Back Linuxsecurity

Fedora 42 Critical CVE-2026-4647 Out-Of

Linuxsecurity •LinuxSecurity Advisories • April 1, 2026

Insight is a tight graphical user interface to GDB written in Tcl/Tk. It provides a comprehensive interface that enables users to harness most of GDB's power. It's also probably the only up-to-date UI for the latest GDB version. Update Information : Fix CVE-2026-4647.

Insight is a tight graphical user interface to GDB written in Tcl/Tk.

It provides a comprehensive interface that enables users to harness

most of GDB's power. It's also probably the only up-to-date UI for

the latest GDB version.

* Mon Mar 23 2026 Patrick Monnerat 18.0.50.20260306-2 - Patch "cve-2026-4647" to fix CVE-2026-4647. - Always use Tcl/Tk version 9.

[ 1 ] Bug #2450318 - CVE-2026-4647 insight: Out-of-Bounds Read in XCOFF Relocation Processing in GNU Binutils BFD Library [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-62cea4650e' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical CVE-2026-4647 Patch Released for Fedora Insight On March 23, 2026, a critical vulnerability (CVE-2026-4647) was published affecting the Insight graphical user interface for GDB, which is built using Tcl/Tk. The vulnerability involves an out-of-bounds read in the XCOFF relocation processing within the GNU Binutils BFD library. Users of Fedora systems are urged to update their installations to mitigate potential exploitation of this vulnerability. The patch was released by Patrick Monnerat as part of the update to version 18.0.50.20260306-2. The vulnerability could allow attackers to exploit the Insight tool, potentially leading to unauthorized access or system compromise. Users can install the patch using the 'dnf' update program with the advisory command provided. This vulnerability is particularly concerning due to its potential impact on systems utilizing the affected software. As of April 1, 2026, users are advised to ensure their systems are updated to the latest version to protect against this threat. 2 sources 70

Extracted Entities

CVEs (1)

CVE-2026-4647