This Red Hat security advisory (RHSA-2026:46808) announces an update to Red Hat Hardened Images RPMs, particularly the java-25-openjdk-portable packages for aarch64 and x86_64 architectures. The update addresses multiple vulnerabilities identified by eight CVEs (CVE-2026-46917, CVE-2026-46968, CVE-2026-47010, CVE-2026-47021, CVE-2026-47027, CVE-2026-47059, CVE-2026-47063, CVE-2026-60147). The advisory lists several CWEs including resource exhaustion (CWE-400), improper certificate validation (CWE-295), out-of-bounds read/write (CWE-787), use of potentially dangerous function (CWE-1333), null pointer dereference (CWE-476), and improper authentication (CWE-347). However, the advisory does not specify which versions are affected or fixed, nor does it provide CVSS scores or detailed technical impact. The update is described as a bug fix and enhancement without further elaboration on exploitation or impact scenarios.

The advisory indicates a high severity level and references multiple vulnerabilities affecting the java-25-openjdk-portable packages in Red Hat Hardened Images. The vulnerabilities cover a range of issues from resource exhaustion to authentication weaknesses and memory safety errors. No known exploits in the wild have been reported. The impact potentially includes denial of service, authentication bypass, and memory corruption, but specific impacts are not detailed in the advisory.

Red Hat has released updated RPM packages for java-25-openjdk-portable as part of this advisory. Users of Red Hat Hardened Images should apply the update as provided by Red Hat to address these vulnerabilities. Since no explicit patch versions or fixed version ranges are provided, users should refer to the official Red Hat advisory RHSA-2026:46808 and the Red Hat images repository (https://images.redhat.com/) for the latest patched packages and update instructions. No additional mitigation guidance or workarounds are specified.