Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Fixed packages 4

Vulnerabilities 25

• High 7.5
  CVE-2025-66862

  A buffer overflow vulnerability in function gnu_special in file cplus-dem.c in BinUtils 2.26 allows attackers to cause …

  binutils binutils Debian Ubuntu
  Dec 29, 2025
• High 7.5
  CVE-2025-66863

  An issue was discovered in function d_discriminator in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a …

  binutils binutils Debian Ubuntu
  Dec 29, 2025
• High 7.5
  CVE-2025-66865

  An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause…

  binutils binutils Debian Ubuntu
  Dec 29, 2025
• High 7.5
  CVE-2025-69650

  GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a crafted ELF binary with malformed…

  binutils binutils binutils binutils-gold Debian Azure Linux Wolfi
  Mar 6, 2026
• Medium 6.2
  CVE-2025-69647

  GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malfo…

  binutils binutils binutils Debian Ubuntu Azure Linux
  Mar 9, 2026
• Medium 6.2
  CVE-2025-69648

  GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malfo…

  binutils binutils binutils Debian Ubuntu Azure Linux
  Mar 9, 2026
• Medium 6.2
  CVE-2025-69652

  GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF …

  binutils binutils binutils binutils Debian Ubuntu Azure Linux Wolfi
  Mar 6, 2026
• Medium 5.5
  CVE-2025-66864

  An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause…

  binutils binutils Debian Ubuntu
  Dec 29, 2025
• Medium 5.5
  CVE-2025-66866

  An issue was discovered in function d_abi_tags in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denia…

  binutils binutils Debian Ubuntu
  Dec 29, 2025
• Medium 5.5
  CVE-2025-69645

  Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug…

  binutils binutils binutils Debian Ubuntu Azure Linux
  Mar 6, 2026
• Medium 5.5
  CVE-2025-69646

  Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug…

  binutils binutils binutils Debian Ubuntu Azure Linux
  Mar 6, 2026
• Medium 5.5
  CVE-2025-69649

  GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary w…

  binutils binutils binutils binutils Debian Ubuntu Azure Linux Wolfi
  Mar 6, 2026
• Medium 5.5
  CVE-2025-69651

  GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an invalid pointer free when processing a crafted…

  binutils binutils binutils binutils Debian Ubuntu Azure Linux Wolfi
  Mar 6, 2026
• Medium 5.3
  CVE-2025-11082

  GNU Binutils Linker elf-eh-frame.c _bfd_elf_parse_eh_frame heap-based overflow

  A flaw has been found in GNU Binutils 2.45. Impacted is the function _bfd_elf_parse_eh_frame of the file bfd/elf-eh-frame.c of the component Linker. Executing manipulation can lead to heap-based buffer overflow. The attack is restricted to local execution. Th…

  GNU Binutils binutils binutils Debian Ubuntu Azure Linux Wolfi
  Sep 27, 2025
• Medium 5.3
  CVE-2025-11083

  GNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflow

  A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exp…

  GNU Binutils binutils binutils Debian Ubuntu Azure Linux Wolfi
  Sep 27, 2025
• Medium 5.0
  CVE-2025-69644

  An issue was discovered in Binutils before 2.46. The objdump contains a denial-of-service vulnerability when processing…

  binutils binutils binutils Debian Ubuntu Azure Linux
  Mar 6, 2026
• Low 3.3
  CVE-2025-11081

  GNU Binutils objdump.c dump_dwarf_section out-of-bounds

  A vulnerability was detected in GNU Binutils 2.45. This issue affects the function dump_dwarf_section of the file binutils/objdump.c. Performing manipulation results in out-of-bounds read. The attack is only possible with local access. The exploit is now publ…

  GNU Binutils binutils binutils Debian Ubuntu Wolfi
  Sep 27, 2025
• Low 3.3
  CVE-2025-11412

  GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds

  A vulnerability has been found in GNU Binutils 2.45. This impacts the function bfd_elf_gc_record_vtentry of the file bfd/elflink.c of the component Linker. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exp…

  GNU Binutils binutils binutils Debian Ubuntu Azure Linux Wolfi
  Oct 7, 2025
• Low 3.3
  CVE-2025-11413

  GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds

  A vulnerability was found in GNU Binutils 2.45. Affected is the function elf_link_add_object_symbols of the file bfd/elflink.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has …

  GNU Binutils binutils binutils Debian Ubuntu Wolfi
  Oct 7, 2025
• Low 3.3
  CVE-2025-11414

  GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds

  A vulnerability was determined in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_hash_entry of the file bfd/elflink.c of the component Linker. This manipulation causes out-of-bounds read. The attack can only be executed locally. Th…

  GNU Binutils binutils binutils Debian Ubuntu Azure Linux Wolfi
  Oct 7, 2025
• Low 3.3
  CVE-2025-11494

  GNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-bounds

  A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x86_elf_late_size_sections of the file bfd/elfxx-x86.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploi…

  GNU Binutils binutils binutils Debian Ubuntu Wolfi
  Oct 8, 2025
• Low 3.3
  CVE-2025-11495

  GNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflow

  A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elf_x86_64_relocate_section of the file elf64-x86-64.c of the component Linker. This manipulation causes heap-based buffer overflow. The attack can only be executed loca…

  GNU Binutils binutils binutils Debian Ubuntu Wolfi
  Oct 8, 2025
• Low 3.3
  CVE-2025-11839

  GNU Binutils prdbg.c tg_tag_type return value

  A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing a manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the pu…

  GNU Binutils binutils binutils Debian Ubuntu Azure Linux Wolfi
  Oct 16, 2025
• Low 3.3
  CVE-2025-11840

  GNU Binutils ldmisc.c vfinfo out-of-bounds

  A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing a manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the…

  GNU Binutils binutils binutils Debian Ubuntu Wolfi
  Oct 16, 2025
• Low 2.5
  CVE-2025-66861

  An issue was discovered in function d_unqualified_name in file cp-demangle.c in BinUtils 2.26 allowing attackers to cau…

  binutils binutils Debian Ubuntu
  Dec 29, 2025

References

• article
  https://images.redhat.com/
• report
  https://access.redhat.com/security/cve/CVE-2025-69645
• article
  https://access.redhat.com/security/updates/classification/
• report
  https://access.redhat.com/security/cve/CVE-2025-11083
• report
  https://access.redhat.com/security/cve/CVE-2025-11082
• report
  https://access.redhat.com/security/cve/CVE-2025-11081
• report
  https://access.redhat.com/security/cve/CVE-2025-11840
• report
  https://access.redhat.com/security/cve/CVE-2025-11839
• report
  https://access.redhat.com/security/cve/CVE-2025-11495
• report
  https://access.redhat.com/security/cve/CVE-2025-11494
• report
  https://access.redhat.com/security/cve/CVE-2025-11414
• report
  https://access.redhat.com/security/cve/CVE-2025-11413
• report
  https://access.redhat.com/security/cve/CVE-2025-11412
• report
  https://access.redhat.com/security/cve/CVE-2025-66866
• report
  https://access.redhat.com/security/cve/CVE-2025-66864
• report
  https://access.redhat.com/security/cve/CVE-2025-66862
• report
  https://access.redhat.com/security/cve/CVE-2025-66863
• report
  https://access.redhat.com/security/cve/CVE-2025-66861
• report
  https://access.redhat.com/security/cve/CVE-2025-66865
• report
  https://access.redhat.com/security/cve/CVE-2025-69648
• report
  https://access.redhat.com/security/cve/CVE-2025-69647
• report
  https://access.redhat.com/security/cve/CVE-2025-69646
• report
  https://access.redhat.com/security/cve/CVE-2025-69650
• report
  https://access.redhat.com/security/cve/CVE-2025-69652
• report
  https://access.redhat.com/security/cve/CVE-2025-69651
• report
  https://access.redhat.com/security/cve/CVE-2025-69649
• report
  https://access.redhat.com/security/cve/CVE-2025-69644
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7098.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2399944
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-11081
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-11081
• article
  https://github.com/user-attachments/files/20623354/hdf5_crash_3.txt
• article
  https://sourceware.org/bugzilla/show_bug.cgi?id=33406
• article
  https://sourceware.org/bugzilla/show_bug.cgi?id=33406#c2
• article
  https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=f87a66db645caf8cc0e6fc87b0c28c78a38af59b
• article
  https://vuldb.com/?ctiid.326122
• article
  https://vuldb.com/?id.326122
• article
  https://vuldb.com/?submit.661275
• article
  https://www.gnu.org/