Red Hat has released a security update for the Eclipse Temurin build of OpenJDK 25 (version 25.0.4) for Windows, replacing version 25.0.3. This update addresses multiple security vulnerabilities affecting TLS certificate handling, DTLS handshaking, image processing (JPEG and XBM), Jar file processing, certification checking, and the AWT ImagingLib. Additionally, it updates the Little CMS library to version 2.19 to fix an integer overflow issue. The update is rated as having an important security impact.

Red Hat Security Advisory: OpenJDK 25.0.4 Security Update for Windows Builds

This security update for java-21-openjdk addresses multiple vulnerabilities including information disclosure, unauthorized data modification, and partial denial of service via various network protocols and TLS. The update incorporates fixes from the upstream JDK 21.0.12+8 release, resolving issues reported under several CVEs. The vulnerabilities impact critical data access and service availability.

Security update for java-21-openjdk

This security update for java-25-openjdk addresses multiple vulnerabilities including information disclosure, unauthorized data modification, and partial denial of service via various network protocols and TLS. The update corresponds to the upstream JDK 25.0.4+7 release and fixes several issues reported under multiple CVEs. The vulnerabilities impact critical data access and service availability.

Security update for java-25-openjdk

This security update for java-17-openjdk addresses multiple vulnerabilities including information disclosure, unauthorized data modification, and partial denial of service issues. The update upgrades to upstream tag jdk-17.0.20+8 (July 2026 CPU) and fixes several CVEs affecting critical data access and network protocol handling.

Security update for java-17-openjdk

Multiple security vulnerabilities affecting the java-1.8.0-openjdk packages, which provide the OpenJDK 8 Java Runtime Environment and Software Development Kit, have been addressed in a Red Hat security update. The update includes fixes for issues in TLS certificate handling, JPEG and XBM image processing, Jar file handling, certification checking, AWT ImagingLib, Nashorn index handling, Dataview implementation, and an update to LCMS to version 2.19. These vulnerabilities have been assigned CVE identifiers and are rated with an important security impact by Red Hat. The update also includes enhancements and bug fixes unrelated to security. No CVSS score is provided in the advisory.

Red Hat Security Advisory: java-1.8.0-openjdk security update

Red Hat has issued a security update for the java-1.8.0-openjdk packages, which provide the OpenJDK 8 Java Runtime Environment and Software Development Kit. This update addresses multiple security vulnerabilities affecting TLS certificate handling, image processing (JPEG, XBM, AWT ImagingLib), Jar file handling, Nashorn index handling, certification checking, and the Dataview implementation. Additionally, the update includes an upgrade of the Little CMS library to version 2.19 to fix an integer overflow vulnerability. The update also resolves packaging issues related to documentation subdirectories. The security impact is rated as Important by Red Hat.

Red Hat has released OpenJDK 25.0.4 for portable Linux builds, replacing version 25.0.3. This update addresses multiple security vulnerabilities affecting TLS certificate handling, DTLS handshaking, image processing (JPEG, XBM, AWT ImagingLib), Jar file handling, certification checking, and updates the Little CMS library to version 2.19 to fix an integer overflow issue. The update also includes performance improvements and clarifies version numbering for RPM builds.

Red Hat Security Advisory: OpenJDK 25.0.4 Security Update for Portable Linux Builds

Red Hat has released a security update for its OpenJDK 21 build for portable Linux, version 21.0.12, replacing version 21.0.11. This update addresses multiple security vulnerabilities across various components including TLS certificate handling, DTLS handshaking, JPEG and XBM image processing, Jar file handling, certification checking, and the AWT ImagingLib. Additionally, the update includes an upgrade of the Little CMS library to version 2.19 to fix an integer overflow issue. The update also clarifies version numbering for RPM builds. The vulnerabilities fixed are rated with an overall security impact of Important by Red Hat. No known exploits in the wild have been reported.

Red Hat Security Advisory: OpenJDK 21.0.12 Security Update for Portable Linux Builds

Red Hat has released an important security update for its OpenJDK 21 build for Windows, version 21.0.12, replacing version 21.0.11. This update addresses multiple security vulnerabilities affecting TLS certificate handling, DTLS handshaking, image processing (JPEG and XBM), Jar file processing, certification checking, and the AWT Imaging library. Additionally, it updates the Little CMS library to version 2.19 to fix an information disclosure or denial of service issue caused by an integer overflow. The update is rated as important by Red Hat Product Security.

Red Hat Security Advisory: OpenJDK 21.0.12 Security Update for Windows Builds

Red Hat has released an important security update for its OpenJDK 17 build on Windows, version 17.0.20, replacing 17.0.19. This update addresses multiple security vulnerabilities affecting TLS certificate handling, DTLS handshaking, image processing (JPEG and XBM), Jar file processing, certification checking, and the AWT Imaging library. It also updates the Little CMS library to version 2.19 to fix an integer overflow issue. These fixes collectively improve the security posture of the OpenJDK 17 runtime and SDK on Windows platforms.

Red Hat Security Advisory: OpenJDK 17.0.20 Security Update for Windows Builds

Red Hat has released a security update for its OpenJDK 17 build for portable Linux, version 17.0.20, replacing version 17.0.19. This update addresses multiple security vulnerabilities affecting various components such as TLS certificate handling, DTLS handshaking, image processing libraries, Jar file processing, and certification checking. The update also includes an upgrade of the Little CMS library to version 2.19 to fix an integer overflow issue. These fixes collectively improve the security posture of the OpenJDK 17 runtime and SDK.

Red Hat Security Advisory: OpenJDK 17.0.20 Security Update for Portable Linux Builds

Red Hat has released an important security update for its OpenJDK 8 build for portable Linux (version 8u502), replacing the previous 8u492 release. This update addresses multiple security vulnerabilities affecting various components such as TLS certificate handling, image processing (JPEG, XBM, AWT ImagingLib), Jar file processing, Nashorn index handling, Dataview implementation, and certification checking. Additionally, it updates the Little CMS library to version 2.19 to fix an integer overflow vulnerability. The update also includes enhancements to version numbering clarity for RPM builds.

Red Hat Security Advisory: OpenJDK 8u502 Security Update for Portable Linux Builds

Red Hat has released an important security update for its OpenJDK 8 build on Windows, version 8u502, replacing 8u492. This update addresses multiple security vulnerabilities affecting various components such as TLS certificate handling, image processing (JPEG, XBM), Jar file processing, Nashorn scripting engine, and certification checking. The update also includes an upgrade to the Little CMS library to version 2.19, fixing an integer overflow vulnerability. These fixes collectively improve the security posture of OpenJDK 8 on Windows.

Red Hat Security Advisory: OpenJDK 8u502 Windows Security Update

Red Hat has released an important security update for its OpenJDK 11 Extended Lifecycle Support (ELS) Windows builds, version 11.0.32, replacing 11.0.31. This update addresses multiple security vulnerabilities affecting TLS certificate handling, DTLS handshaking, image processing (JPEG, XBM), Jar file processing, certification checking, AWT ImagingLib, Nashorn index handling, Dataview implementation, and updates the Little CMS library to version 2.19. The update includes fixes for several CVEs, improving security and stability of the OpenJDK 11 runtime and SDK on Windows platforms.

Red Hat Security Advisory: OpenJDK 11.0.32 ELS Security Update for Windows Builds

Red Hat has released an important security update for its OpenJDK 11 Extended Lifecycle Support (ELS) packages for portable Linux builds. This update replaces version 11.0.31 with 11.0.32 and addresses multiple security vulnerabilities affecting TLS certificate handling, DTLS handshaking, image processing, Jar file handling, certification checking, and other components. The update includes fixes for several CVEs, enhancing the security and stability of the OpenJDK 11 runtime and development kit on Red Hat Enterprise Linux versions 7, 8, and 9 across multiple architectures.

Red Hat Security Advisory: OpenJDK 11.0.32 ELS Security Update for Portable Linux Builds

Red Hat has issued a security advisory for the java-11-openjdk packages with Extended Lifecycle Support on Red Hat Enterprise Linux 7, 8, and 9. This update addresses multiple security vulnerabilities in OpenJDK 11, including enhancements to TLS certificate handling, DTLS handshaking, image processing, Jar file handling, certification checking, and updates to the Little CMS library. The advisory covers a range of CVEs affecting various components of the Java runtime and development kit. Users are advised to apply the update after ensuring all prior errata are applied.

Red Hat Security Advisory: Java 11 OpenJDK ELS Security Update

Red Hat has released a security update for the OpenJDK 21 packages addressing multiple vulnerabilities affecting TLS certificate handling, DTLS handshaking, JPEG and XBM image processing, Jar file handling, certification checking, and the AWT ImagingLib. The update also includes an upgrade of the LCMS library to version 2.19. These fixes address several CVEs with a security impact rated as Important by Red Hat Product Security. The update applies to various Red Hat Enterprise Linux versions and architectures.

Red Hat Security Advisory: java-21-openjdk security update

Multiple security vulnerabilities have been addressed in the java-17-openjdk packages provided by Red Hat for OpenJDK 17. These fixes include enhancements to TLS certificate handling, DTLS handshaking, image format processing (JPEG, XBM), Jar file processing, certification checking, and the AWT Imaging Library, as well as an update to the LCMS library. The update is rated as important by Red Hat Product Security and applies to various Red Hat Enterprise Linux 8 and 9 variants and architectures.

Red Hat Security Advisory: java-17-openjdk security update

Red Hat has released a security update for the OpenJDK 25 packages included in Red Hat Enterprise Linux 9 and 10. This update addresses multiple vulnerabilities affecting TLS certificate handling, DTLS handshaking, JPEG and XBM image processing, Jar file handling, certification checking, and the AWT ImagingLib. Additionally, it updates the Little CMS library to version 2.19 to fix an integer overflow vulnerability. The update also includes enhancements and bug fixes unrelated to security. The advisory rates the security impact as Important.

Red Hat Security Advisory: java-25-openjdk security update

This security update for lcms2 addresses two integer overflow vulnerabilities identified as CVE-2026-41254 and CVE-2026-42798. Both vulnerabilities occur in different components of the software: CubeSize in cmslut.c and ParseCube in cmscgats.c. These issues could potentially lead to unexpected behavior or crashes.

Search: CVE-2026-41254