Read the docs
Red Hat Security Advisory

RHSA-2026:9687

OpenJDK 17.0.19 Security Update for Portable Linux Builds

Released 2026-04-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 15 records

TI-2026-20746 CVE-2026-25646

LIBPNG has a heap buffer overflow in png_set_quantize

Priority HIGH 69

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.0112 Published 2026-02-10 Partial fix · 1.6.55 CWE-122
TI-2025-40767 CVE-2025-66293

LIBPNG has an out-of-bounds read in png_image_read_composite

Priority MEDIUM 64

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0038 Published 2025-12-03 Partial fix · 1.6.52 CWE-125
TI-2026-26571 CVE-2026-34282 · GHSA-hpm9-74qx-6x32

Uncontrolled resource consumption in Oracle Java SE

Priority MEDIUM 40

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00635 Published 2026-04-21 Partial fix CWE-400
TI-2026-17711 CVE-2026-22016 · GHSA-9m62-hmpm-rr2m

Information disclosure in Oracle Java SE

Priority MEDIUM 40

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00702 Published 2026-04-21 Partial fix CWE-200
TI-2026-17715 CVE-2026-22021 · GHSA-9grw-5h83-65p3

Uncontrolled resource consumption in Oracle Java SE

Priority LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00305 Published 2026-04-21 Partial fix CWE-400
TI-2026-17708 CVE-2026-22013 · GHSA-75hh-423h-rvwg

Protection mechanism failure in Oracle Java SE

Priority LOW 24

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00258 Published 2026-04-21 Partial fix CWE-693
TI-2026-19226 CVE-2026-23865 · GHSA-878v-mxg6-vj8f

Out-of-bounds read in FreeType

Priority LOW 23

An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType vari…

CVSS 3.1MEDIUM 5.3 Local No auth User interaction EPSS 0.00166 Published 2026-03-02 Partial fix CWE-125
TI-2026-17713 CVE-2026-22018 · GHSA-376j-8f52-gp2x

Resource allocation without limits in Oracle Java SE

Priority LOW 17

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00269 Published 2026-04-21 Partial fix CWE-770
TI-2026-26557 CVE-2026-34268 · GHSA-xvmr-9p7m-jmwv

Information disclosure in Oracle Java SE

Priority LOW 13

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1LOW 2.9 Local No auth No interaction EPSS 0.00122 Published 2026-04-21 Partial fix CWE-200
TI-2026-17703 CVE-2026-22007 · GHSA-rj5j-26xx-hh3v

Information disclosure in Oracle Java SE

Priority LOW 13

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1LOW 2.9 Local No auth No interaction EPSS 0.00124 Published 2026-04-21 Partial fix CWE-200