Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
AlmaLinux binutils can cause memory corruption
published 11 months ago
Summary
The binutils collection used by AlmaLinux, which includes tools for building and linking programs, contains a flaw in the linker that can corrupt memory while handling certain files. This could lead to program crashes or allow an attacker to affect the system. Install the latest AlmaLinux binutils, binutils‑devel, or binutils‑gold packages from the official repositories as soon as possible.
What to do
- Update almalinux binutils to version 2.41-58.el10.alma.1.
- Update almalinux binutils-devel to version 2.41-58.el10.alma.1.
- Update almalinux binutils-gold to version 2.41-58.el10.alma.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:10 | almalinux | binutils |
< 2.41-58.el10.alma.1 Fix: upgrade to 2.41-58.el10.alma.1
|
| AlmaLinux:10 | almalinux | binutils-devel |
< 2.41-58.el10.alma.1 Fix: upgrade to 2.41-58.el10.alma.1
|
| AlmaLinux:10 | almalinux | binutils-gold |
< 2.41-58.el10.alma.1 Fix: upgrade to 2.41-58.el10.alma.1
|
Original advisory text
Moderate: binutils security update
The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities.
Security Fix(es):
* binutils: GNU Binutils ld elflink.c elf_gc_sweep memory corruption (CVE-2025-5244)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Security Fix(es):
* binutils: GNU Binutils ld elflink.c elf_gc_sweep memory corruption (CVE-2025-5244)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
References
- https://access.redhat.com/errata/RHSA-2025:20155 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2025-5244 Third Party Advisory
- https://bugzilla.redhat.com/2368763 Third Party Advisory
- https://errata.almalinux.org/10/ALSA-2025-20155.html Vendor Advisory
Timeline
Published11 Nov 2025
Updated29 Oct 2026
First seen29 Oct 2026
Sources
ALSA-2025:20155 · OSV
Track software like this
Free during beta