2429925 – (CVE-2026-21932) CVE-2026-21932 openjdk: Enhance Handling of URIs (Oracle CPU 2026-01)

Bug 2429925 (CVE-2026-21932) - CVE-2026-21932 openjdk: Enhance Handling of URIs (Oracle CPU 2026-01)

Summary: CVE-2026-21932 openjdk: Enhance Handling of URIs (Oracle CPU 2026-01)

Keywords:
Status:	NEW
Alias:	CVE-2026-21932
Deadline:	2026-01-20
Product:	Security Response
Classification:	Other
Component:	vulnerability
Sub Component:
Version:	unspecified
Hardware:	All
OS:	Linux
Priority:	high
Severity:	high
Target Milestone:	---
Assignee:	Product Security DevOps Team
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+	depends on / blocked

Attachments	(Terms of Use)

Links
System	ID	Private	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2026:0849	0	None	None	None	2026-01-21 13:48:01 UTC

Description OSIDB Bzimport 2026-01-15 12:04:16 UTC

Desktop.browse() will run a program if the URI is a filename while the
documentation says that the default browser will be used to open the
URI.

Comment 1 errata-xmlrpc 2026-01-21 13:47:59 UTC

This issue has been addressed in the following products:

  OPENJDK ELS 11.0.30

Via RHSA-2026:0849 https://access.redhat.com/errata/RHSA-2026:0849

Note You need to log in before you can comment on or make changes to this bug.