This Red Hat security advisory (RHSA-2026:7655) announces an update to Red Hat Hardened Images RPMs, specifically the yarnpkg package version 1.22.22-18.1.hum1 for aarch64 and x86_64. The update addresses multiple vulnerabilities identified by CVE identifiers including CVE-2026-2950 and six additional CVEs. The advisory does not provide detailed vulnerability descriptions or CVSS scores. It references Red Hat's official update channels for applying the update. No known active exploitation is reported. The advisory covers Red Hat Hardened Images and related RPMs but does not specify affected software versions beyond the updated RPM version.

The advisory is rated as high severity and addresses multiple vulnerabilities in the yarnpkg package within Red Hat Hardened Images. The exact impact of each vulnerability is not detailed in the provided information. No known exploits in the wild have been reported, indicating limited or no active exploitation at this time. The update aims to fix security issues that could potentially affect the integrity or security of the affected packages.

The advisory references an update including the yarnpkg RPM version 1.22.22-18.1.hum1. Users of Red Hat Hardened Images should apply this update as per Red Hat's official guidance available at https://images.redhat.com/. No explicit patch links are provided in the advisory content, but the vendor's update channels should be used to obtain and apply the fix. Since this is an official Red Hat advisory, the update should be considered the official fix. There are no indications that no action is required or that the issue is already mitigated without update.