VYPR

rpm package

almalinux/java-21-openjdk-jmods

pkg:rpm/almalinux/java-21-openjdk-jmods

Vulnerabilities (53)

  • CVE-2025-65018HigNov 25, 2025
    affected < 1:21.0.10.0.7-1.el10.alma.1fixed 1:21.0.10.0.7-1.el10.alma.1

    LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_re

  • CVE-2025-64720HigNov 25, 2025
    affected < 1:21.0.10.0.7-1.el10.alma.1fixed 1:21.0.10.0.7-1.el10.alma.1

    LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read vulnerability exists in png_image_read_composite when processing palette images w

  • CVE-2025-61748LowOct 21, 2025
    affected < 1:21.0.9.0.10-1.el10.alma.1fixed 1:21.0.9.0.10-1.el10.alma.1

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 21.0.8 and 25; Oracle GraalVM for JDK: 21.0.8; Oracle GraalVM Enterprise Edi

  • CVE-2025-53066HigOct 21, 2025
    affected < 1:21.0.9.0.10-1.el10.alma.1fixed 1:21.0.9.0.10-1.el10.alma.1

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 a

  • CVE-2025-53057MedOct 21, 2025
    affected < 1:21.0.9.0.10-1.el10.alma.1fixed 1:21.0.9.0.10-1.el10.alma.1

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.

  • CVE-2025-50106HigJul 15, 2025
    affected < 1:21.0.8.0.9-1.el10.alma.1fixed 1:21.0.8.0.9-1.el10.alma.1

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15

  • CVE-2025-50059HigJul 15, 2025
    affected < 1:21.0.8.0.9-1.el10.alma.1fixed 1:21.0.8.0.9-1.el10.alma.1

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.1

  • CVE-2025-30754MedJul 15, 2025
    affected < 1:21.0.8.0.9-1.el10.alma.1fixed 1:21.0.8.0.9-1.el10.alma.1

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.

  • CVE-2025-30749HigJul 15, 2025
    affected < 1:21.0.8.0.9-1.el10.alma.1fixed 1:21.0.8.0.9-1.el10.alma.1

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15

  • CVE-2025-30698MedApr 15, 2025
    affected < 1:21.0.7.0.6-1.el8fixed 1:21.0.7.0.6-1.el8

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK: 17.0.14, 21

  • CVE-2025-30691MedApr 15, 2025
    affected < 1:21.0.7.0.6-1.el8fixed 1:21.0.7.0.6-1.el8

    Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 21.0.6, 24; Oracle GraalVM for JDK: 21.0.6 and 24. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to co

  • CVE-2025-21587HigApr 15, 2025
    affected < 1:21.0.7.0.6-1.el8fixed 1:21.0.7.0.6-1.el8

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE:8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK:17.0.14, 21

  • CVE-2025-21502MedJan 21, 2025
    affected < 1:21.0.6.0.7-1.el8fixed 1:21.0.6.0.7-1.el8

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u431-perf, 11.0.25, 17.0.13, 21.0.5, 23.0.1; Oracle GraalVM for JDK: 17.0.13,

  • CVE-2024-21235MedOct 15, 2024
    affected < 1:21.0.5.0.10-3.el8.alma.1fixed 1:21.0.5.0.10-3.el8.alma.1

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0

  • CVE-2024-21217LowOct 15, 2024
    affected < 1:21.0.5.0.10-3.el8.alma.1fixed 1:21.0.5.0.10-3.el8.alma.1

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK:

  • CVE-2024-21210LowOct 15, 2024
    affected < 1:21.0.5.0.10-3.el8.alma.1fixed 1:21.0.5.0.10-3.el8.alma.1

    Vulnerability in Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4 and 23. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to co

  • CVE-2024-21208LowOct 15, 2024
    affected < 1:21.0.5.0.10-3.el8.alma.1fixed 1:21.0.5.0.10-3.el8.alma.1

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.

  • CVE-2024-21147HigJul 16, 2024
    affected < 1:21.0.4.0.7-1.el8.alma.1fixed 1:21.0.4.0.7-1.el8.alma.1

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17

  • CVE-2024-21145MedJul 16, 2024
    affected < 1:21.0.4.0.7-1.el8.alma.1fixed 1:21.0.4.0.7-1.el8.alma.1

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11

  • CVE-2024-21140MedJul 16, 2024
    affected < 1:21.0.4.0.7-1.el8.alma.1fixed 1:21.0.4.0.7-1.el8.alma.1

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17

Page 2 of 3