{ "document": { "aggregate_severity": { "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2025-1371: fix null pointer dereference in eu-readelf when processing\n corrupt ELF files with broken program headers\n- CVE-2025-1376: fix denial of service in libelf when processing sections\n without data (elf_strptr on sections with sh_size set but no data)\n- CVE-2025-1377: fix denial of service in eu-strip when processing relocation\n tables with invalid symbol table sections (SHT_NOBITS)", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/tuxcare9.6esu/advisories/2025/clsa-2025_1766501126.json" }, { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2025:1766501126", "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1766501126" } ], "tracking": { "current_release_date": "2025-12-23T14:46:30Z", "generator": { "date": "2025-12-23T14:46:30Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2025:1766501126", "initial_release_date": "2025-12-23T14:46:30Z", "revision_history": [ { "date": "2025-12-23T14:46:30Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "elfutils: Fix of 3 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "AlmaLinux 9.6", "product": { "name": "AlmaLinux 9.6", "product_id": "AlmaLinux-9.6", "product_identification_helper": { "cpe": "cpe:2.3:o:almalinux:almalinux:9.6:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "AlmaLinux" } ], "category": "vendor", "name": "AlmaLinux OS Foundation" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "Rocky Linux 9.6", "product": { "name": "Rocky Linux 9.6", "product_id": "Rocky Linux-9.6", "product_identification_helper": { "cpe": "cpe:2.3:o:resf:rocky_linux:9.6:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Rocky Linux" } ], "category": "vendor", "name": "Rocky Linux" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "elfutils-debuginfod-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "product": { "name": "elfutils-debuginfod-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "product_id": "elfutils-debuginfod-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/elfutils-debuginfod@0.192-6.el9_6.alma.1.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "elfutils-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "product": { "name": "elfutils-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "product_id": "elfutils-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/elfutils@0.192-6.el9_6.alma.1.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "product": { "name": "elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "product_id": "elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/elfutils-libelf@0.192-6.el9_6.alma.1.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "product": { "name": "elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "product_id": "elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/elfutils-debuginfod-client-devel@0.192-6.el9_6.alma.1.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "product": { "name": "elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "product_id": "elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/elfutils-devel@0.192-6.el9_6.alma.1.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "product": { "name": "elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "product_id": "elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/elfutils-libs@0.192-6.el9_6.alma.1.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "product": { "name": "elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "product_id": "elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/elfutils-libelf-devel@0.192-6.el9_6.alma.1.tuxcare.els2?arch=x86_64" } } }, { "category": "product_version", "name": "elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "product": { "name": "elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "product_id": "elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/elfutils-debuginfod-client@0.192-6.el9_6.alma.1.tuxcare.els2?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "product": { "name": "elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "product_id": "elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/elfutils-libelf@0.192-6.el9_6.alma.1.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "product": { "name": "elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "product_id": "elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/elfutils-debuginfod-client-devel@0.192-6.el9_6.alma.1.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "product": { "name": "elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "product_id": "elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/elfutils-devel@0.192-6.el9_6.alma.1.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "product": { "name": "elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "product_id": "elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/elfutils-libs@0.192-6.el9_6.alma.1.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "product": { "name": "elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "product_id": "elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/elfutils-libelf-devel@0.192-6.el9_6.alma.1.tuxcare.els2?arch=i686" } } }, { "category": "product_version", "name": "elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "product": { "name": "elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "product_id": "elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/elfutils-debuginfod-client@0.192-6.el9_6.alma.1.tuxcare.els2?arch=i686" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "elfutils-default-yama-scope-0:0.192-6.el9_6.alma.1.tuxcare.els2.noarch", "product": { "name": "elfutils-default-yama-scope-0:0.192-6.el9_6.alma.1.tuxcare.els2.noarch", "product_id": "elfutils-default-yama-scope-0:0.192-6.el9_6.alma.1.tuxcare.els2.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/elfutils-default-yama-scope@0.192-6.el9_6.alma.1.tuxcare.els2?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "elfutils-debuginfod-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:elfutils-debuginfod-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64" }, "product_reference": "elfutils-debuginfod-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:elfutils-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64" }, "product_reference": "elfutils-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686" }, "product_reference": "elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64" }, "product_reference": "elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686" }, "product_reference": "elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64" }, "product_reference": "elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686" }, "product_reference": "elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64" }, "product_reference": "elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686" }, "product_reference": "elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64" }, "product_reference": "elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686" }, "product_reference": "elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64" }, "product_reference": "elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-default-yama-scope-0:0.192-6.el9_6.alma.1.tuxcare.els2.noarch as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:elfutils-default-yama-scope-0:0.192-6.el9_6.alma.1.tuxcare.els2.noarch" }, "product_reference": "elfutils-default-yama-scope-0:0.192-6.el9_6.alma.1.tuxcare.els2.noarch", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686" }, "product_reference": "elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64 as a component of AlmaLinux 9.6", "product_id": "AlmaLinux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64" }, "product_reference": "elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-debuginfod-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:elfutils-debuginfod-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64" }, "product_reference": "elfutils-debuginfod-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:elfutils-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64" }, "product_reference": "elfutils-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686" }, "product_reference": "elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64" }, "product_reference": "elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686" }, "product_reference": "elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64" }, "product_reference": "elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686" }, "product_reference": "elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64" }, "product_reference": "elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686" }, "product_reference": "elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64" }, "product_reference": "elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686" }, "product_reference": "elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64" }, "product_reference": "elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-default-yama-scope-0:0.192-6.el9_6.alma.1.tuxcare.els2.noarch as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:elfutils-default-yama-scope-0:0.192-6.el9_6.alma.1.tuxcare.els2.noarch" }, "product_reference": "elfutils-default-yama-scope-0:0.192-6.el9_6.alma.1.tuxcare.els2.noarch", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686" }, "product_reference": "elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "relates_to_product_reference": "Rocky Linux-9.6" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64 as a component of Rocky Linux 9.6", "product_id": "Rocky Linux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64" }, "product_reference": "elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.6" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-1371", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "description", "text": "A vulnerability has been found in GNU elfutils 0.192 and classified as problematic. This vulnerability affects the function handle_dynamic_symtab of the file readelf.c of the component eu-read. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The patch is identified as b38e562a4c907e08171c76b8b2def8464d5a104a. It is recommended to apply a patch to fix this issue.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.6:elfutils-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-debuginfod-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-default-yama-scope-0:0.192-6.el9_6.alma.1.tuxcare.els2.noarch", "AlmaLinux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-debuginfod-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-default-yama-scope-0:0.192-6.el9_6.alma.1.tuxcare.els2.noarch", "Rocky Linux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-1371" }, { "category": "external", "summary": "https://sourceware.org/bugzilla/attachment.cgi?id=15926", "url": "https://sourceware.org/bugzilla/attachment.cgi?id=15926" }, { "category": "external", "summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=32655", "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=32655" }, { "category": "external", "summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=32655#c2", "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=32655#c2" }, { "category": "external", "summary": "https://vuldb.com/?ctiid.295978", "url": "https://vuldb.com/?ctiid.295978" }, { "category": "external", "summary": "https://vuldb.com/?id.295978", "url": "https://vuldb.com/?id.295978" }, { "category": "external", "summary": "https://vuldb.com/?submit.496484", "url": "https://vuldb.com/?submit.496484" }, { "category": "external", "summary": "https://www.gnu.org/", "url": "https://www.gnu.org/" } ], "release_date": "2025-02-17T03:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-12-23T14:45:28.076513Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1766501126", "product_ids": [ "AlmaLinux-9.6:elfutils-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-debuginfod-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-default-yama-scope-0:0.192-6.el9_6.alma.1.tuxcare.els2.noarch", "AlmaLinux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-debuginfod-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-default-yama-scope-0:0.192-6.el9_6.alma.1.tuxcare.els2.noarch", "Rocky Linux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1766501126" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.6:elfutils-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-debuginfod-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-default-yama-scope-0:0.192-6.el9_6.alma.1.tuxcare.els2.noarch", "AlmaLinux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-debuginfod-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-default-yama-scope-0:0.192-6.el9_6.alma.1.tuxcare.els2.noarch", "Rocky Linux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-1376", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "description", "text": "A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to fix this issue.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.6:elfutils-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-debuginfod-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-default-yama-scope-0:0.192-6.el9_6.alma.1.tuxcare.els2.noarch", "AlmaLinux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-debuginfod-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-default-yama-scope-0:0.192-6.el9_6.alma.1.tuxcare.els2.noarch", "Rocky Linux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-1376" }, { "category": "external", "summary": "https://sourceware.org/bugzilla/attachment.cgi?id=15940", "url": "https://sourceware.org/bugzilla/attachment.cgi?id=15940" }, { "category": "external", "summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=32672", "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=32672" }, { "category": "external", "summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=32672#c3", "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=32672#c3" }, { "category": "external", "summary": "https://vuldb.com/?ctiid.295984", "url": "https://vuldb.com/?ctiid.295984" }, { "category": "external", "summary": "https://vuldb.com/?id.295984", "url": "https://vuldb.com/?id.295984" }, { "category": "external", "summary": "https://vuldb.com/?submit.497538", "url": "https://vuldb.com/?submit.497538" }, { "category": "external", "summary": "https://www.gnu.org/", "url": "https://www.gnu.org/" } ], "release_date": "2025-02-17T05:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-12-23T14:45:28.076513Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1766501126", "product_ids": [ "AlmaLinux-9.6:elfutils-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-debuginfod-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-default-yama-scope-0:0.192-6.el9_6.alma.1.tuxcare.els2.noarch", "AlmaLinux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-debuginfod-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-default-yama-scope-0:0.192-6.el9_6.alma.1.tuxcare.els2.noarch", "Rocky Linux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1766501126" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.6:elfutils-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-debuginfod-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-default-yama-scope-0:0.192-6.el9_6.alma.1.tuxcare.els2.noarch", "AlmaLinux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-debuginfod-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-default-yama-scope-0:0.192-6.el9_6.alma.1.tuxcare.els2.noarch", "Rocky Linux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-1377", "cwe": { "id": "CWE-404", "name": "Improper Resource Shutdown or Release" }, "notes": [ { "category": "description", "text": "A vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192. This issue affects the function gelf_getsymshndx of the file strip.c of the component eu-strip. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is fbf1df9ca286de3323ae541973b08449f8d03aba. It is recommended to apply a patch to fix this issue.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.6:elfutils-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-debuginfod-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-default-yama-scope-0:0.192-6.el9_6.alma.1.tuxcare.els2.noarch", "AlmaLinux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-debuginfod-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-default-yama-scope-0:0.192-6.el9_6.alma.1.tuxcare.els2.noarch", "Rocky Linux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-1377" }, { "category": "external", "summary": "https://sourceware.org/bugzilla/attachment.cgi?id=15941", "url": "https://sourceware.org/bugzilla/attachment.cgi?id=15941" }, { "category": "external", "summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=32673", "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=32673" }, { "category": "external", "summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=32673#c2", "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=32673#c2" }, { "category": "external", "summary": "https://vuldb.com/?ctiid.295985", "url": "https://vuldb.com/?ctiid.295985" }, { "category": "external", "summary": "https://vuldb.com/?id.295985", "url": "https://vuldb.com/?id.295985" }, { "category": "external", "summary": "https://vuldb.com/?submit.497539", "url": "https://vuldb.com/?submit.497539" }, { "category": "external", "summary": "https://www.gnu.org/", "url": "https://www.gnu.org/" } ], "release_date": "2025-02-17T05:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-12-23T14:45:28.076513Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1766501126", "product_ids": [ "AlmaLinux-9.6:elfutils-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-debuginfod-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-default-yama-scope-0:0.192-6.el9_6.alma.1.tuxcare.els2.noarch", "AlmaLinux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-debuginfod-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-default-yama-scope-0:0.192-6.el9_6.alma.1.tuxcare.els2.noarch", "Rocky Linux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1766501126" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.6:elfutils-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-debuginfod-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-default-yama-scope-0:0.192-6.el9_6.alma.1.tuxcare.els2.noarch", "AlmaLinux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "AlmaLinux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "AlmaLinux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-debuginfod-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-debuginfod-client-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-debuginfod-client-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-default-yama-scope-0:0.192-6.el9_6.alma.1.tuxcare.els2.noarch", "Rocky Linux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-libelf-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-libelf-devel-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64", "Rocky Linux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.i686", "Rocky Linux-9.6:elfutils-libs-0:0.192-6.el9_6.alma.1.tuxcare.els2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] } ] }