What is RHSA-2026:1606?

RHSA-2026:1606 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: OpenJDK 25.0.2 Security Update for Windows Builds

Which CVE IDs does RHSA-2026:1606 cover?

RHSA-2026:1606 covers the following CVE IDs: CVE-2026-21932, CVE-2026-21933, CVE-2026-21945, CVE-2026-21925. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2026:1606?

RHSA-2026:1606 has a CVSS v3 base score of 7.5, published by Red Hat Product Security.

Which products are affected by RHSA-2026:1606?

RHSA-2026:1606 affects 1 product, including: Temurin Build of OpenJDK 25.0.2.

RHSA-2026:1606HighCVSS 7.5

Red Hat Security Advisory: OpenJDK 25.0.2 Security Update for Windows Builds

Vendor

Red Hat Product Security

Published

February 2, 2026

Last Modified

July 30, 2026

🔗 CVE IDs covered (4)

CVE-2026-21932 →CVE-2026-21933 →CVE-2026-21945 →CVE-2026-21925 →

📋 Description

CVE-2026-21925 — openjdk: Improve JMX connections (Oracle CPU 2026-01) CVE-2026-21932 — openjdk: Enhance Handling of URIs (Oracle CPU 2026-01) CVE-2026-21933 — openjdk: Improve HttpServer Request handling (Oracle CPU 2026-01) CVE-2026-21945 — openjdk: Enhance Certificate Checking (Oracle CPU 2026-01)

🎯 Affected products1

Temurin Build of OpenJDK 25.0.2

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (4)

selfhttps://access.redhat.com/errata/RHSA-2026:1606
externalhttps://access.redhat.com/security/updates/classification/#important
externalhttps://docs.redhat.com/en/documentation/red_hat_build_of_openjdk/25/html/release_notes_for_eclipse_temurin_25.0.2/index
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1606.json