OESA-2025-2627

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-2627
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2025-2627.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2025-2627
Upstream
Published
2025-11-07T12:30:31Z
Modified
2025-11-07T13:03:59.262594Z
Summary
gdb security update
Details

GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.

Security Fix(es):

A vulnerability has been found in GNU Binutils 2.45. This impacts the function bfdelfgcrecordvtentry of the file bfd/elflink.c of the component Linker. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of the patch is 047435dd988a3975d40c6626a8f739a0b2e154bc. To fix this issue, it is recommended to deploy a patch.(CVE-2025-11412)

A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be exploited. This patch is called 16357. It is best practice to apply a patch to resolve this issue.(CVE-2025-11840)

Database specific 
{
    "severity": "Medium"
}
References

Affected packages

openEuler:22.03-LTS-SP4 / gdb

Package

Name
gdb
Purl
pkg:rpm/openEuler/gdb&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
11.1-16.oe2203sp4

Ecosystem specific 

{
    "x86_64": [
        "gdb-11.1-16.oe2203sp4.x86_64.rpm",
        "gdb-debuginfo-11.1-16.oe2203sp4.x86_64.rpm",
        "gdb-debugsource-11.1-16.oe2203sp4.x86_64.rpm",
        "gdb-gdbserver-11.1-16.oe2203sp4.x86_64.rpm",
        "gdb-headless-11.1-16.oe2203sp4.x86_64.rpm"
    ],
    "noarch": [
        "gdb-help-11.1-16.oe2203sp4.noarch.rpm"
    ],
    "aarch64": [
        "gdb-11.1-16.oe2203sp4.aarch64.rpm",
        "gdb-debuginfo-11.1-16.oe2203sp4.aarch64.rpm",
        "gdb-debugsource-11.1-16.oe2203sp4.aarch64.rpm",
        "gdb-gdbserver-11.1-16.oe2203sp4.aarch64.rpm",
        "gdb-headless-11.1-16.oe2203sp4.aarch64.rpm"
    ],
    "src": [
        "gdb-11.1-16.oe2203sp4.src.rpm"
    ]
}