Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

{
  "id": "9f10904c45b7e824c58f230978088781127ba8b694bf95e99016ad1ccfe4ded2",
  "url": "https://osv.dev/vulnerability/RHSA-2026%3A7098",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
    "summary": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
    "evidence": "osv:RHSA-2026:7098",
    "products": [
      {
        "name": {
          "value": "binutils",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:2.45.1-5.hum1",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "binutils-devel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:2.45.1-5.hum1",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "binutils-gold",
          "evidence": "/affected/2/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:2.45.1-5.hum1",
            "evidence": "/affected/2/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "binutils-gprofng",
          "evidence": "/affected/3/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0:2.45.1-5.hum1",
            "evidence": "/affected/3/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "medium",
    "structured": {
      "id": "RHSA-2026:7098",
      "aliases": [
        "RHSA-2026:7098"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:2.45.1-5.hum1"
                }
              ]
            }
          ],
          "package": {
            "name": "binutils",
            "purl": "pkg:rpm/redhat/binutils",
            "ecosystem": "Red Hat:hummingbird:1"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:7098.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:2.45.1-5.hum1"
                }
              ]
            }
          ],
          "package": {
            "name": "binutils-devel",
            "purl": "pkg:rpm/redhat/binutils-devel",
            "ecosystem": "Red Hat:hummingbird:1"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:7098.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:2.45.1-5.hum1"
                }
              ]
            }
          ],
          "package": {
            "name": "binutils-gold",
            "purl": "pkg:rpm/redhat/binutils-gold",
            "ecosystem": "Red Hat:hummingbird:1"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:7098.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0:2.45.1-5.hum1"
                }
              ]
            }
          ],
          "package": {
            "name": "binutils-gprofng",
            "purl": "pkg:rpm/redhat/binutils-gprofng",
            "ecosystem": "Red Hat:hummingbird:1"
          },
          "database_specific": {
            "source": "https://security.access.redhat.com/data/osv/RHSA-2026:7098.json"
          }
        }
      ],
      "modified": "2026-10-15T10:25:31Z",
      "provider": "osv",
      "upstream": [
        "CVE-2025-11081",
        "CVE-2025-11082",
        "CVE-2025-11083",
        "CVE-2025-11412",
        "CVE-2025-11413",
        "CVE-2025-11414",
        "CVE-2025-11494",
        "CVE-2025-11495",
        "CVE-2025-11839",
        "CVE-2025-11840",
        "CVE-2025-66861",
        "CVE-2025-66862",
        "CVE-2025-66863",
        "CVE-2025-66864",
        "CVE-2025-66865",
        "CVE-2025-66866",
        "CVE-2025-69644",
        "CVE-2025-69645",
        "CVE-2025-69646",
        "CVE-2025-69647",
        "CVE-2025-69648",
        "CVE-2025-69649",
        "CVE-2025-69650",
        "CVE-2025-69651",
        "CVE-2025-69652"
      ],
      "references": [
        "https://access.redhat.com/errata/RHSA-2026:7098",
        "https://images.redhat.com/",
        "https://access.redhat.com/security/cve/CVE-2025-69645",
        "https://access.redhat.com/security/updates/classification/",
        "https://access.redhat.com/security/cve/CVE-2025-11083",
        "https://access.redhat.com/security/cve/CVE-2025-11082",
        "https://access.redhat.com/security/cve/CVE-2025-11081",
        "https://access.redhat.com/security/cve/CVE-2025-11840",
        "https://access.redhat.com/security/cve/CVE-2025-11839",
        "https://access.redhat.com/security/cve/CVE-2025-11495",
        "https://access.redhat.com/security/cve/CVE-2025-11494",
        "https://access.redhat.com/security/cve/CVE-2025-11414",
        "https://access.redhat.com/security/cve/CVE-2025-11413",
        "https://access.redhat.com/security/cve/CVE-2025-11412",
        "https://access.redhat.com/security/cve/CVE-2025-66866",
        "https://access.redhat.com/security/cve/CVE-2025-66864",
        "https://access.redhat.com/security/cve/CVE-2025-66862",
        "https://access.redhat.com/security/cve/CVE-2025-66863",
        "https://access.redhat.com/security/cve/CVE-2025-66861",
        "https://access.redhat.com/security/cve/CVE-2025-66865",
        "https://access.redhat.com/security/cve/CVE-2025-69648",
        "https://access.redhat.com/security/cve/CVE-2025-69647",
        "https://access.redhat.com/security/cve/CVE-2025-69646",
        "https://access.redhat.com/security/cve/CVE-2025-69650",
        "https://access.redhat.com/security/cve/CVE-2025-69652",
        "https://access.redhat.com/security/cve/CVE-2025-69651",
        "https://access.redhat.com/security/cve/CVE-2025-69649",
        "https://access.redhat.com/security/cve/CVE-2025-69644",
        "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7098.json",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2399944",
        "https://www.cve.org/CVERecord?id=CVE-2025-11081",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-11081",
        "https://github.com/user-attachments/files/20623354/hdf5_crash_3.txt",
        "https://sourceware.org/bugzilla/show_bug.cgi?id=33406",
        "https://sourceware.org/bugzilla/show_bug.cgi?id=33406#c2",
        "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=f87a66db645caf8cc0e6fc87b0c28c78a38af59b",
        "https://vuldb.com/?ctiid.326122",
        "https://vuldb.com/?id.326122",
        "https://vuldb.com/?submit.661275",
        "https://www.gnu.org/",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2399943",
        "https://www.cve.org/CVERecord?id=CVE-2025-11082",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-11082",
        "https://sourceware.org/bugzilla/attachment.cgi?id=16358",
        "https://sourceware.org/bugzilla/show_bug.cgi?id=33464",
        "https://sourceware.org/bugzilla/show_bug.cgi?id=33464#c2",
        "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea1a0737c7692737a644af0486b71e4a392cbca8",
        "https://vuldb.com/?ctiid.326123",
        "https://vuldb.com/?id.326123",
        "https://vuldb.com/?submit.661276",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2399948",
        "https://www.cve.org/CVERecord?id=CVE-2025-11083",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-11083",
        "https://sourceware.org/bugzilla/attachment.cgi?id=16353",
        "https://sourceware.org/bugzilla/show_bug.cgi?id=33457",
        "https://sourceware.org/bugzilla/show_bug.cgi?id=33457#c1",
        "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=9ca499644a21ceb3f946d1c179c38a83be084490",
        "https://vuldb.com/?ctiid.326124",
        "https://vuldb.com/?id.326124",
        "https://vuldb.com/?submit.661277",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2402425",
        "https://www.cve.org/CVERecord?id=CVE-2025-11412",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-11412",
        "https://sourceware.org/bugzilla/show_bug.cgi?id=33452",
        "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=047435dd988a3975d40c6626a8f739a0b2e154bc",
        "https://vuldb.com/?id.327348",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2402423",
        "https://www.cve.org/CVERecord?id=CVE-2025-11413",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-11413",
        "https://sourceware.org/bugzilla/show_bug.cgi?id=33456",
        "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=72efdf166aa0ed72ecc69fc2349af6591a7a19c0",
        "https://vuldb.com/?id.327349",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2402424",
        "https://www.cve.org/CVERecord?id=CVE-2025-11414",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-11414",
        "https://sourceware.org/bugzilla/show_bug.cgi?id=33450",
        "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=aeaaa9af6359c8e394ce9cf24911fec4f4d23703",
        "https://vuldb.com/?id.327350",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2402559",
        "https://www.cve.org/CVERecord?id=CVE-2025-11494",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-11494",
        "https://sourceware.org/bugzilla/attachment.cgi?id=16389",
        "https://sourceware.org/bugzilla/show_bug.cgi?id=33499",
        "https://sourceware.org/bugzilla/show_bug.cgi?id=33499#c2",
        "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a",
        "https://vuldb.com/?ctiid.327619",
        "https://vuldb.com/?id.327619",
        "https://vuldb.com/?submit.668281",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2402584",
        "https://www.cve.org/CVERecord?id=CVE-2025-11495",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-11495",
        "https://sourceware.org/bugzilla/attachment.cgi?id=16393",
        "https://sourceware.org/bugzilla/show_bug.cgi?id=33502",
        "https://sourceware.org/bugzilla/show_bug.cgi?id=33502#c3",
        "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=6b21c8b2ecfef5c95142cbc2c32f185cb1c26ab0",
        "https://vuldb.com/?ctiid.327620",
        "https://vuldb.com/?id.327620",
        "https://vuldb.com/?submit.668290",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2404439",
        "https://www.cve.org/CVERecord?id=CVE-2025-11839",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-11839",
        "https://sourceware.org/bugzilla/attachment.cgi?id=16344",
        "https://sourceware.org/bugzilla/show_bug.cgi?id=33448",
        "https://vuldb.com/?ctiid.328774",
        "https://vuldb.com/?id.328774",
        "https://vuldb.com/?submit.661279",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2404481",
        "https://www.cve.org/CVERecord?id=CVE-2025-11840",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-11840",
        "https://sourceware.org/bugzilla/attachment.cgi?id=16351",
        "https://sourceware.org/bugzilla/attachment.cgi?id=16357",
        "https://sourceware.org/bugzilla/show_bug.cgi?id=33455",
        "https://vuldb.com/?ctiid.328775",
        "https://vuldb.com/?id.328775",
        "https://vuldb.com/?submit.661281",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2425823",
        "https://www.cve.org/CVERecord?id=CVE-2025-66861",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-66861",
        "https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash1.md",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2425825",
        "https://www.cve.org/CVERecord?id=CVE-2025-66862",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-66862",
        "https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash3.md",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2425824",
        "https://www.cve.org/CVERecord?id=CVE-2025-66863",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-66863",
        "https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash2.md",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2425827",
        "https://www.cve.org/CVERecord?id=CVE-2025-66864",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-66864",
        "https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash5.md",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2425822",
        "https://www.cve.org/CVERecord?id=CVE-2025-66865",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-66865",
        "https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash4.md",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2425830",
        "https://www.cve.org/CVERecord?id=CVE-2025-66866",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-66866",
        "https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash6.md",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2445263",
        "https://www.cve.org/CVERecord?id=CVE-2025-69644",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-69644",
        "https://sourceware.org/bugzilla/show_bug.cgi?id=33639",
        "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=455446bbdc8675f34808187de2bbad4682016ff7",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2445261",
        "https://www.cve.org/CVERecord?id=CVE-2025-69645",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-69645",
        "https://sourceware.org/bugzilla/show_bug.cgi?id=33637",
        "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=cdb728d4da6184631989b192f1022c219dea7677",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2445264",
        "https://www.cve.org/CVERecord?id=CVE-2025-69646",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-69646",
        "https://sourceware.org/bugzilla/show_bug.cgi?id=33638",
        "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=598704a00cbac5e85c2bedd363357b5bf6fcee33",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2445773",
        "https://www.cve.org/CVERecord?id=CVE-2025-69647",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-69647",
        "https://sourceware.org/bugzilla/show_bug.cgi?id=33640",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2445774",
        "https://www.cve.org/CVERecord?id=CVE-2025-69648",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-69648",
        "https://sourceware.org/bugzilla/show_bug.cgi?id=33641",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2445298",
        "https://www.cve.org/CVERecord?id=CVE-2025-69649",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-69649",
        "https://sourceware.org/bugzilla/show_bug.cgi?id=33697",
        "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=66a3492ce68e1ae45b2489bd9a815c39ea5d7f66",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2445293",
        "https://www.cve.org/CVERecord?id=CVE-2025-69650",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-69650",
        "https://sourceware.org/bugzilla/show_bug.cgi?id=33698",
        "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea4bc025abdba85a90e26e13f551c16a44bfa921",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2445299",
        "https://www.cve.org/CVERecord?id=CVE-2025-69651",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-69651",
        "https://sourceware.org/bugzilla/show_bug.cgi?id=33700",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2445296",
        "https://www.cve.org/CVERecord?id=CVE-2025-69652",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-69652",
        "https://sourceware.org/bugzilla/show_bug.cgi?id=33701",
        "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=44b79abd0fa12e7947252eb4c6e5d16ed6033e01"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2025-11081",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-11082",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-11083",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-11412",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-11413",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-11414",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-11494",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-11495",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-11839",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-11840",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-66861",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-66862",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-66863",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-66864",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-66865",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-66866",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-69644",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-69645",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-69646",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-69647",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-69648",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-69649",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-69650",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-69651",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-69652",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 331194,
  "published_at": "2026-04-18T10:06:19+00:00"
}