binutils.advisories.yaml

schema-version: 2.0.2

package:
  name: binutils

advisories:
  - id: CGA-24mm-hr8r-vvp5
    aliases:
      - CVE-2022-38126
      - GHSA-mc5c-3hv5-5hjw
    events:
      - timestamp: 2022-09-16T16:42:40Z
        type: false-positive-determination
        data:
          type: vulnerable-code-version-not-used

  - id: CGA-2g36-84g3-35r2
    aliases:
      - CVE-2023-1972
      - GHSA-gxpx-hfgx-m75g
    events:
      - timestamp: 2023-05-27T12:32:23Z
        type: detection
        data:
          type: manual
      - timestamp: 2023-05-27T12:46:17Z
        type: fixed
        data:
          fixed-version: 2.40-r3

  - id: CGA-966m-f429-q5jc
    aliases:
      - CVE-2022-38128
      - GHSA-p6mj-rqhq-7523
    events:
      - timestamp: 2022-10-11T20:03:51Z
        type: fixed
        data:
          fixed-version: 2.39-r3

  - id: CGA-ggw5-6vrf-vmqr
    aliases:
      - CVE-2022-38533
      - GHSA-7v55-wrg9-5rfp
    events:
      - timestamp: 2022-09-16T16:42:40Z
        type: fixed
        data:
          fixed-version: 2.39-r2

  - id: CGA-gxcj-jj66-mxg7
    aliases:
      - CVE-2025-1153
      - GHSA-3frg-24qp-xxv2
    events:
      - timestamp: 2025-03-04T07:04:02Z
        type: detection
        data:
          type: scan/v1
          data:
            subpackageName: binutils
            componentID: acd04e3b0bbe8455
            componentName: binutils-gold
            componentVersion: 2.44-r0
            componentType: apk
            componentLocation: /.PKGINFO
            scanner: grype

  - id: CGA-x8jg-r778-x54g
    aliases:
      - CVE-2023-1579
      - GHSA-7p63-jgg6-rgpv
    events:
      - timestamp: 2023-04-12T19:06:15Z
        type: detection
        data:
          type: manual
      - timestamp: 2023-04-12T19:46:39Z
        type: fixed
        data:
          fixed-version: 2.40-r0