Red Hat Security Advisory: Java 11 OpenJDK ELS Security Update

Fixed packages 85

Vulnerabilities 12

• High 7.6
  CVE-2026-33636

  LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64

  LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versions 1.6.36 through 1.6.55, an out-of-bounds read and write exists in libpng's ARM/AArch64 Neon-optimized palett…

  pnggroup libpng fltk libpng1.6 Debian Ubuntu Azure Linux Alpine Wolfi
  Mar 26, 2026
• High 7.5
  CVE-2026-22016 Public exploit

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi
  Apr 21, 2026
• High 7.5
  CVE-2026-33416

  LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE`

  LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versions 1.2.1 through 1.6.55, `png_set_tRNS` and `png_set_PLTE` each alias a heap-allocated buffer between `png_str…

  pnggroup libpng openjpeg2 fltk Debian Ubuntu Azure Linux Alpine Wolfi
  Mar 26, 2026
• High 7.5
  CVE-2026-34282

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi
  Apr 21, 2026
• Medium 6.8
  CVE-2026-22801

  LIBPNG has an integer truncation causing heap buffer over-read in png_image_write_*

  LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.26 to 1.6.53, there is an integer truncation in the libpng simplified write API functions png_write_image_16bi…

  pnggroup libpng fltk libpng1.6 Debian Ubuntu Azure Linux Alpine Wolfi
  Jan 12, 2026
• Medium 6.1
  CVE-2026-22695

  LIBPNG has a heap buffer over-read in png_image_read_direct_scaled (regression from CVE-2025-65018 fix)

  LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.51 to 1.6.53, there is a heap buffer over-read in the libpng simplified API function png_image_finish_read whe…

  pnggroup libpng libpng1.6 libpng1.6 Debian Ubuntu Azure Linux Alpine Wolfi
  Jan 12, 2026
• Medium 5.3
  CVE-2026-22013 Public exploit

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi
  Apr 21, 2026
• Medium 5.3
  CVE-2026-22021

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi
  Apr 21, 2026
• Medium 5.3
  CVE-2026-23865

  An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.1…

  FreeType FreeType openjdk-8 openjdk-lts Debian Ubuntu Azure Linux Alpine Wolfi
  Mar 2, 2026
• Low 3.7
  CVE-2026-22018 Public exploit

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi
  Apr 21, 2026
• Low 2.9
  CVE-2026-22007 Public exploit

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi
  Apr 21, 2026
• Low 2.9
  CVE-2026-34268

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi
  Apr 21, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9254.json
• report
  https://access.redhat.com/security/cve/CVE-2026-22007
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2460038
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-22007
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-22007
• article
  https://www.oracle.com/security-alerts/cpuapr2026.html#AppendixJAVA
• report
  https://access.redhat.com/security/cve/CVE-2026-22013
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2460040
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-22013
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-22013
• report
  https://access.redhat.com/security/cve/CVE-2026-22016
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2460039
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-22016
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-22016
• report
  https://access.redhat.com/security/cve/CVE-2026-22018
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2460041
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-22018
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-22018
• report
  https://access.redhat.com/security/cve/CVE-2026-22021
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2460042
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-22021
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-22021
• report
  https://access.redhat.com/security/cve/CVE-2026-22695
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2428825
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-22695
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-22695
• article
  https://github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea
• article
  https://github.com/pnggroup/libpng/commit/e4f7ad4ea2
• article
  https://github.com/pnggroup/libpng/issues/778
• article
  https://github.com/pnggroup/libpng/security/advisories/GHSA-mmq5-27w3-rxpp
• report
  https://access.redhat.com/security/cve/CVE-2026-22801
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2428824
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-22801
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-22801
• article
  https://github.com/pnggroup/libpng/security/advisories/GHSA-vgjq-8cw5-ggw8
• report
  https://access.redhat.com/security/cve/CVE-2026-23865
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2443891
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-23865