Skip to content
OpenAdvisories
Medium RLSA-2026:55787 3 CVEs

Moderate: java-21-openjdk security update

Published Aug 20, 2026 · Updated Aug 20, 2026

Ecosystem: Rocky Linux

Summary

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

* JDK: Improve Resource Resolving (CVE-2026-60589)

* JDK: Enhance HTTP Connections (CVE-2026-61308)

* JDK: Enhance TLS server (CVE-2026-70907)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 8 java-21-openjdk 1:21.0.12.1.1-1.1.el8_10

Vulnerabilities 3

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2513035
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2513037
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2513038
  • advisory
    https://access.redhat.com/errata/RHSA-2026:55787