This Red Hat security advisory updates the Red Hat Hardened Images RPMs, including the grype package, to address four vulnerabilities identified by CVE-2026-44740, CVE-2026-47262, CVE-2026-53489, and CVE-2026-53492. The advisory does not provide detailed technical descriptions or CVSS scores for these vulnerabilities, nor does it specify fixed version numbers or explicit patch availability. The update is intended as a bug fix and enhancement, and no known exploitation has been reported. The affected products include Red Hat Hardened Images for aarch64 and x86_64 architectures. The vendor advisory references applying the update via https://images.redhat.com/.

The vulnerabilities addressed are classified as high severity but lack detailed impact descriptions or CVSS scores. The update aims to fix multiple security issues in the grype RPMs used in Red Hat Hardened Images. No known exploits in the wild have been reported, indicating that active exploitation is not currently observed. The impact potentially involves security weaknesses related to the CWEs listed (CWE-606, CWE-770, CWE-59, CWE-807), which relate to issues such as improper control of resource consumption, race conditions, path traversal, and authentication bypass, but specific impacts are not detailed in the advisory.

Red Hat has released an updated version of the grype RPM (version 0.115.0-0.1.hum1) as part of the Hardened Images RPMs update. Users of affected Red Hat Hardened Images should apply this update following Red Hat's official guidance at https://images.redhat.com/. Since this is an official fix, applying the update will mitigate the vulnerabilities. No additional mitigation steps are indicated or required according to the vendor advisory.