What is RHSA-2026:0900?

RHSA-2026:0900 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: OpenJDK 21.0.10 Security Update for Windows Builds

Which CVE IDs does RHSA-2026:0900 cover?

RHSA-2026:0900 covers the following CVE IDs: CVE-2026-21932, CVE-2026-21933, CVE-2026-21945, CVE-2026-21925. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2026:0900?

RHSA-2026:0900 has a CVSS v3 base score of 7.5, published by Red Hat Product Security.

Which products are affected by RHSA-2026:0900?

RHSA-2026:0900 affects 1 product, including: Red Hat Build of OpenJDK 21.0.10.

RHSA-2026:0900HighCVSS 7.5

Red Hat Security Advisory: OpenJDK 21.0.10 Security Update for Windows Builds

Vendor

Red Hat Product Security

Published

January 26, 2026

Last Modified

July 30, 2026

🔗 CVE IDs covered (4)

CVE-2026-21932 →CVE-2026-21933 →CVE-2026-21945 →CVE-2026-21925 →

📋 Description

CVE-2026-21925 — openjdk: Improve JMX connections (Oracle CPU 2026-01) CVE-2026-21932 — openjdk: Enhance Handling of URIs (Oracle CPU 2026-01) CVE-2026-21933 — openjdk: Improve HttpServer Request handling (Oracle CPU 2026-01) CVE-2026-21945 — openjdk: Enhance Certificate Checking (Oracle CPU 2026-01)

🎯 Affected products1

Red Hat Build of OpenJDK 21.0.10

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (4)

selfhttps://access.redhat.com/errata/RHSA-2026:0900
externalhttps://access.redhat.com/security/updates/classification/#important
externalhttps://docs.redhat.com/en/documentation/red_hat_build_of_openjdk/21/html/release_notes_for_red_hat_build_of_openjdk_21.0.10/index
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0900.json