Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

This security advisory from Red Hat addresses a vulnerability identified as CVE-2026-109955 in the grafana13.2 package included in Red Hat Hardened Images RPMs. The update provides new package versions (grafana13.2-13.2.3-0.2.hum1) for aarch64, s390x, and x86_64 architectures as well as source RPMs. The advisory references CWE-551, which relates to information exposure through log files or other means, but does not provide further technical details or CVSS scoring. The update is intended to remediate this vulnerability.

The vulnerability affects the grafana13.2 package in Red Hat Hardened Images RPMs and is rated medium severity by Red Hat. While specific impacts are not detailed, the CWE-551 classification suggests potential information exposure risks. There are no known exploits in the wild at the time of the advisory.

Red Hat has released updated packages (grafana13.2-13.2.3-0.2.hum1) that address CVE-2026-109955. Users of affected Red Hat Hardened Images RPMs should apply this update to remediate the vulnerability. Detailed update instructions are available at https://images.redhat.com/. No additional mitigation steps are indicated by the vendor advisory.