Linux · Security advisory · January 23, 2026

ELSA-2026-0928: Security update for 23 packages

ELSA-2026-0928, released January 23, 2026, fixes 5 CVEs across 23 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
5
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0099
62nd percentile

Priority of the 5 CVEs

Patch now 0 Urgent 0 High 5 Routine 0

Fixed package versions

ProductReleaseFixed in
java-21-openjdkol 101:21.0.10.0.7-1.0.1.el10
java-21-openjdkol 81:21.0.10.0.7-1.0.1.el10
java-21-openjdkol 91:21.0.10.0.7-1.0.1.el10
java-21-openjdk-demool 101:21.0.10.0.7-1.0.1.el10
java-21-openjdk-demool 81:21.0.10.0.7-1.0.1.el10
java-21-openjdk-demool 91:21.0.10.0.7-1.0.1.el10
java-21-openjdk-demo-fastdebugol 101:21.0.10.0.7-1.0.1.el10
java-21-openjdk-demo-fastdebugol 81:21.0.10.0.7-1.0.1.el10
java-21-openjdk-demo-fastdebugol 91:21.0.10.0.7-1.0.1.el10
java-21-openjdk-demo-slowdebugol 101:21.0.10.0.7-1.0.1.el10
java-21-openjdk-demo-slowdebugol 81:21.0.10.0.7-1.0.1.el10
java-21-openjdk-demo-slowdebugol 91:21.0.10.0.7-1.0.1.el10
java-21-openjdk-develol 101:21.0.10.0.7-1.0.1.el10
java-21-openjdk-develol 81:21.0.10.0.7-1.0.1.el10
java-21-openjdk-develol 91:21.0.10.0.7-1.0.1.el10
java-21-openjdk-devel-fastdebugol 101:21.0.10.0.7-1.0.1.el10
java-21-openjdk-devel-fastdebugol 81:21.0.10.0.7-1.0.1.el10
java-21-openjdk-devel-fastdebugol 91:21.0.10.0.7-1.0.1.el10
java-21-openjdk-devel-slowdebugol 101:21.0.10.0.7-1.0.1.el10
java-21-openjdk-devel-slowdebugol 81:21.0.10.0.7-1.0.1.el10
java-21-openjdk-devel-slowdebugol 91:21.0.10.0.7-1.0.1.el10
java-21-openjdk-fastdebugol 101:21.0.10.0.7-1.0.1.el10
java-21-openjdk-fastdebugol 81:21.0.10.0.7-1.0.1.el10
java-21-openjdk-fastdebugol 91:21.0.10.0.7-1.0.1.el10
java-21-openjdk-headlessol 101:21.0.10.0.7-1.0.1.el10
java-21-openjdk-headlessol 81:21.0.10.0.7-1.0.1.el10
java-21-openjdk-headlessol 91:21.0.10.0.7-1.0.1.el10
java-21-openjdk-headless-fastdebugol 101:21.0.10.0.7-1.0.1.el10
java-21-openjdk-headless-fastdebugol 81:21.0.10.0.7-1.0.1.el10
java-21-openjdk-headless-fastdebugol 91:21.0.10.0.7-1.0.1.el10
java-21-openjdk-headless-slowdebugol 101:21.0.10.0.7-1.0.1.el10
java-21-openjdk-headless-slowdebugol 81:21.0.10.0.7-1.0.1.el10
java-21-openjdk-headless-slowdebugol 91:21.0.10.0.7-1.0.1.el10
java-21-openjdk-javadocol 101:21.0.10.0.7-1.0.1.el10
java-21-openjdk-javadocol 81:21.0.10.0.7-1.0.1.el10
java-21-openjdk-javadocol 91:21.0.10.0.7-1.0.1.el10
java-21-openjdk-javadoc-zipol 101:21.0.10.0.7-1.0.1.el10
java-21-openjdk-javadoc-zipol 81:21.0.10.0.7-1.0.1.el10
java-21-openjdk-javadoc-zipol 91:21.0.10.0.7-1.0.1.el10
java-21-openjdk-jmodsol 101:21.0.10.0.7-1.0.1.el10
java-21-openjdk-jmodsol 81:21.0.10.0.7-1.0.1.el10
java-21-openjdk-jmodsol 91:21.0.10.0.7-1.0.1.el10
java-21-openjdk-jmods-fastdebugol 101:21.0.10.0.7-1.0.1.el10
java-21-openjdk-jmods-fastdebugol 81:21.0.10.0.7-1.0.1.el10
java-21-openjdk-jmods-fastdebugol 91:21.0.10.0.7-1.0.1.el10
java-21-openjdk-jmods-slowdebugol 101:21.0.10.0.7-1.0.1.el10
java-21-openjdk-jmods-slowdebugol 81:21.0.10.0.7-1.0.1.el10
java-21-openjdk-jmods-slowdebugol 91:21.0.10.0.7-1.0.1.el10
java-21-openjdk-slowdebugol 101:21.0.10.0.7-1.0.1.el10
java-21-openjdk-slowdebugol 81:21.0.10.0.7-1.0.1.el10
java-21-openjdk-slowdebugol 91:21.0.10.0.7-1.0.1.el10
java-21-openjdk-srcol 101:21.0.10.0.7-1.0.1.el10
java-21-openjdk-srcol 81:21.0.10.0.7-1.0.1.el10
java-21-openjdk-srcol 91:21.0.10.0.7-1.0.1.el10
java-21-openjdk-src-fastdebugol 101:21.0.10.0.7-1.0.1.el10
java-21-openjdk-src-fastdebugol 81:21.0.10.0.7-1.0.1.el10
java-21-openjdk-src-fastdebugol 91:21.0.10.0.7-1.0.1.el10
java-21-openjdk-src-slowdebugol 101:21.0.10.0.7-1.0.1.el10
java-21-openjdk-src-slowdebugol 81:21.0.10.0.7-1.0.1.el10
java-21-openjdk-src-slowdebugol 91:21.0.10.0.7-1.0.1.el10
java-21-openjdk-static-libsol 101:21.0.10.0.7-1.0.1.el10
java-21-openjdk-static-libsol 81:21.0.10.0.7-1.0.1.el10
java-21-openjdk-static-libsol 91:21.0.10.0.7-1.0.1.el10
java-21-openjdk-static-libs-fastdebugol 101:21.0.10.0.7-1.0.1.el10
java-21-openjdk-static-libs-fastdebugol 81:21.0.10.0.7-1.0.1.el10
java-21-openjdk-static-libs-fastdebugol 91:21.0.10.0.7-1.0.1.el10
java-21-openjdk-static-libs-slowdebugol 101:21.0.10.0.7-1.0.1.el10
java-21-openjdk-static-libs-slowdebugol 81:21.0.10.0.7-1.0.1.el10
java-21-openjdk-static-libs-slowdebugol 91:21.0.10.0.7-1.0.1.el10

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-21945 Java(TM) SE Development Kit 21 and 1 other: Uncontrolled Resource Consumption 7.5 0.0099 None reported
High CVE-2025-64720 LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication 7.5 0.0045 None reported
High CVE-2026-21933 Java(TM) SE Development Kit 21 and 1 other: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product… 7.5 0.0030 None reported
High CVE-2025-65018 LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read` 7.5 0.0028 None reported
High CVE-2026-21925 Java(TM) SE Development Kit 21 and 1 other: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product… 7.5 0.0025 None reported
Showing 1 to 5 of 5 1