Red Hat Security Advisory: General availability of the satellite/iop-remediations-rhel9 container image

Red Hat issued a security advisory (RHSA-2026:63782) for Red Hat Hardened Images RPMs that includes fixes for CVE-2026-84292 among other CVEs. The affected components include grafana12.4 RPMs and multiple Red Hat products such as Red Hat Edge Manager 1.3, OpenShift Container Platform versions, and Red Hat Satellite 6.19. The vulnerabilities cover a range of weaknesses including buffer overflows, improper input validation, and security bypasses as indicated by the associated CWEs. The advisory provides updated package versions to address these security issues.

The vulnerabilities are rated as high severity and affect multiple Red Hat products and versions, potentially allowing attackers to exploit weaknesses such as buffer overflows and improper input validation. This could lead to system compromise or unauthorized actions if exploited. However, there are no known exploits in the wild at this time.

A security update is available and should be applied to affected systems. The vendor advisory confirms that patched versions of the RPMs are released, including grafana12.4-12.4.9-0.6.hum1. Users should follow Red Hat's official update instructions to remediate these vulnerabilities.