Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Fixed packages 4

Vulnerabilities 4

• High 7.8
  CVE-2026-6846

  Binutils: binutils: arbitrary code execution via malformed xcoff object file processing

  A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object File Format) object file during linking. A local attacker could trick a user into processing this malicious file, which…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Wolfi
  Apr 22, 2026
• Medium 6.1
  CVE-2026-3441

  Binutils: gnu binutils: information disclosure via specially crafted xcoff object file

  A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an out-of-bounds read in the bfd linker, allows an attacker to gain access to sensitive information. By convincing a user to process a specially crafted XCOFF object…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Wolfi
  Mar 15, 2026
• Medium 6.1
  CVE-2026-3442

  Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker

  A flaw was found in GNU Binutils. This vulnerability, a heap-based buffer overflow, specifically an out-of-bounds read, exists in the bfd linker component. An attacker could exploit this by convincing a user to process a specially crafted malicious XCOFF obje…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Wolfi
  Mar 15, 2026
• Medium 6.1
  CVE-2026-4647

  Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library

  A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs when processing specially crafted XCOFF object files, where a relocation type value is not properly vali…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Wolfi
  Mar 23, 2026

References

• report
  https://access.redhat.com/security/cve/CVE-2026-3441
• report
  https://access.redhat.com/security/cve/CVE-2026-3442
• report
  https://access.redhat.com/security/cve/CVE-2026-4647
• report
  https://access.redhat.com/security/cve/CVE-2026-6846
• article
  https://access.redhat.com/security/updates/classification/
• article
  https://images.redhat.com/
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_33527.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2443826
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-3441
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-3441
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2443828
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-3442
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-3442
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2450302
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-4647
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-4647
• article
  https://sourceware.org/bugzilla/show_bug.cgi?id=33919
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2460006
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-6846
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-6846