Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Description
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, including updates to grafana13.1 and grafana13.2 packages. The update addresses multiple vulnerabilities, notably CVE-2026-90771 and CVE-2026-9029, among others. These vulnerabilities are rated as high severity. The advisory provides updated RPM packages to remediate these issues. No known exploits in the wild have been reported. Users of affected versions are advised to apply the updates as provided by Red Hat.
Affected software
pkg:deb/ubuntu/[email protected]+dfsg-1?arch=source&distro=xenialpkg:bitnami/grafanaRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This Red Hat security advisory addresses multiple vulnerabilities in Red Hat Hardened Images RPMs, specifically in grafana13.1 and grafana13.2 packages. The update includes fixes for CVE-2026-90771 and CVE-2026-9029, among other CVEs. The vulnerabilities relate to issues categorized under CWEs such as CWE-79 (Cross-site Scripting), CWE-22 (Path Traversal), CWE-915, CWE-178, and CWE-783. The advisory provides updated RPM packages for aarch64 and x86_64 architectures. Red Hat has published these updates and recommends applying them to affected versions to mitigate the security risks.
Potential Impact
The vulnerabilities fixed in this advisory are rated high severity and affect multiple versions of Red Hat Hardened Images RPMs, including grafana packages. Exploitation could potentially lead to security issues related to cross-site scripting and other weaknesses as indicated by the CWEs. However, there are no known exploits in the wild at this time. The impact is significant enough to warrant immediate patching to prevent potential exploitation.
Mitigation Recommendations
A patch is available for the affected Red Hat Hardened Images RPMs, including grafana13.1 and grafana13.2 packages. Users should apply the updates provided by Red Hat as detailed in the advisory (https://access.redhat.com/errata/RHSA-2026:67573). No additional mitigation steps are indicated beyond applying the official update.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- UBUNTU-CVE-2026-9029
- Osv Schema Version
- 1.7.0
- Ecosystems
- ["Ubuntu:16.04:LTS"]
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6a58b4f968715ace43db2218
Added to database: 07/16/2026, 10:39:53 UTC
Last enriched: 10/05/2026, 21:56:26 UTC
Last updated: 10/15/2026, 18:48:25 UTC
Views: 58
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.