Red Hat Product Errata RHSA-2026:55798 - Security Advisory Issued: 2026-08-19 Updated: 2026-08-19 RHSA-2026:55798 - Security Advisory Overview Updated Packages Synopsis Moderate: java-25-openjdk security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for java-25-openjdk is now available for Red Hat Enterprise Linux 9 and Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit. Security Fix(es): JDK: Improve Resource Resolving (CVE-2026-60589) JDK: Enhance HTTP Connections (CVE-2026-61308) JDK: Improve font loading (CVE-2026-70906) JDK: Enhance TLS server (CVE-2026-70907) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat CodeReady Linux Builder for x86_64 10 x86_64 Red Hat CodeReady Linux Builder for x86_64 9 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le Red Hat CodeReady Linux Builder for ARM 64 10 aarch64 Red Hat CodeReady Linux Builder for ARM 64 9 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.2 x86_64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.2 s390x Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.8 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes (none) CVEs CVE-2026-60589 CVE-2026-61308 CVE-2026-70906 CVE-2026-70907 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM java-25-openjdk-25.0.4.1.1-1.1.el10.src.rpm SHA-256: b145e0887bd3a47f74ed3d52d0875c971ee6d11d26eccdc724317387ec4c3bd9 x86_64 java-25-openjdk-25.0.4.1.1-1.1.el10.x86_64.rpm SHA-256: 40b56bf66b0cab17c08f7917ee26b8f2e9178f2033fe33074408003c3f04d3f3 java-25-openjdk-crypto-adapter-25.0.4.1.1-1.1.el10.x86_64.rpm SHA-256: 059432298a2f741c040efc104c7e44d3d396c4fb4942e9fa7dfd09518477b9b0 java-25-openjdk-crypto-adapter-debuginfo-25.0.4.1.1-1.1.el10.x86_64.rpm SHA-256: fd80a5a2750978ede5a0aa41055a70734ca762aa52f61475c2413d2eedf97c89 java-25-openjdk-debuginfo-25.0.4.1.1-1.1.el10.x86_64.rpm SHA-256: 520c721ce7c1101bfcf8fd42458677a9a3bebaba42db83166e222ea2835dc37b java-25-openjdk-debugsource-25.0.4.1.1-1.1.el10.x86_64.rpm SHA-256: cf9d5cd4aa7e8602270c01711479fb78b67fe7a3140a50299e6c6e3632b1f68c java-25-openjdk-demo-25.0.4.1.1-1.1.el10.x86_64.rpm SHA-256: 8a58113728847be0c5b0bb27e06a88bbd718828bd5f3c3ca4c4d3bfcfbd07781 java-25-openjdk-devel-25.0.4.1.1-1.1.el10.x86_64.rpm SHA-256: ea9fc7f8f6b40cc0125c7c1c5c344f88304ddba1cdfe3b425ea07fd937087256 java-25-openjdk-devel-debuginfo-25.0.4.1.1-1.1.el10.x86_64.rpm SHA-256: c2bd131a4ec15d93101820c11016096814d9c182b0de2b8388c77fa274842c46 java-25-openjdk-headless-25.0.4.1.1-1.1.el10.x86_64.rpm SHA-256: 8921622d79f6c05f10a19c64de3f0f36bd57e904687b12b9cb0504521f99daac java-25-openjdk-headless-debuginfo-25.0.4.1.1-1.1.el10.x86_64.rpm SHA-256: cf79d4c7c319f76380905165aa8d6e2a1f45d6a61d8635f9edc86a7f7566951e java-25-openjdk-javadoc-25.0.4.1.1-1.1.el10.x86_64.rpm SHA-256: 901917df936429fcbae2e3ddb2a7c3325315161fe8fe72d425f3629c3a880f19 java-25-openjdk-javadoc-zip-25.0.4.1.1-1.1.el10.x86_64.rpm SHA-256: a6d35c78dc712a5dbdb3512e3ac960fba613bbc7a15eeab868a5e4d80c0e4247 java-25-openjdk-jmods-25.0.4.1.1-1.1.el10.x86_64.rpm SHA-256: 5177fe535be7177a11b4474b61ae41065f5bd57bc11c8acc765bd7b9e8a530c5 java-25-openjdk-src-25.0.4.1.1-1.1.el10.x86_64.rpm SHA-256: a2e6aa38a0a0c6d66ea91e0dd16cd0393f5933a4bc26d460437adcddbfe909cc java-25-openjdk-static-libs-25.0.4.1.1-1.1.el10.x86_64.rpm SHA-256: f6b559bae6579ef4ceb6d3f8e4ff297a193e93953e28b25456d307e9deed9a59 Red Hat Enterprise Linux for x86_64 9 SRPM java-25-openjdk-25.0.4.1.1-1.1.el9.src.rpm SHA-256: f820143d011a6a6f3e39fc4761a3a3a1ecbe32cf7ef89cc62fb74718f405882f x86_64 java-25-openjdk-25.0.4.1.1-1.1.el9.x86_64.rpm SHA-256: 43efd91089296aa85198bd7d1b65a5158e0ae37f80ecd24cba3abf12e33e239e java-25-openjdk-crypto-adapter-25.0.4.1.1-1.1.el9.x86_64.rpm SHA-256: 3a695ecbf64e223b1bfc953a0d919e25a6c82cdfbba2101bc5e0e7235fddd0c7 java-25-openjdk-crypto-adapter-debuginfo-25.0.4.1.1-1.1.el9.x86_64.rpm SHA-256: 26b945ccdc08e1cf713bdc3cc787366412181acf46668556a77d5e32f3109fbd java-25-openjdk-debuginfo-25.0.4.1.1-1.1.el9.x86_64.rpm SHA-256: 75c325a5f923236af58d4ca135faf2d2438570089b08db5f9f96034c67f9bb29 java-25-openjdk-debugsource-25.0.4.1.1-1.1.el9.x86_64.rpm SHA-256: 1f4d132e43c533ae50b658c41866f01b240133ca743ba096f9d01da06903c440 java-25-openjdk-demo-25.0.4.1.1-1.1.el9.x86_64.rpm SHA-256: 0ae5376fe7247281e975d1e1cff48afafb2363ce0deef659f326966bcce2e01e java-25-openjdk-devel-25.0.4.1.1-1.1.el9.x86_64.rpm SHA-256: d4b195f05ffc25cb97bafbd0fad1b91399d7135b01cf04daf8f382a0950f8d16 java-25-openjdk-devel-debuginfo-25.0.4.1.1-1.1.el9.x86_64.rpm SHA-256: 9ee6f77364a417893353270fbdbe6d1b9f6e5e84b54343f16d214c9c10583850 java-25-openjdk-headless-25.0.4.1.1-1.1.el9.x86_64.rpm SHA-256: 2000887eefa53016663f47a74d946dc33191331d0badde68b21398204f30ffa0 java-25-openjdk-headless-debuginfo-25.0.4.1.1-1.1.el9.x86_64.rpm SHA-256: 08be39265ff1e4d3a3026019347318bc0c59d31ab85648500b07847a209184d8 java-25-openjdk-javadoc-25.0.4.1.1-1.1.el9.x86_64.rpm SHA-256: c85924dd250d71b1a17b91f18bb1ce18e37f365f86dc8a754b402c308161c910 java-25-openjdk-javadoc-zip-25.0.4.1.1-1.1.el9.x86_64.rpm SHA-256: 2bd648f6c52d18e35957dc388b3e589637329375f6a1b82ad41945c362af7aad java-25-openjdk-jmods-25.0.4.1.1-1.1.el9.x86_64.rpm SHA-256: 76e4928379dc52699f8969ccb2f585776dec9fb0ee22b8339591dcc96f285572 java-25-openjdk-src-25.0.4.1.1-1.1.el9.x86_64.rpm SHA-256: 1cb381fd0ae7338800a9006be555fb9ce67df9a426697153745f8f801ca9b7f8 java-25-openjdk-static-libs-25.0.4.1.1-1.1.el9.x86_64.rpm SHA-256: 5c88f9cc622484e67650776f45a0dbb39a25f0f70c86b8ba30fb1dcc97191c80 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM java-25-openjdk-25.0.4.1.1-1.1.el10.src.rpm SHA-256: b145e0887bd3a47f74ed3d52d0875c971ee6d11d26eccdc724317387ec4c3bd9 x86_64 java-25-openjdk-25.0.4.1.1-1.1.el10.x86_64.rpm SHA-256: 40b56bf66b0cab17c08f7917ee26b8f2e9178f2033fe33074408003c3f04d3f3 java-25-openjdk-crypto-adapter-25.0.4.1.1-1.1.el10.x86_64.rpm SHA-256: 059432298a2f741c040efc104c7e44d3d396c4fb4942e9fa7dfd09518477b9b0 java-25-openjdk-crypto-adapter-debuginfo-25.0.4.1.1-1.1.el10.x86_64.rpm SHA-256: fd80a5a2750978ede5a0aa