Red Hat Security Advisory

RHSA-2026:72888

java-21-ibm-semeru-certified-jdk security update

Released 2026-09-28 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Supplementary (v. 10) java-21-ibm-semeru-certified-jdk-1:21.0.12.1.1-2.el10_2, java-21-ibm-semeru-certified-jdk-devel-1:21.0.12.1.1-2.el10_2, java-21-ibm-semeru-certified-jdk-headless-1:21.0.12.1.1-2.el10_2 +2
Red Hat Enterprise Linux Supplementary EUS (v. 10.0) java-21-ibm-semeru-certified-jdk-1:21.0.12.1.1-1.el10_0, java-21-ibm-semeru-certified-jdk-headless-1:21.0.12.1.1-1.el10_0

TI-2026-13738 CVE-2026-16440 · GHSA-jxfm-5353-qwhv

MEDIUM 59

In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault.

CVSS 4.0MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00297 Published 2026-08-19 Fixed in 0.60 CWE-674

TI-2026-49600 CVE-2026-70907 · GHSA-x2cm-pmmm-v6xc

LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00278 Published 2026-08-18 Partial fix CWE-284

TI-2026-43952 CVE-2026-61308 · GHSA-wvj6-93q8-xhcm

LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1MEDIUM 6.8 Network No auth No interaction EPSS 0.0031 Published 2026-08-18 Partial fix CWE-284

TI-2026-43254 CVE-2026-60589 · GHSA-47g6-3p6h-6cpc

LOW 17

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00265 Published 2026-08-18 Partial fix CWE-200