This advisory from Red Hat Product Security covers a bug fix and enhancement update for Red Hat Hardened Images RPMs, specifically targeting java-21-openjdk packages across multiple variants and architectures (aarch64, x86_64). The update addresses multiple CVEs (eight in total, including CVE-2026-22007) related to various weaknesses such as CWE-327, CWE-319, CWE-611, CWE-125, CWE-674, and CWE-835. The advisory does not provide detailed technical descriptions of the vulnerabilities or explicit patch versions but confirms the availability of updated RPMs. No exploits are currently known in the wild.

The vulnerabilities addressed by this update affect Red Hat Hardened Images and java-21-openjdk packages, potentially impacting the security and stability of systems using these components. The exact impact of each CVE is not detailed in the advisory. The severity is classified as high, indicating significant security concerns if left unpatched. No active exploitation has been reported.

A security update containing bug fixes and enhancements for the affected java-21-openjdk RPMs is available from Red Hat. Users should apply the update as provided by Red Hat Hardened Images to remediate the vulnerabilities. Since this is an official Red Hat advisory with updated packages released, applying the update is the recommended mitigation. Patch status is confirmed by the vendor advisory. No additional or alternative mitigations are specified.