Red Hat issued a security advisory (RHSA-2026:7098) for Red Hat Hardened Images RPMs that includes fixes and enhancements addressing 25 CVEs, including CVE-2025-11081 and CVE-2025-69645. The latter is a denial of service vulnerability in the binutils objdump utility triggered by specially crafted DWARF debug information causing a logic error and crash. The advisory does not specify explicit patch versions or detailed remediation steps but references the Red Hat Hardened Images update. Red Hat notes that mitigation options for some issues, such as CVE-2025-69645, are limited or do not meet their criteria for deployment. No known active exploitation is reported. The advisory includes multiple CWE categories indicating issues like out-of-bounds reads, information exposure, and memory corruption.

The vulnerabilities addressed include denial of service conditions and potentially other security issues as indicated by the CWE list. The denial of service in objdump can cause utility crashes when processing malicious binaries locally. No known active exploitation has been reported. The impact is considered medium severity by Red Hat, reflecting limited but notable risk primarily to local users or processes handling malformed binaries.

Red Hat has released an update for Red Hat Hardened Images RPMs that includes fixes and enhancements for these vulnerabilities. Users should apply the update as per Red Hat's instructions available at https://images.redhat.com/. For CVE-2025-69645, no effective mitigation other than applying updates is currently available or meets Red Hat's criteria. Customers are advised to upgrade to the updated RPMs to address these issues. No additional mitigations are specified in the advisory.