This update includes the following RPMs:

tempo3.0:
  * tempo3.0-3.0.4-0.2.hum1 (aarch64, x86_64)
  * tempo3.0-3.0.4-0.2.hum1.src (src)

Security Fix(es):

tempo3.0:
  * CVE-2026-111943

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

grafana-pcp

A security update has been issued for the grafana-pcp plugin in Red Hat Enterprise Linux 9.4 to address a vulnerability in the golang crypto/x509 package (CVE-2026-111943) that could allow man-in-the-middle attacks via untrusted intermediate certificates. This vulnerability affects the handling of intermediate certificates in TLS connections. Red Hat has released updated packages to fix this issue for multiple architectures and product variants of RHEL 9.4.

Red Hat Security Advisory: grafana-pcp security update

This update includes the following RPMs:

spire1.14:
  * spire1.14-1.14.8-0.2.hum1 (aarch64, s390x, x86_64)
  * spire1.14-agent-1.14.8-0.2.hum1 (aarch64, s390x, x86_64)
  * spire1.14-oidc-discovery-provider-1.14.8-0.2.hum1 (aarch64, s390x, x86_64)
  * spire1.14-server-1.14.8-0.2.hum1 (aarch64, s390x, x86_64)
  * spire1.14-1.14.8-0.2.hum1.src (src)

Security Fix(es):

spire1.14:
  * CVE-2026-111943

This update includes the following RPMs:

cosign:
  * cosign-3.1.3-0.4.hum1 (aarch64, s390x, x86_64)
  * cosign-3.1.3-0.4.hum1.src (src)

Security Fix(es):

cosign:
  * CVE-2026-111943

This update includes the following RPMs:

git-sync:
  * git-sync-4.7.1-0.3.hum1 (aarch64, s390x, x86_64)
  * git-sync-4.7.1-0.3.hum1.src (src)

Security Fix(es):

git-sync:
  * CVE-2026-111943

This update includes the following RPMs:

spire1.15:
  * spire1.15-1.15.4-0.2.hum1 (aarch64, s390x, x86_64)
  * spire1.15-agent-1.15.4-0.2.hum1 (aarch64, s390x, x86_64)
  * spire1.15-oidc-discovery-provider-1.15.4-0.2.hum1 (aarch64, s390x, x86_64)
  * spire1.15-server-1.15.4-0.2.hum1 (aarch64, s390x, x86_64)
  * spire1.15-1.15.4-0.2.hum1.src (src)

Security Fix(es):

spire1.15:
  * CVE-2026-111943

This update includes the following RPMs:

syft:
  * syft-1.55.0-0.2.hum1 (aarch64, s390x, x86_64)
  * syft-1.55.0-0.2.hum1.src (src)

Security Fix(es):

syft:
  * CVE-2026-111943

This update includes the following RPMs:

rekor:
  * rekor-server-1.5.4-0.3.hum1 (aarch64, s390x, x86_64)
  * rekor-1.5.4-0.3.hum1.src (src)

Security Fix(es):

rekor:
  * CVE-2026-111943

This update includes the following RPMs:

helm4:
  * helm4-4.3.1-0.2.hum1 (aarch64, s390x, x86_64)
  * helm4-4.3.1-0.2.hum1.src (src)

Security Fix(es):

helm4:
  * CVE-2026-111943

This update includes the following RPMs:

skopeo:
  * skopeo-1.24.1-1.2.hum1 (aarch64, s390x, x86_64)
  * skopeo-tests-1.24.1-1.2.hum1 (aarch64, s390x, x86_64)
  * skopeo-1.24.1-1.2.hum1.src (src)

Security Fix(es):

skopeo:
  * CVE-2026-111943

This update includes the following RPMs:

k6v1:
  * k6v1-1.8.2-0.2.hum1 (aarch64, x86_64)
  * k6v1-1.8.2-0.2.hum1.src (src)

Security Fix(es):

k6v1:
  * CVE-2026-111943

This update includes the following RPMs:

opentofu1.10:
  * opentofu1.10-1.10.10-0.6.hum1 (aarch64, s390x, x86_64)
  * opentofu1.10-1.10.10-0.6.hum1.src (src)

Security Fix(es):

opentofu1.10:
  * CVE-2026-111943

This update includes the following RPMs:

oauth2-proxy:
  * oauth2-proxy-7.15.5-0.3.hum1 (aarch64, s390x, x86_64)
  * oauth2-proxy-7.15.5-0.3.hum1.src (src)

Security Fix(es):

oauth2-proxy:
  * CVE-2026-111943

This update includes the following RPMs:

go-fdo-server:
  * go-fdo-server-1.0.2-1.2.hum1 (aarch64, s390x, x86_64)
  * go-fdo-server-manufacturer-1.0.2-1.2.hum1 (noarch)
  * go-fdo-server-owner-1.0.2-1.2.hum1 (noarch)
  * go-fdo-server-rendezvous-1.0.2-1.2.hum1 (noarch)
  * go-fdo-server-1.0.2-1.2.hum1.src (src)

Security Fix(es):

go-fdo-server:
  * CVE-2026-111943

This update includes the following RPMs:

helm3:
  * helm3-3.22.1-0.2.hum1 (aarch64, s390x, x86_64)
  * helm3-3.22.1-0.2.hum1.src (src)

Security Fix(es):

helm3:
  * CVE-2026-111943

This update includes the following RPMs:

podman:
  * podman-6.1.4-1.1.hum1 (aarch64, s390x, x86_64)
  * podman-docker-6.1.4-1.1.hum1 (noarch)
  * podman-machine-6.1.4-1.1.hum1 (aarch64, x86_64)
  * podman-remote-6.1.4-1.1.hum1 (aarch64, s390x, x86_64)
  * podmansh-6.1.4-1.1.hum1 (aarch64, s390x, x86_64)
  * podman-6.1.4-1.1.hum1.src (src)

Security Fix(es):

podman:
  * CVE-2026-111943

This update includes the following RPMs:

grype:
  * grype-0.121.0-0.2.hum1 (aarch64, s390x, x86_64)
  * grype-0.121.0-0.2.hum1.src (src)

Security Fix(es):

grype:
  * CVE-2026-111943

This update includes the following RPMs:

jaeger:
  * jaeger-2.21.0-0.2.hum1 (aarch64, x86_64)
  * jaeger-2.21.0-0.2.hum1.src (src)

Security Fix(es):

jaeger:
  * CVE-2026-111943

This update includes the following RPMs:

fulcio:
  * fulcio-1.9.0-0.3.hum1 (aarch64, s390x, x86_64)
  * fulcio-1.9.0-0.3.hum1.src (src)

Security Fix(es):

fulcio:
  * CVE-2026-111943

This update includes the following RPMs:

git-lfs:
  * git-lfs-3.8.0-0.4.hum1 (aarch64, s390x, x86_64)
  * git-lfs-3.8.0-0.4.hum1.src (src)

Security Fix(es):

git-lfs:
  * CVE-2026-111943

Search: CVE-2026-111943