Skip to content
OpenAdvisories
Medium RHSA-2026:0481 1 CVE

Red Hat Security Advisory: binutils security update

Published Jan 14, 2026 · Updated Oct 15, 2026

Ecosystem: Red Hat

Fixed packages 18

ReleasePackageFixed in
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::appstream binutils-debuginfo 0:2.30-113.el8_6.4
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::appstream binutils-debugsource 0:2.30-113.el8_6.4
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::appstream binutils-devel 0:2.30-113.el8_6.4
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos binutils 0:2.30-113.el8_6.4
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos binutils-debuginfo 0:2.30-113.el8_6.4
Red Hat · RHEL 8.6 AUS rhel_aus:8.6::baseos binutils-debugsource 0:2.30-113.el8_6.4
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::appstream binutils-debuginfo 0:2.30-113.el8_6.4
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::appstream binutils-debugsource 0:2.30-113.el8_6.4
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::appstream binutils-devel 0:2.30-113.el8_6.4
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos binutils 0:2.30-113.el8_6.4
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos binutils-debuginfo 0:2.30-113.el8_6.4
Red Hat · RHEL 8.6 E4S rhel_e4s:8.6::baseos binutils-debugsource 0:2.30-113.el8_6.4
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::appstream binutils-debuginfo 0:2.30-113.el8_6.4
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::appstream binutils-debugsource 0:2.30-113.el8_6.4
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::appstream binutils-devel 0:2.30-113.el8_6.4
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos binutils 0:2.30-113.el8_6.4
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos binutils-debuginfo 0:2.30-113.el8_6.4
Red Hat · RHEL 8.6 TUS rhel_tus:8.6::baseos binutils-debugsource 0:2.30-113.el8_6.4

Vulnerabilities 1

  • Medium 5.3
    CVE-2025-11083

    GNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflow

    A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exp…

    GNU Binutils binutils binutils Debian Ubuntu Azure Linux Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2399948
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0481.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-11083
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-11083
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-11083
  • article
    https://sourceware.org/bugzilla/attachment.cgi?id=16353
  • article
    https://sourceware.org/bugzilla/show_bug.cgi?id=33457
  • article
    https://sourceware.org/bugzilla/show_bug.cgi?id=33457#c1
  • article
    https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=9ca499644a21ceb3f946d1c179c38a83be084490
  • article
    https://vuldb.com/?ctiid.326124
  • article
    https://vuldb.com/?id.326124
  • article
    https://vuldb.com/?submit.661277
  • article
    https://www.gnu.org/