product":"binutils"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat hardened images"},{"vendor":"red hat","product":"red hat openshift container platform 4"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"openshift_container_platform"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:33527","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:39022","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-3441","tags":["vdb-entry","x_refsource_REDHAT","Vendor Advisory","advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2443826","tags":["issue-tracking","x_refsource_REDHAT","Issue Tracking","Vendor Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3441","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-8444-p2rx-h3vp"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-3441","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1775721575.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1775722568.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1776069305.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1776069613.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1776083558.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1776156000.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-5244","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-5245","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66862","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66863","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66865","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3442","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1776156481.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1776673982.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1778237657.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1778674192.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1779266445.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://catalog.redhat.com/software/containers/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/3xxx/CVE-2026-3441.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-3441","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-3442","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-4647","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6846","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_33527.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3441","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2443828","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3442","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2450302","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-4647","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4647","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33919","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460006","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6846","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6846","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11082","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11083","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6845","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39022.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2399943","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11082","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11082","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16358","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33464","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33464#c2","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea1a0737c7692737a644af0486b71e4a392cbca8","tags":["article"]},{"url":"https://vuldb.com/?ctiid.326123","tags":["article"]},{"url":"https://vuldb.com/?id.326123","tags":["article"]},{"url":"https://vuldb.com/?submit.661276","tags":["article"]},{"url":"https://www.gnu.org/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2399948","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11083","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11083","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16353","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33457","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33457#c1","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=9ca499644a21ceb3f946d1c179c38a83be084490","tags":["article"]},{"url":"https://vuldb.com/?ctiid.326124","tags":["article"]},{"url":"https://vuldb.com/?id.326124","tags":["article"]},{"url":"https://vuldb.com/?submit.661277","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2460012","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6845","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6845","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-3441","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11839","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69645","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69648","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69649","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69652","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-15003","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-18220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6846","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-3441","title":"Binutils: gnu binutils: information disclosure via specially crafted xcoff object file","description":"A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an out-of-bounds read in the bfd linker, allows an attacker to gain access to sensitive information. By convincing a user to process a specially crafted XCOFF object file, an attacker can trigger this flaw, potentially leading to information disclosure or an application level denial of service.","status":"published","published":"2026-03-15T00:19:07.864Z","modified":"2026-11-05T20:23:53.92Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-125"],"updated_at":"2026-11-05T21:25:06.152449Z"}],"euvd":[{"id":"EUVD-2026-12194","description":"A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an out-of-bounds read in the bfd linker, allows an attacker to gain access to sensitive information. By convincing a user to process a specially crafted XCOFF object file, an attacker can trigger this flaw, potentially leading to information disclosure or an application level denial of service.","status":"published","published":"2026-03-15T00:19:07Z","modified":"2026-11-05T20:23:53Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L","level":"medium"}],"updated_at":"2026-11-05T21:01:57.572849Z"}],"ghsa":[{"id":"GHSA-8444-p2rx-h3vp","title":"A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an...","description":"A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an out-of-bounds read in the bfd linker, allows an attacker to gain access to sensitive information. By convincing a user to process a specially crafted XCOFF object file, an attacker can trigger this flaw, potentially leading to information disclosure or an application level denial of service.","status":"published","published":"2026-03-16T15:30:44Z","modified":"2026-07-14T00:31:00Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:09:26.474991Z"}],"nvd":[{"id":"CVE-2026-3441","description":"A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an out-of-bounds read in the bfd linker, allows an attacker to gain access to sensitive information. By convincing a user to process a specially crafted XCOFF object file, an attacker can trigger this flaw, potentially leading to information disclosure or an application level denial of service.","status":"published","published":"2026-03-16T14:19:47.447Z","modified":"2026-11-05T21:18:47.733Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-05T23:57:16.793383Z"}],"osv":[{"id":"BELL-CVE-2026-3441","title":"CVE-2026-3441 does not affect BellSoft software","status":"withdrawn","published":"2026-03-06T06:09:08.457165Z","modified":"2026-04-03T07:16:11.688377Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:23.572955Z"},{"id":"CVE-2026-3441","title":"Binutils: gnu binutils: information disclosure via specially crafted xcoff object file","description":"A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an out-of-bounds read in the bfd linker, allows an attacker to gain access to sensitive information. By convincing a user to process a specially crafted XCOFF object file, an attacker can trigger this flaw, potentially leading to information disclosure or an application level denial of service.","status":"published","published":"2026-03-15T00:19:07.864Z","modified":"2026-11-07T02:31:08.763448896Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-07T03:08:04.386615Z"},{"id":"DEBIAN-CVE-2026-3441","description":"A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an out-of-bounds read in the bfd linker, allows an attacker to gain access to sensitive information. By convincing a user to process a specially crafted XCOFF object file, an attacker can trigger this flaw, potentially leading to information disclosure or an application level denial of service.","status":"published","published":"2026-03-16T14:19:47.447Z","modified":"2026-11-06T10:05:05.190763632Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-06T10:38:22.758306Z"},{"id":"RHSA-2026:33527","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","status":"published","published":"2026-07-01T10:19:40Z","modified":"2026-10-06T10:31:23.199867757Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:39022","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","status":"published","published":"2026-07-14T10:09:23Z","modified":"2026-10-15T10:18:32Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"ROOT-OS-ALPINE-319-CVE-2026-3441","title":"CVE-2026-3441 in binutils - Patched by Root","description":"Root has patched CVE-2026-3441 in the binutils package for Root:Alpine:3.19. Multiple fixed versions available.","status":"published","published":"2026-09-29T10:58:17Z","modified":"2026-09-29T11:15:04.433128853Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"ROOT-OS-ALPINE-321-CVE-2026-3441","title":"CVE-2026-3441 in binutils - Patched by Root","description":"Root has patched CVE-2026-3441 in the binutils package for Root:Alpine:3.21. Multiple fixed versions available.","status":"published","published":"2026-09-29T09:27:04Z","modified":"2026-09-29T10:15:15.212311138Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:28.544053Z"},{"id":"ROOT-OS-ALPINE-322-CVE-2026-3441","title":"CVE-2026-3441 in binutils - Patched by Root","description":"Root has patched CVE-2026-3441 in the binutils package for Root:Alpine:3.22. Multiple fixed versions available.","status":"published","published":"2026-09-29T09:11:55Z","modified":"2026-09-29T10:15:06.431138685Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:28.544053Z"},{"id":"ROOT-OS-ALPINE-323-CVE-2026-3441","title":"CVE-2026-3441 in binutils - Patched by Root","description":"Root has patched CVE-2026-3441 in the binutils package for Root:Alpine:3.23. Multiple fixed versions available.","status":"published","published":"2026-09-29T09:24:21Z","modified":"2026-09-29T10:15:05.821185119Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:28.544053Z"},{"id":"ROOT-OS-ALPINE-324-CVE-2026-3441","title":"CVE-2026-3441 in binutils - Patched by Root","description":"Root has patched CVE-2026-3441 in the binutils package for Root:Alpine:3.24. Multiple fixed versions available.","status":"published","published":"2026-09-29T09:24:19Z","modified":"2026-09-29T10:15:28.201918868Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:28.544053Z"},{"id":"UBUNTU-CVE-2026-3441","description":"A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an out-of-bounds read in the bfd linker, allows an attacker to gain access to sensitive information. By convincing a user to process a specially crafted XCOFF object file, an attacker can trigger this flaw, potentially leading to information disclosure or an application level denial of service.","status":"published","published":"2026-03-16T14:19:00Z","modified":"2026-10-17T13:00:02.109073757Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L","level":"medium"},{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:16.036833Z"},{"id":"CLSA-2026-1775721575","title":"binutils: Fix of 4 CVEs","description":"- CVE-2025-5244: fix NULL deref in elf_gc_sweep with empty groups\n- CVE-2025-5245: fix SEGV in debug_type_samep, handle undefined tagged enums\n- CVE-2026-3441 CVE-2026-3442: fix out-of-bounds read in XCOFF relocation processing","status":"published","published":"2026-04-09T07:59:39Z","modified":"2026-06-01T00:33:19.916077928Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775722568","title":"binutils: Fix of 4 CVEs","description":"- CVE-2025-5244: fix NULL pointer dereference in elf_gc_sweep for empty section groups\n- CVE-2025-5245: fix memory corruption in debug_type_samep incorrect NULL check\n- CVE-2026-3441: fix out-of-bounds read in xcoff_link_add_symbols x_scnlen bounds check\n- CVE-2026-3442: fix out-of-bounds read in xcoff_link_add_symbols missing r_symndx bounds check","status":"published","published":"2026-04-09T14:45:10Z","modified":"2026-06-01T00:33:16.841568727Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1776069305","title":"binutils: Fix of 2 CVEs","description":"- CVE-2026-3441, CVE-2026-3442: fix out-of-bounds read in XCOFF relocation processing","status":"published","published":"2026-04-16T14:43:41Z","modified":"2026-06-01T00:33:18.410970242Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1776069613","title":"Fix CVE(s): CVE-2026-3441, CVE-2026-3442","description":"   * SECURITY UPDATE: buffer overflow in xcoff linker\n     - debian/patches/CVE-2026-3441_CVE-2026-3442.patch: properly\n       bounds check XTY_LD x_scnlen index in xcoff_link_add_symbols\n     - CVE-2026-3441\n   * SECURITY UPDATE: out-of-bounds read in xcoff linker\n     - debian/patches/CVE-2026-3441_CVE-2026-3442.patch: sanity check\n       r_symndx before using it to index sym hashes\n     - CVE-2026-3442","status":"published","published":"2026-04-13T08:40:19Z","modified":"2026-06-04T10:04:29.502733Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1776083558","title":"binutils: Fix of 4 CVEs","description":"- CVE-2025-5244: fix NULL deref in elf_gc_sweep on empty section group\n- CVE-2025-5245: fix NULL deref in debug_type_samep for incomplete enum types\n- CVE-2026-3441, CVE-2026-3442: fix xcofflink out-of-bounds accesses","status":"published","published":"2026-04-13T12:32:43Z","modified":"2026-06-01T00:33:14.565497044Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1776156000","title":"binutils: Fix of 7 CVEs","description":"- CVE-2025-5244: fix NULL deref in elf_gc_sweep with empty groups\n- CVE-2025-5245: fix SEGV in debug_type_samep\n- CVE-2026-3441 CVE-2026-3442: fix out-of-bounds read in XCOFF relocation processing","status":"published","published":"2026-07-03T10:31:56Z","modified":"2026-10-26T09:31:54.511119526Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1776156481","title":"Fix of 5 CVEs","description":"   * SECURITY UPDATE: fix heap buffer overflow in _bfd_elf_parse_eh_frame\n     - debian/patches/CVE-2025-11082.patch: fix heap buffer overflow in _bfd_elf_parse_eh_frame\n     - CVE-2025-11082\n   * SECURITY UPDATE: fix NULL deref in elf_gc_sweep with empty groups\n     - debian/patches/CVE-2025-5244.patch: fix NULL deref in elf_gc_sweep with empty groups\n     - CVE-2025-5244\n   * SECURITY UPDATE: fix SEGV in debug_type_samep\n     - debian/patches/CVE-2025-5245.patch: fix SEGV in debug_type_samep\n     - CVE-2025-5245\n   * SECURITY UPDATE: fix out-of-bounds reads in xcoff_link_add_symbols\n     - debian/patches/CVE-2026-3441.patch: properly bounds check XTY_LD\n       x_scnlen index and sanity check r_symndx before using it to index\n       sym hashes in xcoff_link_add_symbols\n     - CVE-2026-3441\n     - CVE-2026-3442","status":"published","published":"2026-04-14T08:48:07Z","modified":"2026-06-04T10:04:26.253119Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1776673982","title":"binutils: Fix of 2 CVEs","description":"- CVE-2026-3441: heap OOB read via XTY_LD x_scnlen csect index\n- CVE-2026-3442: OOB read on r_symndx before sym_hashes[] indexing","status":"published","published":"2026-04-20T08:33:07Z","modified":"2026-06-01T00:32:47.436393849Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1778237657","title":"binutils: Fix of 4 CVEs","description":"- CVE-2025-5244: fix ld segfault on fuzzed object via NULL group head\n- CVE-2025-5245: fix segv in objdump debug_type_samep and debug_write_type\n  on incomplete enum types\n- CVE-2026-3441: fix xcofflink XTY_LD x_scnlen out-of-bounds index\n- CVE-2026-3442: fix xcofflink r_symndx out-of-bounds sym hash index","status":"published","published":"2026-05-08T10:54:21Z","modified":"2026-06-01T00:32:38.989654658Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1778674192","title":"Fix CVE(s): CVE-2026-3441, CVE-2026-3442","description":"   * SECURITY UPDATE: heap-based OOB read in xcoff_link_add_symbols\n     (bfd/xcofflink.c) triggered by a crafted XCOFF object file\n     - debian/patches/binutils-CVE-2026-3441-3442.patch: bounds-check\n       XTY_LD x_scnlen csect index and sanity-check r_symndx before\n       indexing sym_hashes\n     - CVE-2026-3441\n     - CVE-2026-3442","status":"published","published":"2026-05-13T12:09:58Z","modified":"2026-06-04T10:03:42.544708Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1779266445","title":"binutils: Fix of 4 CVEs","description":"- CVE-2026-3441: XCOFF linker XTY_LD x_scnlen out-of-bounds read\n- CVE-2026-3442: XCOFF linker r_symndx out-of-bounds read in obj_xcoff_sym_hashes\n- CVE-2025-7545: objcopy heap buffer overflow on --interleave with crafted small input\n- CVE-2025-5245: objdump SEGV / NULL deref in debug_type_samep and debug_write_type","status":"published","published":"2026-05-20T08:40:50Z","modified":"2026-10-21T10:46:48.523541265Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"openSUSE-SU-2026:11932-1","title":"binutils-2.47-1.1 on GA media","description":"These are all security issues fixed in the binutils-2.47-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-30T00:00:00Z","modified":"2026-10-01T11:15:05.44014221Z","updated_at":"2026-11-02T16:58:40.245664Z"}]}}