This Red Hat security advisory (RHSA-2026:29986) announces an update to Red Hat Hardened Images RPMs, specifically the jq package versions 1.8.2-0.1.hum1 for aarch64 and x86_64. The update addresses multiple vulnerabilities identified by nine CVEs, including CVE-2026-40612. The advisory is a bug fix and enhancement update without detailed technical descriptions of the vulnerabilities. No known exploits in the wild are reported. The vendor advisory references updated RPM packages but does not explicitly confirm patch availability or remediation status beyond the update. The advisory covers various CWEs such as improper control of resource consumption, integer overflow, and out-of-bounds write.

The advisory addresses multiple vulnerabilities in the jq package within Red Hat Hardened Images, which could potentially affect the security and stability of systems using these images. However, no known exploits in the wild have been reported. The impact is considered medium severity, indicating moderate risk to affected systems if unpatched.

Red Hat has released updated RPM packages (jq-1.8.2-0.1.hum1) for aarch64 and x86_64 architectures as part of this advisory. Applying these updates will address the vulnerabilities. Users should follow Red Hat's official update procedures as detailed at https://images.redhat.com/. Patch status is effectively confirmed by the availability of updated RPMs. No additional mitigation steps are indicated by the vendor advisory.