Red Hat Security Advisory

RHSA-2026:0931

java-1.8.0-openjdk security update

Released 2026-01-26 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7 ELS) java-1.8.0-openjdk-1:1.8.0.482.b08-1.el7_9, java-1.8.0-openjdk-devel-1:1.8.0.482.b08-1.el7_9, java-1.8.0-openjdk-headless-1:1.8.0.482.b08-1.el7_9
Red Hat Enterprise Linux Server Optional (v. 7 ELS) java-1.8.0-openjdk-accessibility-1:1.8.0.482.b08-1.el7_9, java-1.8.0-openjdk-demo-1:1.8.0.482.b08-1.el7_9, java-1.8.0-openjdk-javadoc-1:1.8.0.482.b08-1.el7_9 +2

TI-2026-17645 CVE-2026-21945 · GHSA-r2mr-x4h2-9chr

MEDIUM 41

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00992 Published 2026-01-20 Partial fix CWE-400

TI-2026-17633 CVE-2026-21933 · GHSA-5rm3-299f-6m9v

LOW 27

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00299 Published 2026-01-20 Partial fix

TI-2026-17625 CVE-2026-21925 · GHSA-jhg6-g5fp-536p

LOW 22

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI).

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00254 Published 2026-01-20 Partial fix