Skip to content
OpenAdvisories
Low RHSA-2026:67961 4 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Oct 20, 2026 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 binutils 0:2.46.1-1.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 binutils-devel 0:2.46.1-1.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 binutils-gold 0:2.46.1-1.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 binutils-gprofng 0:2.46.1-1.2.hum1

Vulnerabilities 4

  • Low 3.3
    CVE-2026-91779

    GNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_section_offset null pointer dereference

    A security flaw has been discovered in GNU Binutils 2.47. This affects the function _bfd_elf_eh_frame_section_offset of the file bfd/elf-eh-frame.c of the component Eh Frame Handler. Performing a manipulation results in null pointer dereference. The attack mu…

    GNU Binutils binutils binutils Debian Ubuntu Azure Linux Wolfi
  • Low 3.3
    CVE-2026-91780

    GNU Binutils elflink.c elf_link_add_object_symbols null pointer dereference

    A weakness has been identified in GNU Binutils 2.47. This impacts the function elf_link_add_object_symbols of the file bfd/elflink.c. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has been …

    GNU Binutils binutils binutils Debian Ubuntu Azure Linux Wolfi
  • Low 3.3
    CVE-2026-91781

    GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereference

    A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elf_x86_64_common_section_index of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs…

    GNU Binutils binutils binutils Debian Ubuntu Azure Linux Wolfi
  • Low 3.3
    CVE-2026-91782

    GNU Binutils Dynamic Relocation Allocation elfxx-x86.c elf_x86_allocate_dynrelocs null pointer dereference

    A vulnerability was detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_allocate_dynrelocs of the file bfd/elfxx-x86.c of the component Dynamic Relocation Allocation. The manipulation results in null pointer dereference. The …

    GNU Binutils binutils binutils Debian Ubuntu Wolfi

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-91781
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-91780
  • report
    https://access.redhat.com/security/cve/CVE-2026-91779
  • report
    https://access.redhat.com/security/cve/CVE-2026-91782
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67961.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2533619
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-91779
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-91779
  • article
    https://github.com/Ech06/CVE_submit/blob/main/bugzilla/issues/34446.md
  • article
    https://sourceware.org/bugzilla/show_bug.cgi?id=34446
  • article
    https://vuldb.com/cve/CVE-2026-91779
  • article
    https://vuldb.com/submit/933333
  • article
    https://vuldb.com/vuln/404050
  • article
    https://vuldb.com/vuln/404050/cti
  • article
    https://www.gnu.org/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2533623
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-91780
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-91780
  • article
    https://github.com/Ech06/CVE_submit/tree/main/bugzilla/pocs/34447
  • article
    https://sourceware.org/bugzilla/show_bug.cgi?id=34447
  • article
    https://vuldb.com/cve/CVE-2026-91780
  • article
    https://vuldb.com/submit/933334
  • article
    https://vuldb.com/vuln/404051
  • article
    https://vuldb.com/vuln/404051/cti
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2533630
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-91781
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-91781
  • article
    https://github.com/Ech06/CVE_submit/tree/main/bugzilla/pocs/34449
  • article
    https://sourceware.org/bugzilla/show_bug.cgi?id=34449
  • article
    https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=7322e9bc30cb282575a701c307851fd3d66fee68
  • article
    https://vuldb.com/cve/CVE-2026-91781
  • article
    https://vuldb.com/submit/933336
  • article
    https://vuldb.com/vuln/404052
  • article
    https://vuldb.com/vuln/404052/cti
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2536064
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-91782
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-91782