Red Hat Security AdvisoryRHSA-2026:0928
java-21-openjdk security update
Released 2026-01-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.4) java-21-openjdk-demo-fastdebug-1:21.0.10.0.7-1.el9, java-21-openjdk-demo-slowdebug-1:21.0.10.0.7-1.el9, java-21-openjdk-devel-fastdebug-1:21.0.10.0.7-1.el9 +11
- Red Hat CodeReady Linux Builder EUS (v.9.6) java-21-openjdk-demo-fastdebug-1:21.0.10.0.7-1.el9, java-21-openjdk-demo-slowdebug-1:21.0.10.0.7-1.el9, java-21-openjdk-devel-fastdebug-1:21.0.10.0.7-1.el9 +11
- Red Hat Enterprise Linux AppStream (v. 10) java-21-openjdk-1:21.0.10.0.7-1.el10, java-21-openjdk-demo-1:21.0.10.0.7-1.el10, java-21-openjdk-devel-1:21.0.10.0.7-1.el10 +6
- Red Hat Enterprise Linux AppStream (v. 8) java-21-openjdk-1:21.0.10.0.7-1.el8, java-21-openjdk-demo-1:21.0.10.0.7-1.el8, java-21-openjdk-devel-1:21.0.10.0.7-1.el8 +6
- Red Hat Enterprise Linux AppStream (v. 9) java-21-openjdk-1:21.0.10.0.7-1.el9, java-21-openjdk-demo-1:21.0.10.0.7-1.el9, java-21-openjdk-devel-1:21.0.10.0.7-1.el9 +6
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) java-21-openjdk-1:21.0.10.0.7-1.el10, java-21-openjdk-demo-1:21.0.10.0.7-1.el10, java-21-openjdk-devel-1:21.0.10.0.7-1.el10 +6
- Red Hat Enterprise Linux AppStream EUS (v.9.4) java-21-openjdk-1:21.0.10.0.7-1.el9, java-21-openjdk-demo-1:21.0.10.0.7-1.el9, java-21-openjdk-devel-1:21.0.10.0.7-1.el9 +6
- Red Hat Enterprise Linux AppStream EUS (v.9.6) java-21-openjdk-1:21.0.10.0.7-1.el9, java-21-openjdk-demo-1:21.0.10.0.7-1.el9, java-21-openjdk-devel-1:21.0.10.0.7-1.el9 +6
- Red Hat Enterprise Linux CRB (v. 8) java-21-openjdk-demo-fastdebug-1:21.0.10.0.7-1.el8, java-21-openjdk-demo-slowdebug-1:21.0.10.0.7-1.el8, java-21-openjdk-devel-fastdebug-1:21.0.10.0.7-1.el8 +11
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) java-21-openjdk-demo-fastdebug-1:21.0.10.0.7-1.el10, java-21-openjdk-demo-slowdebug-1:21.0.10.0.7-1.el10, java-21-openjdk-devel-fastdebug-1:21.0.10.0.7-1.el10 +11
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) java-21-openjdk-demo-fastdebug-1:21.0.10.0.7-1.el9, java-21-openjdk-demo-slowdebug-1:21.0.10.0.7-1.el9, java-21-openjdk-devel-fastdebug-1:21.0.10.0.7-1.el9 +11
- Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) java-21-openjdk-demo-fastdebug-1:21.0.10.0.7-1.el10, java-21-openjdk-demo-slowdebug-1:21.0.10.0.7-1.el10, java-21-openjdk-devel-fastdebug-1:21.0.10.0.7-1.el10 +11
Fixes 5 records
Priority HIGH 66
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00278 · Published 2025-11-24 · Partial fix · 1.6.51 CWE-122
Priority MEDIUM 64
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00447 · Published 2025-11-24 · Partial fix · 1.6.51 CWE-125
Priority MEDIUM 41
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00992 · Published 2026-01-20 · Partial fix CWE-400
Priority LOW 27
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00299 · Published 2026-01-20 · Partial fix
Priority LOW 22
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI).
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.00254 · Published 2026-01-20 · Partial fix
THREATIST.IORead the docs