Red Hat Security Advisory

RHSA-2026:52949

java-1.8.0-ibm security update

Released 2026-08-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Supplementary (v. 8) java-1.8.0-ibm-1:1.8.0.8.70-1.el8_10, java-1.8.0-ibm-demo-1:1.8.0.8.70-1.el8_10, java-1.8.0-ibm-devel-1:1.8.0.8.70-1.el8_10 +5

Fixes 14 records

TI-2026-07382 CVE-2026-8400 · GHSA-m4rx-9mrh-59g9

Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and…

MEDIUM 43

IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a flaw in the ORB component in IBM SDK, Java Technology Edition, may allow a malicious IIOP server to i…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00481 Published 2026-08-05 Fixed CWE-470

TI-2026-34659 CVE-2026-47057 · GHSA-qfmm-wrmh-r6pr

Uncontrolled resource consumption in Oracle Java SE

LOW 39

Vulnerability in Oracle Java SE (component: Scripting).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0047 Published 2026-07-21 Partial fix CWE-400

TI-2026-34665 CVE-2026-47063 · GHSA-vw39-pj36-hc59

Improper access control in Oracle Java SE

LOW 38

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00256 Published 2026-07-21 Partial fix CWE-284

TI-2026-42850 CVE-2026-60147 · GHSA-4pv6-97j8-3pwq

Improper access control in Oracle Java SE

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00287 Published 2026-07-21 Partial fix CWE-284

TI-2026-34660 CVE-2026-47058 · GHSA-j75p-jh2f-6h9p

Deserialization of untrusted data in Oracle Java SE

LOW 35

Vulnerability in Oracle Java SE (component: Scripting).

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00387 Published 2026-07-21 Partial fix CWE-502

TI-2026-29862 CVE-2026-41254 · GHSA-hc77-37fq-x324

Integer overflow in littlecms little cms color engine

LOW 33

Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00364 Published 2026-04-18 Partial fix CWE-696

TI-2026-13739 CVE-2026-16441 · GHSA-cp45-6q6c-3772

Eclipse OpenJ9 : Method resolution default method precedence failure

LOW 31

In Eclipse OpenJ9 versions up to 0.60, when executing class files where a previously concrete superclass method has been recompiled as abstract, execution is incorrectly delegated to an interface default method.

CVSS 4.0MEDIUM 6.9 Network Low privileges User interaction EPSS 0.00534 Published 2026-07-21 Fixed in 0.60.0 CWE-758

TI-2026-34631 CVE-2026-47027 · GHSA-cqfh-fjhw-mr88

Improper access control in Oracle Java SE

LOW 30

Vulnerability in Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00289 Published 2026-07-21 Partial fix CWE-284

TI-2026-34626 CVE-2026-47021 · GHSA-qw6j-rcfr-8vrx

Uncontrolled resource consumption in Oracle Java SE

LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00305 Published 2026-07-21 Partial fix CWE-400

TI-2026-13737 CVE-2026-16439 · GHSA-pw53-4wcc-wm6v

Eclipse OpenJ9 : Using -Xtrace to trace method arguments can lead to buffer underflow

LOW 28

In Eclipse OpenJ9 versions up to 0.60, using -Xtrace to trace method arguments can lead to buffer underflow.

CVSS 4.0MEDIUM 5.8 Network Low privileges User interaction EPSS 0.0043 Published 2026-07-21 Fixed in 0.60.0 CWE-124

TI-2026-34574 CVE-2026-46968 · GHSA-hhf8-3x8g-6pff

Improper access control in Oracle Java SE

LOW 26

Vulnerability in Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00291 Published 2026-07-21 Partial fix CWE-284

TI-2026-13582 CVE-2026-16243 · GHSA-c5v6-97gv-39fw

Eclipse OMR : arraycmp SIMD implementation does not check if the number of bytes to compare is zero

LOW 26

In Eclipse OMR versions up to 0.11, the arraycmp SIMD implementation for Z and P does not check if the number of bytes to compare is zero.

CVSS 4.0MEDIUM 5.7 Network Low privileges User interaction EPSS 0.0052 Published 2026-07-21 Fixed in 0.11 CWE-125

TI-2026-34661 CVE-2026-47059 · GHSA-c4gh-498r-f8f5

Improper access control in Oracle Java SE

LOW 17

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00306 Published 2026-07-21 Partial fix CWE-284

TI-2026-34616 CVE-2026-47010 · GHSA-fhjm-g79r-vv57

Improper access control in Oracle Java SE

LOW 17

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00254 Published 2026-07-21 Partial fix CWE-284