All products

Red Hat build of OpenJDK 17/java-17-openjdk-portable

Red Hat · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
openjdk: Enhance array handling (Oracle CPU 2025-01)CVE-2025-21502 Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk Red Hat Medium No fix reported
libpng: LIBPNG heap buffer overflow via malformed palette indexCVE-2025-64505 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 10/java-21-openjdk Red Hat Medium No fix reported
libpng: LIBPNG heap buffer over-readCVE-2025-64506 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 10/java-21-openjdk Red Hat Medium No fix reported
harfbuzz: Null Pointer Dereference in harfbuzzCVE-2026-22693 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 10/harfbuzz Red Hat Medium No fix reported
libpng: libpng: Denial of Service via buffer overflow in png_create_read_struct() functionCVE-2025-28164 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 10/java-21-openjdk Red Hat Medium No fix reported
zlib: zlib: Denial of Service via infinite loop in CRC32 combine functionsCVE-2026-27171 Logging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundleLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-proxy-rhel9 Red Hat Low No fix reported
libpng: libpng: Information disclosure and data corruption via use-after-free vulnerabilityCVE-2026-34757 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 10/java-21-openjdk Red Hat Medium No fix reported
libpng: libpng: Data integrity and availability impact due to improper APNG chunk handlingCVE-2026-40930 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 10/java-21-openjdk Red Hat Medium No fix reported
freetype: Integer overflow in FreeType tt_face_colr_blend_layer() leads to heap buffer overflow during COLR font renderingCVE-2026-49919 Red Hat Enterprise Linux 10/firefoxRed Hat Enterprise Linux 10/freetype Red Hat Medium No fix reported
openjdk: Enhance QUIC connections (Oracle CPU 2026-10)CVE-2026-91409 Red Hat Enterprise Linux 10/java-21-ibm-semeru-certified-jdkRed Hat Enterprise Linux 10/java-21-openjdk Red Hat Low No fix reported