This advisory from Red Hat Product Security addresses a vulnerability identified as CVE-2026-53669 affecting the prometheus3.13 RPM packages included in Red Hat Hardened Images. The update provides new package versions prometheus3.13-3.13.1-0.5.hum1 for both aarch64 and x86_64 architectures. The vulnerability is associated with CWE-601, which typically relates to URL redirection issues. The advisory does not provide a CVSS score or detailed impact description. No known exploits in the wild have been reported. The vendor advisory does not explicitly state fixed or vulnerable version ranges, nor does it provide direct patch links, but it references the updated package versions.

The vulnerability CVE-2026-53669 affects the prometheus3.13 packages in Red Hat Hardened Images. CWE-601 indicates a potential open redirect or similar issue, which could be leveraged in phishing or redirect attacks. However, no known exploits in the wild have been reported. The impact is assessed as medium severity by Red Hat. Without further details, the exact impact on confidentiality, integrity, or availability cannot be precisely determined.

Red Hat has released updated RPM packages prometheus3.13-3.13.1-0.5.hum1 for affected architectures. Users of Red Hat Hardened Images should apply this update as per Red Hat's instructions available at https://images.redhat.com/. No additional mitigation steps are specified or required beyond applying the update. Patch status is confirmed by the vendor advisory indicating the availability of updated packages.