Skip to content

fix(cve): CVE-2025-69649 - PR 33697, fuzzer segfault - #28

Merged
Zeno-sole merged 2 commits into
masterfrom
fix-cve/CVE-2025-69650
Aug 27, 2026
Merged

fix(cve): CVE-2025-69649 - PR 33697, fuzzer segfault#28
Zeno-sole merged 2 commits into
masterfrom
fix-cve/CVE-2025-69650

Conversation

@deepin-ci-robot

@deepin-ci-robot deepin-ci-robot commented Aug 27, 2026

Copy link
Copy Markdown
Contributor

CVE: CVE-2025-69649 (high) - GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header fields. During relocation processing, an invalid or null section pointer may be passed into display_relocations(), resulting in a segmentation fault (SIGSEGV) and abrupt termination.
Upstream: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=66a3492ce68e1ae45b2489bd9a815c39ea5d7f66

Co-authored-by: hudeng hudeng@deepin.org
Generated-By: qwen3.6-35b


CVE: CVE-2026-6846 (high) - PR 34049 buffer overflow in xcoff_link_add_symbols
Upstream: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=7a089e0302382f4d4e077941156e1eaa68d01393

Co-authored-by: hudeng hudeng@deepin.org
Generated-By: qwen3.6-35b

@deepin-ci-robot

Copy link
Copy Markdown
Contributor Author

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign tsic404 for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@github-actions

github-actions Bot commented Aug 27, 2026

Copy link
Copy Markdown

TAG Bot

TAG: 2.41-6deepin15
EXISTED: no
DISTRIBUTION: unstable

@hudeng-go
hudeng-go force-pushed the fix-cve/CVE-2025-69650 branch from 745c6ec to edb8a39 Compare August 27, 2026 06:54
@hudeng-go hudeng-go changed the title fix(cve): CVE-2025-69650 - PR 33698 and PR 33700 fix(cve): CVE-2025-69649 - PR 33697, fuzzer segfault Aug 27, 2026
@hudeng-go
hudeng-go force-pushed the fix-cve/CVE-2025-69650 branch from edb8a39 to 2d5920a Compare August 27, 2026 07:23
…symbols

CVE: CVE-2026-6846 (high) - PR 34049 buffer overflow in xcoff_link_add_symbols
Upstream: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=7a089e0302382f4d4e077941156e1eaa68d01393

Co-authored-by: hudeng <hudeng@deepin.org>
Generated-By: qwen3.6-35b
@Zeno-sole

Copy link
Copy Markdown
Contributor

/integrate

@github-actions

Copy link
Copy Markdown

AutoIntegrationPr Bot
auto integrate with pr url: deepin-community/Repository-Integration#4520
PrNumber: 4520
PrBranch: auto-integration-33055492622

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants