RHSA-2026:11902HighCVSS 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published
April 29, 2026
Last Modified
October 19, 2026

🔗 CVE IDs covered (7)

CVE-2026-22021 →CVE-2026-34268 →CVE-2026-34282 →CVE-2026-22007 →CVE-2026-22013 →CVE-2026-22016 →CVE-2026-22018 →

📋 Description

CVE-2026-22007 — openjdk: Enhance crypto algorithm support (Oracle CPU 2026-04) CVE-2026-22013 — openjdk: Improve Kerberos credentialing (Oracle CPU 2026-04) CVE-2026-22016 — openjdk: Enhance Path Factories Redux (Oracle CPU 2026-04) CVE-2026-22018 — openjdk: Enhance Zip file reading (Oracle CPU 2026-04) CVE-2026-22021 — openjdk: Enhance certificate chain validation (Oracle CPU 2026-04) CVE-2026-34268 — openjdk: Enhance key generation (Oracle CPU 2026-04) CVE-2026-34282 — openjdk: Enhance TLS connection handling (Oracle CPU 2026-04)

🎯 Affected products54

  • Red Hat Hardened Images
  • java-25-openjdk-0:25.0.3.0.9-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • java-25-openjdk-0:25.0.3.0.9-1.hum1@src as a component of Red Hat Hardened Images
  • java-25-openjdk-0:25.0.3.0.9-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • java-25-openjdk-crypto-adapter-0:25.0.3.0.9-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • java-25-openjdk-crypto-adapter-0:25.0.3.0.9-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • java-25-openjdk-crypto-adapter-fastdebug-0:25.0.3.0.9-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • java-25-openjdk-crypto-adapter-fastdebug-0:25.0.3.0.9-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • java-25-openjdk-crypto-adapter-slowdebug-0:25.0.3.0.9-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • java-25-openjdk-crypto-adapter-slowdebug-0:25.0.3.0.9-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • java-25-openjdk-demo-0:25.0.3.0.9-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • java-25-openjdk-demo-0:25.0.3.0.9-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • java-25-openjdk-demo-fastdebug-0:25.0.3.0.9-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • java-25-openjdk-demo-fastdebug-0:25.0.3.0.9-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • java-25-openjdk-demo-slowdebug-0:25.0.3.0.9-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • java-25-openjdk-demo-slowdebug-0:25.0.3.0.9-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • java-25-openjdk-devel-0:25.0.3.0.9-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • java-25-openjdk-devel-0:25.0.3.0.9-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • java-25-openjdk-devel-fastdebug-0:25.0.3.0.9-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • java-25-openjdk-devel-fastdebug-0:25.0.3.0.9-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • java-25-openjdk-devel-slowdebug-0:25.0.3.0.9-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • java-25-openjdk-devel-slowdebug-0:25.0.3.0.9-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • java-25-openjdk-fastdebug-0:25.0.3.0.9-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • java-25-openjdk-fastdebug-0:25.0.3.0.9-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • java-25-openjdk-headless-0:25.0.3.0.9-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • java-25-openjdk-headless-0:25.0.3.0.9-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • java-25-openjdk-headless-fastdebug-0:25.0.3.0.9-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • java-25-openjdk-headless-fastdebug-0:25.0.3.0.9-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • java-25-openjdk-headless-slowdebug-0:25.0.3.0.9-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • java-25-openjdk-headless-slowdebug-0:25.0.3.0.9-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • +24 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/

🔗 References (11)