Red Hat Security Advisory

RHSA-2026:11902

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-04-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images java-25-openjdk-25.0.3.0.9-1.hum1@aarch64, java-25-openjdk-25.0.3.0.9-1.hum1@src, java-25-openjdk-25.0.3.0.9-1.hum1@x86_64 +47

TI-2026-26571 CVE-2026-34282 · GHSA-hpm9-74qx-6x32

MEDIUM 40

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00635 Published 2026-04-21 Partial fix CWE-400

TI-2026-17711 CVE-2026-22016 · GHSA-9m62-hmpm-rr2m

MEDIUM 40

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00702 Published 2026-04-21 Partial fix CWE-200

TI-2026-17715 CVE-2026-22021 · GHSA-9grw-5h83-65p3

LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00305 Published 2026-04-21 Partial fix CWE-400

TI-2026-17708 CVE-2026-22013 · GHSA-75hh-423h-rvwg

LOW 24

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00258 Published 2026-04-21 Partial fix CWE-693

TI-2026-17713 CVE-2026-22018 · GHSA-376j-8f52-gp2x

LOW 17

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00269 Published 2026-04-21 Partial fix CWE-770

TI-2026-26557 CVE-2026-34268 · GHSA-xvmr-9p7m-jmwv

LOW 13

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1LOW 2.9 Local No auth No interaction EPSS 0.00122 Published 2026-04-21 Partial fix CWE-200

TI-2026-17703 CVE-2026-22007 · GHSA-rj5j-26xx-hh3v

LOW 13

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1LOW 2.9 Local No auth No interaction EPSS 0.00124 Published 2026-04-21 Partial fix CWE-200