Skip to content
OpenAdvisories
Medium RLSA-2026:55798 4 CVEs

Moderate: java-25-openjdk security update

Published Aug 21, 2026 · Updated Aug 21, 2026

Ecosystem: Rocky Linux

Summary

The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit.

Security Fix(es):

* JDK: Improve Resource Resolving (CVE-2026-60589)

* JDK: Enhance HTTP Connections (CVE-2026-61308)

* JDK: Improve font loading (CVE-2026-70906)

* JDK: Enhance TLS server (CVE-2026-70907)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 10 java-25-openjdk 1:25.0.4.1.1-1.1.el10_2

Vulnerabilities 4

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2513038
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2513035
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2513037
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2513039
  • advisory
    https://access.redhat.com/errata/RHSA-2026:55798