Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

The advisory updates the grafana13.2 RPM packages to version 13.2.1-0.2.hum1 for Red Hat Hardened Images, addressing two security vulnerabilities: CVE-2026-84394 and CVE-2026-84292. These vulnerabilities are fixed in the updated RPMs distributed for aarch64 and x86_64 architectures. The advisory does not provide detailed technical descriptions of the vulnerabilities but references CWE identifiers CWE-551, CWE-140, and CWE-1289, indicating issues related to security misconfiguration, buffer overflow, or similar weaknesses. The update is available from Red Hat's public repositories and is intended to mitigate these security issues.

The vulnerabilities addressed are rated as high severity, indicating they could potentially allow unauthorized actions or compromise system integrity if exploited. The exact impact details are not provided, but the presence of multiple CWE identifiers suggests risks related to security configuration and memory safety. No known exploits in the wild have been reported at this time.

A security update is available and should be applied by upgrading the grafana13.2 package to version 13.2.1-0.2.hum1 for the affected architectures. Users should follow Red Hat's official update procedures as described in the advisory. No additional mitigations or workarounds are specified.