https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:08:25.444911+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:4364 ALSA-2021:4364 — Moderate: binutils security update 2026-10-03T06:08:25.483172+00:00

Affected: AlmaLinux:8: binutils-devel

The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities.

Security Fix(es):

* binutils: Excessive debug section size can cause excessive memory consumption in bfd's dwarf2.c read_section() (CVE-2021-3487)

* binutils: Race window allows users to own arbitrary files (CVE-2021-20197)

* binutils: Heap-based buffer overflow in bfd_getl_signed_32() in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section() in elf.c (CVE-2020-35448)

* binutils: Heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c (CVE-2021-20284)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-05789 bdu:2023-05789 2026-10-03T06:08:25.483261+00:00 bdu:2023-05789 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0693 certfr-2025-avi-0693 — De multiples vulnérabilités ont été découvertes dans VMware Tanzu. Elles permettent à un attaquant de provoquer un prob… 2026-10-03T06:08:25.483280+00:00 certfr-2025-avi-0693 https://cve.radiocsirt.org/vuln/cnvd-2021-14748 cnvd-2021-14748 2026-10-03T06:08:25.483316+00:00 cnvd-2021-14748 https://cve.radiocsirt.org/vuln/euvd-2026-262398 EUVD-2026-262398 2026-10-03T06:08:25.483335+00:00 EUVD-2026-262398 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20197 fkie_cve-2021-20197 2026-10-03T06:08:25.483347+00:00

There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these utilities are run as a privileged user (presumably as part of a script updating binaries across different users), an unprivileged user can trick these utilities into getting ownership of arbitrary files through a symlink.

 https://cve.radiocsirt.org/vuln/ghsa-rq67-5wpf-96wv GHSA-rq67-5wpf-96wv 2026-10-03T06:08:25.483371+00:00

There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these utilities are run as a privileged user (presumably as part of a script updating binaries across different users), an unprivileged user can trick these utilities into getting ownership of arbitrary files through a symlink.

 https://cve.radiocsirt.org/vuln/gsd-2021-20197 gsd-2021-20197 2026-10-03T06:08:25.483386+00:00 gsd-2021-20197 https://cve.radiocsirt.org/vuln/msrc_cve-2021-20197 msrc_CVE-2021-20197 — There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar… 2026-10-03T06:08:25.483396+00:00 msrc_CVE-2021-20197 https://cve.radiocsirt.org/vuln/oesa-2021-1153 OESA-2021-1153 — binutils security update 2026-10-03T06:08:25.483414+00:00

Affected: openEuler:20.03-LTS-SP1: binutils

Security Fix(es): There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these utilities are run as a privileged user (presumably as part of a script updating binaries across different users), an unprivileged user can trick these utilities into getting ownership of arbitrary files through a symlink.(CVE-2021-20197)

 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1475-1 openSUSE-SU-2021:1475-1 — Security update for binutils 2026-10-03T06:08:25.483435+00:00

Security update for binutils

 https://cve.radiocsirt.org/vuln/suse-su-2021:3593-1 SUSE-SU-2021:3593-1 — Security update for binutils 2026-10-03T06:08:25.483458+00:00

Security update for binutils

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-20197 UBUNTU-CVE-2021-20197 2026-10-03T06:08:25.483480+00:00

Affected: Ubuntu:Pro:14.04:LTS: binutils, Ubuntu:Pro:16.04:LTS: binutils, Ubuntu:Pro:18.04:LTS: binutils, Ubuntu:Pro:20.04:LTS: binutils

There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these utilities are run as a privileged user (presumably as part of a script updating binaries across different users), an unprivileged user can trick these utilities into getting ownership of arbitrary files through a symlink.