Red Hat Security Advisory

RHSA-2026:22328

java-21-ibm-semeru-certified-jdk security update

Released 2026-06-01 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Supplementary (v. 10) java-21-ibm-semeru-certified-jdk-1:21.0.11.0.10-2.el10_1, java-21-ibm-semeru-certified-jdk-devel-1:21.0.11.0.10-2.el10_1, java-21-ibm-semeru-certified-jdk-headless-1:21.0.11.0.10-2.el10_1 +2
Red Hat Enterprise Linux Supplementary EUS (v. 10.0) java-21-ibm-semeru-certified-jdk-1:21.0.11.0.10-1.el10_0, java-21-ibm-semeru-certified-jdk-headless-1:21.0.11.0.10-1.el10_0
Red Hat Enterprise Linux Supplementary EUS (v.10.2) java-21-ibm-semeru-certified-jdk-1:21.0.11.0.10-2.el10_1, java-21-ibm-semeru-certified-jdk-devel-1:21.0.11.0.10-2.el10_1, java-21-ibm-semeru-certified-jdk-headless-1:21.0.11.0.10-2.el10_1 +2

Fixes 8 records

TI-2026-06062 CVE-2026-6918

Out-of-bounds read in Eclipse OpenJ9

HIGH 77

In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00517 Published 2026-05-05 Fixed in 0.59 CWE-125

TI-2026-26571 CVE-2026-34282 · GHSA-hpm9-74qx-6x32

Uncontrolled resource consumption in Oracle Java SE

MEDIUM 40

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00635 Published 2026-04-21 Partial fix CWE-400

TI-2026-17711 CVE-2026-22016 · GHSA-9m62-hmpm-rr2m

Information disclosure in Oracle Java SE

MEDIUM 40

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00702 Published 2026-04-21 Partial fix CWE-200

TI-2026-17715 CVE-2026-22021 · GHSA-9grw-5h83-65p3

Uncontrolled resource consumption in Oracle Java SE

LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00305 Published 2026-04-21 Partial fix CWE-400

TI-2026-17708 CVE-2026-22013 · GHSA-75hh-423h-rvwg

Protection mechanism failure in Oracle Java SE

LOW 24

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00258 Published 2026-04-21 Partial fix CWE-693

TI-2026-19226 CVE-2026-23865 · GHSA-878v-mxg6-vj8f

Out-of-bounds read in FreeType

LOW 23

An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType vari…

CVSS 3.1MEDIUM 5.3 Local No auth User interaction EPSS 0.00166 Published 2026-03-02 Partial fix CWE-125

TI-2026-26557 CVE-2026-34268 · GHSA-xvmr-9p7m-jmwv

Information disclosure in Oracle Java SE

LOW 13

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1LOW 2.9 Local No auth No interaction EPSS 0.00122 Published 2026-04-21 Partial fix CWE-200

TI-2026-17703 CVE-2026-22007 · GHSA-rj5j-26xx-hh3v

Information disclosure in Oracle Java SE

LOW 13

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1LOW 2.9 Local No auth No interaction EPSS 0.00124 Published 2026-04-21 Partial fix CWE-200