Red Hat Security AdvisoryRHSA-2026:0933
java-25-openjdk security update
Released 2026-01-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) java-25-openjdk-1:25.0.2.0.10-1.el10, java-25-openjdk-crypto-adapter-1:25.0.2.0.10-1.el10, java-25-openjdk-demo-1:25.0.2.0.10-1.el10 +7
- Red Hat Enterprise Linux AppStream (v. 9) java-25-openjdk-1:25.0.2.0.10-1.el9, java-25-openjdk-crypto-adapter-1:25.0.2.0.10-1.el9, java-25-openjdk-demo-1:25.0.2.0.10-1.el9 +7
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) java-25-openjdk-crypto-adapter-fastdebug-1:25.0.2.0.10-1.el10, java-25-openjdk-crypto-adapter-slowdebug-1:25.0.2.0.10-1.el10, java-25-openjdk-demo-fastdebug-1:25.0.2.0.10-1.el10 +13
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) java-25-openjdk-crypto-adapter-fastdebug-1:25.0.2.0.10-1.el9, java-25-openjdk-crypto-adapter-slowdebug-1:25.0.2.0.10-1.el9, java-25-openjdk-demo-fastdebug-1:25.0.2.0.10-1.el9 +13
Fixes 5 records
Priority HIGH 66
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00278 · Published 2025-11-24 · Partial fix · 1.6.51 CWE-122
Priority MEDIUM 64
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00447 · Published 2025-11-24 · Partial fix · 1.6.51 CWE-125
Priority MEDIUM 41
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00992 · Published 2026-01-20 · Partial fix CWE-400
Priority LOW 27
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00299 · Published 2026-01-20 · Partial fix
Priority LOW 22
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI).
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.00254 · Published 2026-01-20 · Partial fix
THREATIST.IORead the docs