This Red Hat security advisory (RHSA-2026:15862) announces an update to Red Hat Hardened Images RPMs, specifically the trivy package version 0.69.3-1.2.hum1 for aarch64 and x86_64. The update addresses multiple vulnerabilities including CVE-2026-44432 and CVE-2026-45287. The advisory is categorized as a bug fix and enhancement update but does not provide detailed technical information about the vulnerabilities or their exploitation. No known exploits have been reported. The advisory references the updated RPMs as the solution but does not explicitly detail patch availability beyond this update.

The advisory indicates multiple vulnerabilities affecting Red Hat Hardened Images RPMs, including trivy, with a critical severity rating. However, no specific impact details or exploitation scenarios are provided. There are no known exploits in the wild at the time of the advisory. The vulnerabilities could potentially affect the security posture of systems using the affected RPMs, but the exact impact is not described.

An update to the Red Hat Hardened Images RPMs including trivy version 0.69.3-1.2.hum1 is available and should be applied to address the vulnerabilities. Refer to https://images.redhat.com/ for details on how to apply this update. Since this is an official Red Hat advisory with an update released, applying the provided update constitutes the official fix. No additional mitigation steps are specified in the advisory.