This Red Hat security advisory covers a set of vulnerabilities fixed in the Red Hat build of OpenJDK 11 ELS version 11.0.31 for portable Linux. The update addresses multiple security issues in the JDK's image processing libraries, notably LIBPNG and GIFLIB, including out-of-bounds reads (CVE-2025-66293), heap buffer overflows (CVE-2026-25646), use-after-free leading to arbitrary code execution (CVE-2026-33416), and denial of service and information disclosure vulnerabilities (e.g., CVE-2026-22801, CVE-2026-26740, CVE-2026-33636). Additional JDK vulnerabilities are also fixed (CVE-2026-22007, CVE-2026-22013, CVE-2026-22016, CVE-2026-22018, CVE-2026-22021, CVE-2026-22695, CVE-2026-23865, CVE-2026-34268, CVE-2026-34282). The advisory rates the update as Important and provides links to detailed release notes and errata application instructions. No CVSS scores are provided in the advisory; users should consult individual CVE pages for detailed severity ratings.

The vulnerabilities fixed in this update can lead to out-of-bounds memory reads, heap buffer overflows, use-after-free conditions that may allow arbitrary code execution, information disclosure, and denial of service within the OpenJDK 11 runtime environment. These issues affect the security and stability of Java applications running on affected OpenJDK versions, potentially allowing attackers to execute code, crash applications, or access sensitive information.

A security update to Red Hat build of OpenJDK 11 ELS version 11.0.31 is available and should be applied to affected systems. Before applying this update, ensure all previously released errata relevant to your system have been installed. Follow Red Hat's official guidance for applying the update as detailed in their errata documentation. No alternative mitigations or workarounds are indicated in the advisory.