High RHSA-2026:0931 3 CVEs

Red Hat Security Advisory: java-1.8.0-openjdk security update

Published Jan 27, 2026 · Updated Oct 9, 2026

Ecosystem: Red Hat

Fixed packages 9

Release	Package	Fixed in
Red Hat · RHEL 7 ELS rhel_els:7	java-1.8.0-openjdk	1:1.8.0.482.b08-1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-1.8.0-openjdk-accessibility	1:1.8.0.482.b08-1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-1.8.0-openjdk-debuginfo	1:1.8.0.482.b08-1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-1.8.0-openjdk-demo	1:1.8.0.482.b08-1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-1.8.0-openjdk-devel	1:1.8.0.482.b08-1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-1.8.0-openjdk-headless	1:1.8.0.482.b08-1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-1.8.0-openjdk-javadoc	1:1.8.0.482.b08-1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-1.8.0-openjdk-javadoc-zip	1:1.8.0.482.b08-1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-1.8.0-openjdk-src	1:1.8.0.482.b08-1.el7_9

Vulnerabilities 3

High 7.5

CVE-2026-21945

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi

Jan 20, 2026
Medium 6.1

CVE-2026-21933

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi

Jan 20, 2026
Medium 4.8

CVE-2026-21925

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi

Jan 20, 2026

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=2429924
report
https://bugzilla.redhat.com/show_bug.cgi?id=2429926
report
https://bugzilla.redhat.com/show_bug.cgi?id=2429927
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0931.json
report
https://access.redhat.com/security/cve/CVE-2026-21925
advisory
https://www.cve.org/CVERecord?id=CVE-2026-21925
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-21925
article
https://www.oracle.com/security-alerts/cpujan2026.html#AppendixJAVA
report
https://access.redhat.com/security/cve/CVE-2026-21933
advisory
https://www.cve.org/CVERecord?id=CVE-2026-21933
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-21933
report
https://access.redhat.com/security/cve/CVE-2026-21945
advisory
https://www.cve.org/CVERecord?id=CVE-2026-21945
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-21945