Red Hat Security Advisory

RHSA-2026:0849

OpenJDK 11.0.30 ELS Security Update for Windows Builds

Released 2026-01-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

TI-2025-40204 CVE-2025-65018

HIGH 66

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00278 Published 2025-11-24 Partial fix · 1.6.51 CWE-122

TI-2025-40066 CVE-2025-64720

MEDIUM 64

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00447 Published 2025-11-24 Partial fix · 1.6.51 CWE-125

TI-2026-17645 CVE-2026-21945 · GHSA-r2mr-x4h2-9chr

MEDIUM 41

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00992 Published 2026-01-20 Partial fix CWE-400

TI-2026-17632 CVE-2026-21932 · GHSA-qc7q-3c5c-f8mv

LOW 33

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX).

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00525 Published 2026-01-20 Partial fix

TI-2026-17633 CVE-2026-21933 · GHSA-5rm3-299f-6m9v

LOW 27

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00299 Published 2026-01-20 Partial fix

TI-2026-17625 CVE-2026-21925 · GHSA-jhg6-g5fp-536p

LOW 22

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI).

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00254 Published 2026-01-20 Partial fix