This Red Hat security advisory (RHSA-2026:9684) covers a security update for the Red Hat build of OpenJDK 8 (8u492) for portable Linux, replacing version 8u482. It addresses seven distinct vulnerabilities identified by CVE identifiers CVE-2026-22007, CVE-2026-22013, CVE-2026-22016, CVE-2026-22018, CVE-2026-22021, CVE-2026-23865, and CVE-2026-34268. These vulnerabilities affect cryptographic algorithm support, Kerberos credentialing, path factory implementations, zip file reading, certificate chain validation, the FreeType library version 2.14.1, and key generation processes within the JDK. The advisory does not provide individual CVSS scores but rates the overall update as important. The update includes security fixes and enhancements to improve the security posture of the OpenJDK 8 runtime and SDK.

The vulnerabilities addressed impact critical security functions such as cryptography, authentication (Kerberos), file path handling, archive processing, certificate validation, font rendering library, and cryptographic key generation. Exploitation of these issues could potentially compromise the confidentiality, integrity, or availability of applications running on the affected OpenJDK 8 build. The advisory rates the security impact as important, indicating a high severity level but does not report known exploits in the wild at the time of publication.

A security update to Red Hat build of OpenJDK 8 (version 8u492) is available and replaces the previous 8u482 version. Users should apply this update to remediate the listed vulnerabilities. Before applying this update, ensure that all previously released errata relevant to the system have been applied. Detailed instructions for applying the update are available in the Red Hat knowledge base article https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor advisory.