This Red Hat security advisory addresses vulnerabilities in the Red Hat Hardened Images RPMs, particularly the grafana12.4 package versions prior to 12.4.12-0.3.hum1. The advisory lists multiple CVEs fixed by this update, including CVE-2026-101903 and CVE-2026-93450, among others. The update includes new RPM packages for both aarch64 and x86_64 architectures. The advisory does not specify detailed technical information about the vulnerabilities or their exploitation but indicates a high severity level. The vendor provides updated packages and directs users to their official update channels for remediation.

The vulnerabilities addressed by this update affect the Red Hat Hardened Images RPMs, specifically the grafana12.4 package. The advisory classifies the severity as high, indicating that these vulnerabilities could potentially lead to significant security risks if unpatched. However, no known exploits in the wild are reported at this time. The impact is mitigated by applying the updated RPM packages provided by Red Hat.

Red Hat has released updated RPM packages for grafana12.4 (version 12.4.12-0.3.hum1) that address the listed vulnerabilities. Users should apply these official updates promptly by following Red Hat's update procedures as detailed at https://images.redhat.com/. No additional mitigation steps are specified or required beyond applying the provided security update.