Red Hat Security AdvisoryRHSA-2026:52948
java-21-ibm-semeru-certified-jdk security update
Released 2026-08-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Supplementary (v. 10) java-21-ibm-semeru-certified-jdk-1:21.0.12.0.8-2.el10_2, java-21-ibm-semeru-certified-jdk-devel-1:21.0.12.0.8-2.el10_2, java-21-ibm-semeru-certified-jdk-headless-1:21.0.12.0.8-2.el10_2 +2
- Red Hat Enterprise Linux Supplementary EUS (v. 10.0) java-21-ibm-semeru-certified-jdk-1:21.0.12.0.8-1.el10_0, java-21-ibm-semeru-certified-jdk-headless-1:21.0.12.0.8-1.el10_0
Fixes 12 records
Priority LOW 38
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00256 · Published 2026-07-21 · Partial fix CWE-284
Priority LOW 35
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00287 · Published 2026-07-21 · Partial fix CWE-284
Priority LOW 33
Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00364 · Published 2026-04-18 · Partial fix CWE-696
Priority LOW 31
In Eclipse OpenJ9 versions up to 0.60, when executing class files where a previously concrete superclass method has been recompiled as abstract, execution is incorrectly delegated to an interface default method.
CVSS 4.0MEDIUM 6.9· Network · Low privileges · User interaction · EPSS 0.00534 · Published 2026-07-21 · Fixed in 0.60.0 CWE-758
Priority LOW 30
Vulnerability in Oracle Java SE (component: Libraries).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00289 · Published 2026-07-21 · Partial fix CWE-284
Priority LOW 30
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00305 · Published 2026-07-21 · Partial fix CWE-400
Priority LOW 30
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00289 · Published 2026-07-21 · Partial fix CWE-284
Priority LOW 28
In Eclipse OpenJ9 versions up to 0.60, using -Xtrace to trace method arguments can lead to buffer underflow.
CVSS 4.0MEDIUM 5.8· Network · Low privileges · User interaction · EPSS 0.0043 · Published 2026-07-21 · Fixed in 0.60.0 CWE-124
Priority LOW 26
Vulnerability in Oracle Java SE (component: JSSE).
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00291 · Published 2026-07-21 · Partial fix CWE-284
Priority LOW 26
In Eclipse OMR versions up to 0.11, the arraycmp SIMD implementation for Z and P does not check if the number of bytes to compare is zero.
CVSS 4.0MEDIUM 5.7· Network · Low privileges · User interaction · EPSS 0.0052 · Published 2026-07-21 · Fixed in 0.11 CWE-125
Priority LOW 17
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.00306 · Published 2026-07-21 · Partial fix CWE-284
Priority LOW 17
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.00254 · Published 2026-07-21 · Partial fix CWE-284
THREATIST.IORead the docs