1. Forum
  2. Usenet
  3. LINUX.GENTOO.ANNOUNCE

  • [gentoo-announce] [ GLSA 202309-07 ] Binwalk: Multiple Vulnerabilities

    From glsamaker@gentoo.org@21:1/5 to All on Sun Sep 17 08:40:02 2023
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Gentoo Linux Security Advisory GLSA 202309-07
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    https://security.gentoo.org/
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

    Severity: Normal
    Title: Binwalk: Multiple Vulnerabilities
    Date: September 17, 2023
    Bugs: #820614, #903652
    ID: 202309-07

    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

    Synopsis
    ========

    Multiple vulnerabilities have been discovered in Binwalk, the worst of
    which could result in remote code execution.

    Background
    ==========

    Binwalk is a tool for identifying files embedded inside firmware images.

    Affected packages
    =================

    Package Vulnerable Unaffected
    ---------------- ------------ ------------
    app-misc/binwalk < 2.3.4 >= 2.3.4

    Description
    ===========

    Multiple vulnerabilities have been discovered in Binwalk. Please review
    the CVE identifiers referenced below for details.

    Impact
    ======

    Please review the referenced CVE identifiers for details.

    Workaround
    ==========

    There is no known workaround at this time.

    Resolution
    ==========

    All Binwalk users should upgrade to the latest version:

    # emerge --sync
    # emerge --ask --oneshot --verbose ">=app-misc/binwalk-2.3.4"

    References
    ==========

    [ 1 ] CVE-2022-4510
    https://nvd.nist.gov/vuln/detail/CVE-2022-4510

    Availability
    ============

    This GLSA and any updates to it are available for viewing at
    the Gentoo Security Website:

    https://security.gentoo.org/glsa/202309-07

    Concerns?
    =========

    Security is a primary focus of Gentoo Linux and ensuring the
    confidentiality and security of our users' machines is of utmost
    importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.

    License
    =======

    Copyright 2023 Gentoo Foundation, Inc; referenced text
    belongs to its owner(s).

    The contents of this document are licensed under the
    Creative Commons - Attribution / Share Alike license.

    https://creativecommons.org/licenses/by-sa/2.5
    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEpqTA6ABLMxh/aChGFMQkOaVy+9kFAmUGnW8ACgkQFMQkOaVy +9mPyA/9GST/yiTzuBPq/V2VPH2IMeWaOrblNXUe65s+kPZ/tyqvTrrsqM/1/o/p WPMNAo4bL6OY63eMmSgWyO0zNzgIe828R3u8rP+7RZ9zGQVB/4DvpPltYFIJn4SV 9UIgEBjRJT3QrqbAFg9k/V+xPY6HYp1emKRjk4a3qLDsc6DUHWeMRbxRcX7xQ+JS DXTZW8J9tttBGzSb15MpRaLQvN0HKWTnqxhCh2UmCxEeL/dmLYPRmPVaMI+aUXsr Y8nTHJKM7AHBpG6Qgf/unghsbTQ0jhSBZgsBRmdqW/rO4Dp6Y7hWAtsGBd6/hcRi PGD/bFUSxP8BZMniCMdTNi8tUVLlOZhrM0AkR7jB/zvQ2Em8yhIXvpuS/gFSWn4u l3tSu2N9HuBvOFxCm5Gq3fmG4+sSXh/EBLbjRmXq2Tb2J0fijlz1p7RfiGO6m/I+ EHw+rKr2OZlL98ptLgGTX38dTpGUqMwB60/rBFMc4GenHp1UoKom5h5EGlREKdm2 OsUvryqUPnSUxQwFP1JhjSuKWDJsGDvWAK0aJK5z4iSyRjk0/QBqKKxAAP4nGJ7s APlC8yiETB7I4dkFVHNdU9w7wh6ZI7sjGl9Figo/wXLToXMjO4fT6dbKOhsUi5hN l1kLlb0j/ppWOfI5BpFwPZz2kzy+Gbn2WkBfKyEtjQDJMi7NCmw=
    =e27H
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)