Security
فارسی
All products

Red Hat Enterprise Linux 9/java-17-openjdk

Red Hat · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
freetype: integer overflowin in tt_hvadvance_adjust() in src/truetype/ttgxvar.cCVE-2023-2004 Red Hat Enterprise Linux 6/freetypeRed Hat Enterprise Linux 7/freetype Red Hat Unknown No fix reported
libpng: LIBPNG heap buffer overflow via malformed palette indexCVE-2025-64505 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 10/java-21-openjdk Red Hat Medium No fix reported
libpng: LIBPNG heap buffer over-readCVE-2025-64506 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 10/java-21-openjdk Red Hat Medium No fix reported
harfbuzz: Null Pointer Dereference in harfbuzzCVE-2026-22693 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 10/harfbuzz Red Hat Medium No fix reported
libpng: libpng: Denial of Service via buffer overflow in png_create_read_struct() functionCVE-2025-28164 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 10/java-21-openjdk Red Hat Medium No fix reported
zlib: zlib: Denial of Service via infinite loop in CRC32 combine functionsCVE-2026-27171 Logging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundleLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-proxy-rhel9 Red Hat Low No fix reported
libpng: libpng: Information disclosure and data corruption via use-after-free vulnerabilityCVE-2026-34757 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 10/java-21-openjdk Red Hat Medium No fix reported
libpng: libpng: Data integrity and availability impact due to improper APNG chunk handlingCVE-2026-40930 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 10/java-21-openjdk Red Hat Medium No fix reported
libpng: libpng: Use-after-free in sequential reader when png_read_end called without reading image rowsCVE-2026-46675 Red Hat Enterprise Linux 10/java-21-openjdkRed Hat Enterprise Linux 10/java-25-openjdk Red Hat Medium No fix reported
freetype: FreeType: Denial of Service via repeated subroutine allocations in CID font loaderCVE-2026-95512 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 10/freetype Red Hat Medium No fix reported
freetype: Integer overflow in FreeType tt_face_colr_blend_layer() leads to heap buffer overflow during COLR font renderingCVE-2026-49919 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 10/freetype Red Hat Medium No fix reported
openjdk: Enhance QUIC connections (Oracle CPU 2026-10)CVE-2026-91409 Red Hat Enterprise Linux 10/java-21-ibm-semeru-certified-jdkRed Hat Enterprise Linux 10/java-21-openjdk Red Hat Low No fix reported
OpenJDK: Distrust eMudhra intermediate CA certificates due to security concernsCVE-2026-91403 Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9Red Hat Enterprise Linux 10/java-21-openjdk Red Hat Critical No fix reported