The advisory covers a bug fix and enhancement update for Red Hat Hardened Images RPMs, specifically including grafana12.4 version 12.4.10-0.2.hum1 for aarch64 and x86_64 architectures. One notable vulnerability fixed is CVE-2026-84961, which affects the undici BalancedPool component by silently discarding custom TLS certificate validation functions, allowing remote attackers to bypass certificate validation. This flaw can cause the product to accept malicious or spoofed certificates, undermining the integrity and authentication of secure connections. The update addresses this and multiple other CVEs listed in the advisory.

The primary impact is the potential for remote attackers to bypass TLS certificate validation, which can lead to accepting untrusted or malicious certificates. This compromises the integrity and authentication of secure communications, potentially allowing attackers to impersonate trusted entities or intercept sensitive data. The vulnerability affects the Red Hat Hardened Images RPMs, including grafana12.4, and is rated as high severity by Red Hat.

A fix is available via the updated Red Hat Hardened Images RPMs, including grafana12.4-12.4.10-0.2.hum1 packages for aarch64 and x86_64. Users should apply these updates as provided by Red Hat. For detailed instructions, refer to the Red Hat advisory at https://images.redhat.com/. No additional mitigations are specified by the vendor beyond applying the update.