RHSA-2026:47171MediumCVSS 6.6

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published
July 28, 2026
Last Modified
September 21, 2026

🔗 CVE IDs covered (9)

📋 Description

CVE-2026-15003 — binutils: GNU Binutils: Heap-buffer-overflow in linker leads to information disclosure and denial of service CVE-2026-90801 — binutils: GNU Binutils ld: Buffer overflow in cache_bwrite via nbytes manipulation CVE-2026-90802 — binutils: GNU Binutils: Denial of service via null pointer dereference in ld component CVE-2026-90803 — binutils: GNU Binutils ld: Buffer Overflow via Malformed Relocation CVE-2026-90804 — binutils: GNU Binutils: Buffer overflow in Eh Frame Section Handler can lead to denial of service CVE-2026-90828 — binutils: GNU Binutils: Null pointer dereference via elf_orphan_compatible function CVE-2026-90829 — binutils: GNU Binutils: Null pointer dereference via SHT_GROUP Section manipulation CVE-2026-90830 — binutils: GNU Binutils: Local denial of service via null pointer dereference in Section Merge CVE-2026-90831 — binutils: GNU Binutils: Memory corruption via local manipulation of ELF String Table

🎯 Affected products10

  • Red Hat Hardened Images
  • binutils-0:2.46.1-1.1.hum1@aarch64 as a component of Red Hat Hardened Images
  • binutils-0:2.46.1-1.1.hum1@src as a component of Red Hat Hardened Images
  • binutils-0:2.46.1-1.1.hum1@x86_64 as a component of Red Hat Hardened Images
  • binutils-devel-0:2.46.1-1.1.hum1@aarch64 as a component of Red Hat Hardened Images
  • binutils-devel-0:2.46.1-1.1.hum1@x86_64 as a component of Red Hat Hardened Images
  • binutils-gold-0:2.46.1-1.1.hum1@aarch64 as a component of Red Hat Hardened Images
  • binutils-gold-0:2.46.1-1.1.hum1@x86_64 as a component of Red Hat Hardened Images
  • binutils-gprofng-0:2.46.1-1.1.hum1@aarch64 as a component of Red Hat Hardened Images
  • binutils-gprofng-0:2.46.1-1.1.hum1@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (13)