This security advisory from Red Hat Product Security covers Red Hat Update Infrastructure 5 container images, which are based on the latest RHUI RPM packages and ubi9 or ubi9-init base images. The advisory references 21 CVEs, including CVE-2025-9086, affecting these images. The vulnerabilities span multiple CWE categories such as buffer overflows, improper input validation, and resource management issues. The update is a security release to update the container images to the latest versions. The advisory does not provide explicit patch details but recommends deploying updated container images using the rhui-installer utility. There are no known exploits in the wild at this time.

The impact involves multiple security vulnerabilities of high severity affecting Red Hat Update Infrastructure 5 container images. These vulnerabilities could potentially allow attackers to exploit issues related to memory safety, input validation, and resource management. However, no known exploits have been reported in the wild. The update aims to mitigate these risks by updating the container images to the latest secure versions.

The vendor advisory does not explicitly state that a patch is available but indicates that the container images have been updated to the latest versions. Users should deploy the updated container images using the rhui-installer utility as per the official documentation. Patch status is not explicitly confirmed; therefore, users should consult the Red Hat advisory RHSA-2026:2563 and official Red Hat Update Infrastructure documentation for current remediation guidance and deployment instructions.