<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 03 Oct 2026 13:59:18 +0000</lastBuildDate>
    <item>
      <title>fkie_cve-2026-90830</title>
      <link>https://vulnerability.circl.lu/vuln/fkie_cve-2026-90830</link>
      <description>&lt;p&gt;A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_section of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through a bug report but has not responded yet.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_section of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through a bug report but has not responded yet.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/fkie_cve-2026-90830</guid>
    </item>
    <item>
      <title>GHSA-4xpf-8h39-fxrf</title>
      <link>https://vulnerability.circl.lu/vuln/ghsa-4xpf-8h39-fxrf</link>
      <description>&lt;p&gt;A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_section of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through a bug report but has not responded yet.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_section of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through a bug report but has not responded yet.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/ghsa-4xpf-8h39-fxrf</guid>
    </item>
    <item>
      <title>RHSA-2026:47171 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update</title>
      <link>https://vulnerability.circl.lu/vuln/rhsa-2026:47171</link>
      <description>&lt;p&gt;binutils: GNU Binutils: Heap-buffer-overflow in linker leads to information disclosure and denial of service binutils: GNU Binutils ld: Buffer overflow in cache_bwrite via nbytes manipulation binutils: GNU Binutils: Denial of service via null pointer dereference in ld component binutils: GNU Binutils ld: Buffer Overflow via Malformed Relocation binutils: GNU Binutils: Buffer overflow in Eh Frame Section Handler can lead to denial of service binutils: GNU Binutils: Null pointer dereference via elf_orphan_compatible function binutils: GNU Binutils: Null pointer dereference via SHT_GROUP Section manipulation binutils: GNU Binutils: Local denial of service via null pointer dereference in Section Merge binutils: GNU Binutils: Memory corruption via local manipulation of ELF String Table&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;binutils: GNU Binutils: Heap-buffer-overflow in linker leads to information disclosure and denial of service binutils: GNU Binutils ld: Buffer overflow in cache_bwrite via nbytes manipulation binutils: GNU Binutils: Denial of service via null pointer dereference in ld component binutils: GNU Binutils ld: Buffer Overflow via Malformed Relocation binutils: GNU Binutils: Buffer overflow in Eh Frame Section Handler can lead to denial of service binutils: GNU Binutils: Null pointer dereference via elf_orphan_compatible function binutils: GNU Binutils: Null pointer dereference via SHT_GROUP Section manipulation binutils: GNU Binutils: Local denial of service via null pointer dereference in Section Merge binutils: GNU Binutils: Memory corruption via local manipulation of ELF String Table&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/rhsa-2026:47171</guid>
    </item>
    <item>
      <title>UBUNTU-CVE-2026-90830</title>
      <link>https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-90830</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:14.04:LTS: binutils, Ubuntu:Pro:16.04:LTS: binutils, Ubuntu:Pro:18.04:LTS: binutils, Ubuntu:Pro:20.04:LTS: binutils, Ubuntu:22.04:LTS: binutils, Ubuntu:24.04:LTS: binutils, Ubuntu:26.04:LTS: binutils&lt;/p&gt;
&lt;p&gt;A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_section of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through a bug report but has not responded yet.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:14.04:LTS: binutils, Ubuntu:Pro:16.04:LTS: binutils, Ubuntu:Pro:18.04:LTS: binutils, Ubuntu:Pro:20.04:LTS: binutils, Ubuntu:22.04:LTS: binutils, Ubuntu:24.04:LTS: binutils, Ubuntu:26.04:LTS: binutils&lt;/p&gt;
&lt;p&gt;A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_section of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through a bug report but has not responded yet.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-90830</guid>
    </item>
  </channel>
</rss>
