p PatchFirst

RLSA-2026:0927

RLSA-2026:0927 · Important: java-17-openjdk security update

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * JDK: Improve JMX connections (CVE-2026-21925) * JDK: Improve HttpServer Request handling (CVE-2026-21933) * JDK: Enhance Certificate Checking (CVE-2026-21945) * libpng: LIBPNG buffer overflow (CVE-2025-64720) * libpng: LIBPNG heap buffer overflow (CVE-2025-65018) Bug Fix(es): * When using a P11SecretKey for both signing and encryption in FIPS mode, the FIPS PKCS11 provider would fail with a CKR_ATTRIBUTE_VALUE_INVALID error. This was due to the default configuration not applying the CKA_ENCRYPT=true attribute to the key. The configuration in this release is updated to include this attribute. (Rocky Linux-142862, Rocky Linux-142881, Rocky Linux-142882, Rocky Linux-142883, Rocky Linux-142884, Rocky Linux-142885, Rocky Linux-142886, Rocky Linux-142887, Rocky Linux-142888) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVSS 7.5 · Alta · Corrección disponible

Publicación
Actualización

Pila tecnológica: system

Productos y versiones afectados

  • java-17-openjdk Rocky Linux:8

    Intervalos de versiones afectados
    • ECOSYSTEM: < 1:17.0.18.0.8-1.el8

    Actualiza a 1:17.0.18.0.8-1.el8

Fuentes originales

Comprueba tu servidor →