Red Hat build of OpenJDK 21/java-21-openjdk-portable

Red Hat · Package

8 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
openjdk: Enhance array handling (Oracle CPU 2025-01)CVE-2025-21502	Red Hat Enterprise Linux 6/java-1.6.0-openjdk Red Hat Enterprise Linux 6/java-1.7.0-openjdk	Red Hat	Medium	No fix reported	Not recorded
libpng: LIBPNG heap buffer overflow via malformed palette indexCVE-2025-64505	Red Hat Enterprise Linux 10/firefox Red Hat Enterprise Linux 10/java-21-openjdk	Red Hat	Medium	No fix reported	Not recorded
libpng: LIBPNG heap buffer over-readCVE-2025-64506	Red Hat Enterprise Linux 10/firefox Red Hat Enterprise Linux 10/java-21-openjdk	Red Hat	Medium	No fix reported	Not recorded
harfbuzz: Null Pointer Dereference in harfbuzzCVE-2026-22693	Red Hat Enterprise Linux 10/firefox Red Hat Enterprise Linux 10/harfbuzz	Red Hat	Medium	No fix reported	Not recorded
libpng: libpng: Denial of Service via buffer overflow in png_create_read_struct() functionCVE-2025-28164	Red Hat Enterprise Linux 10/firefox Red Hat Enterprise Linux 10/java-21-openjdk	Red Hat	Medium	No fix reported	Not recorded
zlib: zlib: Denial of Service via infinite loop in CRC32 combine functionsCVE-2026-27171	Logging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle Logging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-proxy-rhel9	Red Hat	Low	No fix reported	Not recorded
libpng: libpng: Information disclosure and data corruption via use-after-free vulnerabilityCVE-2026-34757	Red Hat Enterprise Linux 10/firefox Red Hat Enterprise Linux 10/java-21-openjdk	Red Hat	Medium	No fix reported	Not recorded
libpng: libpng: Data integrity and availability impact due to improper APNG chunk handlingCVE-2026-40930	Red Hat Enterprise Linux 10/firefox Red Hat Enterprise Linux 10/java-21-openjdk	Red Hat	Medium	No fix reported	Not recorded