RHSA-2026:11655 | Mondoo Vulnerability Intelligence

RHSA-2026:11655

HIGH7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Apr 29, 2026

Modified 2 weeks ago

Fix available

Details

Details:

This update includes the following RPMs:

java-21-openjdk:

java-21-openjdk-21.0.11.0.10-1.hum1 (aarch64, x86_64)
java-21-openjdk-demo-21.0.11.0.10-1.hum1 (aarch64, x86_64)
java-21-openjdk-demo-fastdebug-21.0.11.0.10-1.hum1 (aarch64, x86_64)
java-21-openjdk-demo-slowdebug-21.0.11.0.10-1.hum1 (aarch64, x86_64)
java-21-openjdk-devel-21.0.11.0.10-1.hum1 (aarch64, x86_64)
java-21-openjdk-devel-fastdebug-21.0.11.0.10-1.hum1 (aarch64, x86_64)
java-21-openjdk-devel-slowdebug-21.0.11.0.10-1.hum1 (aarch64, x86_64)
java-21-openjdk-fastdebug-21.0.11.0.10-1.hum1 (aarch64, x86_64)
java-21-openjdk-headless-21.0.11.0.10-1.hum1 (aarch64, x86_64)
java-21-openjdk-headless-fastdebug-21.0.11.0.10-1.hum1 (aarch64, x86_64)
java-21-openjdk-headless-slowdebug-21.0.11.0.10-1.hum1 (aarch64, x86_64)
java-21-openjdk-javadoc-21.0.11.0.10-1.hum1 (aarch64, x86_64)
java-21-openjdk-javadoc-zip-21.0.11.0.10-1.hum1 (aarch64, x86_64)
java-21-openjdk-jmods-21.0.11.0.10-1.hum1 (aarch64, x86_64)
java-21-openjdk-jmods-fastdebug-21.0.11.0.10-1.hum1 (aarch64, x86_64)
java-21-openjdk-jmods-slowdebug-21.0.11.0.10-1.hum1 (aarch64, x86_64)
java-21-openjdk-slowdebug-21.0.11.0.10-1.hum1 (aarch64, x86_64)
java-21-openjdk-src-21.0.11.0.10-1.hum1 (aarch64, x86_64)
java-21-openjdk-src-fastdebug-21.0.11.0.10-1.hum1 (aarch64, x86_64)
java-21-openjdk-src-slowdebug-21.0.11.0.10-1.hum1 (aarch64, x86_64)
java-21-openjdk-static-libs-21.0.11.0.10-1.hum1 (aarch64, x86_64)
java-21-openjdk-static-libs-fastdebug-21.0.11.0.10-1.hum1 (aarch64, x86_64)
java-21-openjdk-static-libs-slowdebug-21.0.11.0.10-1.hum1 (aarch64, x86_64)
java-21-openjdk-21.0.11.0.10-1.hum1.src (src)

Affected Packages

java-21-openjdk

Red Hat hummingbird 1

Fixed in:

0:21.0.11.0.10-1.hum1

References

https://access.redhat.com/errata/RHSA-2026:11655

https://access.redhat.com/security/cve/CVE-2026-22007

https://access.redhat.com/security/cve/CVE-2026-22013

https://access.redhat.com/security/cve/CVE-2026-22016

https://access.redhat.com/security/cve/CVE-2026-22018

https://access.redhat.com/security/cve/CVE-2026-22021

https://access.redhat.com/security/cve/CVE-2026-34268

https://access.redhat.com/security/cve/CVE-2026-34282

https://access.redhat.com/security/updates/classification/

https://images.redhat.com/

https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_11655.json

CVSS Analysis

CVSS v3.1

7.5

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Upstream

CVE-2026-22007 CVE-2026-22013 CVE-2026-22016 CVE-2026-22018 CVE-2026-22021 CVE-2026-34268 CVE-2026-34282

Ecosystems

Red Hat hummingbird 1

Timeline

PublishedApr 29, 2026

ModifiedMay 4, 2026