This advisory covers security fixes for the OpenJDK 8 Java Runtime Environment and Software Development Kit in Red Hat Enterprise Linux 7 ELS. The vulnerabilities addressed include improvements to JMX connections (CVE-2026-21925), HttpServer request handling (CVE-2026-21933), and certificate checking (CVE-2026-21945). The update is part of Red Hat's Extended Lifecycle Support for RHEL 7 and aims to mitigate these security issues. No CVSS scores are provided in the advisory, but the severity is rated as Important by Red Hat Product Security.

The vulnerabilities affect the security of Java management extensions, HTTP server request processing, and certificate validation in OpenJDK 8 on Red Hat Enterprise Linux 7 ELS. These issues could potentially allow attackers to bypass security controls or cause improper handling of requests or certificates, impacting the confidentiality, integrity, or availability of affected systems. No known exploits in the wild have been reported at this time.

Red Hat has released updated java-1.8.0-openjdk packages for Red Hat Enterprise Linux 7 Extended Lifecycle Support that address these vulnerabilities. Users should apply this security update promptly. Before applying the update, ensure all previously released errata relevant to the system have been applied. Detailed update instructions are available from Red Hat's official documentation. No additional mitigation actions are indicated beyond applying the official update.