Red Hat Security Advisory

RHSA-2026:46808

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-07-27 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images java-25-openjdk-portable-1:25.0.4.0.7-2.0.2.hum1@aarch64, java-25-openjdk-portable-1:25.0.4.0.7-2.0.2.hum1@src, java-25-openjdk-portable-1:25.0.4.0.7-2.0.2.hum1@x86_64 +22

TI-2026-34665 CVE-2026-47063 · GHSA-vw39-pj36-hc59

LOW 38

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00256 Published 2026-07-21 Partial fix CWE-284

TI-2026-42850 CVE-2026-60147 · GHSA-4pv6-97j8-3pwq

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00287 Published 2026-07-21 Partial fix CWE-284

TI-2026-34631 CVE-2026-47027 · GHSA-cqfh-fjhw-mr88

LOW 30

Vulnerability in Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00289 Published 2026-07-21 Partial fix CWE-284

TI-2026-34626 CVE-2026-47021 · GHSA-qw6j-rcfr-8vrx

LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00305 Published 2026-07-21 Partial fix CWE-400

TI-2026-34523 CVE-2026-46917 · GHSA-x5x7-pvpw-w5hv

LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00289 Published 2026-07-21 Partial fix CWE-284

TI-2026-34574 CVE-2026-46968 · GHSA-hhf8-3x8g-6pff

LOW 26

Vulnerability in Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00291 Published 2026-07-21 Partial fix CWE-284

TI-2026-34661 CVE-2026-47059 · GHSA-c4gh-498r-f8f5

LOW 17

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00306 Published 2026-07-21 Partial fix CWE-284

TI-2026-34616 CVE-2026-47010 · GHSA-fhjm-g79r-vv57

LOW 17

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00254 Published 2026-07-21 Partial fix CWE-284