RHSA-2026:11902 | Mondoo Vulnerability Intelligence

RHSA-2026:11902

HIGH7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Apr 29, 2026

Modified 2 weeks ago

Fix available

Details

Details:

This update includes the following RPMs:

java-25-openjdk:

java-25-openjdk-25.0.3.0.9-1.hum1 (aarch64, x86_64)
java-25-openjdk-crypto-adapter-25.0.3.0.9-1.hum1 (aarch64, x86_64)
java-25-openjdk-crypto-adapter-fastdebug-25.0.3.0.9-1.hum1 (aarch64, x86_64)
java-25-openjdk-crypto-adapter-slowdebug-25.0.3.0.9-1.hum1 (aarch64, x86_64)
java-25-openjdk-demo-25.0.3.0.9-1.hum1 (aarch64, x86_64)
java-25-openjdk-demo-fastdebug-25.0.3.0.9-1.hum1 (aarch64, x86_64)
java-25-openjdk-demo-slowdebug-25.0.3.0.9-1.hum1 (aarch64, x86_64)
java-25-openjdk-devel-25.0.3.0.9-1.hum1 (aarch64, x86_64)
java-25-openjdk-devel-fastdebug-25.0.3.0.9-1.hum1 (aarch64, x86_64)
java-25-openjdk-devel-slowdebug-25.0.3.0.9-1.hum1 (aarch64, x86_64)
java-25-openjdk-fastdebug-25.0.3.0.9-1.hum1 (aarch64, x86_64)
java-25-openjdk-headless-25.0.3.0.9-1.hum1 (aarch64, x86_64)
java-25-openjdk-headless-fastdebug-25.0.3.0.9-1.hum1 (aarch64, x86_64)
java-25-openjdk-headless-slowdebug-25.0.3.0.9-1.hum1 (aarch64, x86_64)
java-25-openjdk-javadoc-25.0.3.0.9-1.hum1 (aarch64, x86_64)
java-25-openjdk-javadoc-zip-25.0.3.0.9-1.hum1 (aarch64, x86_64)
java-25-openjdk-jmods-25.0.3.0.9-1.hum1 (aarch64, x86_64)
java-25-openjdk-jmods-fastdebug-25.0.3.0.9-1.hum1 (aarch64, x86_64)
java-25-openjdk-jmods-slowdebug-25.0.3.0.9-1.hum1 (aarch64, x86_64)
java-25-openjdk-slowdebug-25.0.3.0.9-1.hum1 (aarch64, x86_64)
java-25-openjdk-src-25.0.3.0.9-1.hum1 (aarch64, x86_64)
java-25-openjdk-src-fastdebug-25.0.3.0.9-1.hum1 (aarch64, x86_64)
java-25-openjdk-src-slowdebug-25.0.3.0.9-1.hum1 (aarch64, x86_64)
java-25-openjdk-static-libs-25.0.3.0.9-1.hum1 (aarch64, x86_64)
java-25-openjdk-static-libs-fastdebug-25.0.3.0.9-1.hum1 (aarch64, x86_64)
java-25-openjdk-static-libs-slowdebug-25.0.3.0.9-1.hum1 (aarch64, x86_64)
java-25-openjdk-25.0.3.0.9-1.hum1.src (src)

Affected Packages

java-25-openjdk

Red Hat hummingbird 1

Fixed in:

0:25.0.3.0.9-1.hum1

References

https://access.redhat.com/errata/RHSA-2026:11902

https://access.redhat.com/security/cve/CVE-2026-22007

https://access.redhat.com/security/cve/CVE-2026-22013

https://access.redhat.com/security/cve/CVE-2026-22016

https://access.redhat.com/security/cve/CVE-2026-22018

https://access.redhat.com/security/cve/CVE-2026-22021

https://access.redhat.com/security/cve/CVE-2026-34268

https://access.redhat.com/security/cve/CVE-2026-34282

https://access.redhat.com/security/updates/classification/

https://images.redhat.com/

https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_11902.json

CVSS Analysis

CVSS v3.1

7.5

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Upstream

CVE-2026-22007 CVE-2026-22013 CVE-2026-22016 CVE-2026-22018 CVE-2026-22021 CVE-2026-34268 CVE-2026-34282

Ecosystems

Red Hat hummingbird 1

Timeline

PublishedApr 29, 2026

ModifiedMay 4, 2026