Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.8
Red Hat Hardened Images packages updated to fix bugs and improve security
published 2 months ago
Summary
Red Hat’s hardened container images include updated software components that correct known issues and add security enhancements. These updates help keep the images stable and protect against potential attacks. Apply the provided update as soon as possible to keep your systems secure.
What to do
- Update redhat java-21-openjdk to version 0:21.0.12.1.1-1.0.hum1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:hummingbird:1 | redhat | java-21-openjdk |
< 0:21.0.12.1.1-1.0.hum1 Fix: upgrade to 0:21.0.12.1.1-1.0.hum1
|
Original advisory text
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
References
- https://access.redhat.com/errata/RHSA-2026:58266 Vendor Advisory
- https://images.redhat.com/ Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-70907 Third Party Advisory
- https://access.redhat.com/security/updates/classification/ Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-61308 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-60589 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_58266.... Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2513035 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-60589 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-60589 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2513037 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-61308 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-61308 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2513038 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-70907 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-70907 Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published22 Aug 2026
Updated22 Aug 2026
First seen22 Aug 2026
Sources
RHSA-2026:58266 · OSV
Track software like this
Free during beta