This Red Hat security advisory updates Red Hat Hardened Images RPMs, particularly tomcat11 packages, to address multiple vulnerabilities identified by CVE-2026-42498, CVE-2026-43512, CVE-2026-43514, and CVE-2026-43515. The update includes new RPM versions (tomcat11-11.0.22-0.1.hum1 and related packages). The advisory does not specify affected versions or detailed vulnerability descriptions but references common weakness enumerations CWE-201, CWE-303, CWE-208, and CWE-551, indicating issues related to information exposure, insufficient validation, and security misconfigurations. No CVSS scores are provided, and no known exploits have been reported. The advisory directs users to apply the update via Red Hat Hardened Images.

The vulnerabilities addressed involve potential information exposure and security weaknesses in tomcat11 components within Red Hat Hardened Images. The medium severity suggests a moderate risk of exploitation impacting confidentiality or integrity. No known active exploitation has been reported, reducing immediate risk. However, unpatched systems may be vulnerable to attacks exploiting these weaknesses.

Red Hat has released updated RPM packages for tomcat11 as part of the Hardened Images update. Users should apply these updates following Red Hat's official guidance at https://images.redhat.com/. Since this is an official fix, applying the update will remediate the vulnerabilities. No additional mitigation steps are indicated by the vendor advisory.