RHSA-2026:52948: Important: java-21-ibm-semeru-certified-jdk security update
Important: java-21-ibm-semeru-certified-jdk security update
Other sources
The IBM Semeru Runtime Certified Edition 21 runtime environment.Security Fix(es): Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize (CVE-2026-41254) openjdk: Enhance TLS certificate handling (CVE-2026-46968) openjdk: Improve DTLS handshaking (Oracle CPU 2026-07) (CVE-2026-46917) openjdk: Enhance JPEG handling (Oracle CPU 2026-07) (CVE-2026-47010) openjdk: Enhance XBM image support (Oracle CPU 2026-07) (CVE-2026-47021) openjdk: Enhance Jar file processing (Oracle CPU 2026-07) (CVE-2026-47027) openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07) (CVE-2026-47059) openjdk: Enhance Jar handling (Oracle CPU 2026-07) (CVE-2026-47063) openjdk: Improve certification checking (Oracle CPU 2026-07) (CVE-2026-60147) Eclipse Foundation OpenJ9: Eclipse OpenJ9: Buffer underflow via tracing method arguments (CVE-2026-16439) Eclipse OMR: Eclipse OMR: Denial of service via improper input validation in arraycmp SIMD (CVE-2026-16243) Eclipse Foundation OpenJ9: Eclipse OpenJ9: Incorrect method delegation can lead to integrity issues (CVE-2026-16441) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 21-ibm-semeru-certified-jdk-21.0.12.0.8-2.el10_2 - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 21-ibm-semeru-certified-jdk-devel-21.0.12.0.8-2.el10_2 - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 21-ibm-semeru-certified-jdk-headless-21.0.12.0.8-2.el10_2 - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 21-ibm-semeru-certified-jdk-jmods-21.0.12.0.8-2.el10_2 - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 21-ibm-semeru-certified-jdk-src-21.0.12.0.8-2.el10_2 - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 21-ibm-semeru-certified-jdk-21.0.12.0.8-1.el10_0 - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 21-ibm-semeru-certified-jdk-headless-21.0.12.0.8-1.el10_0 - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 21-ibm-semeru-certified-jdk-21.0.12.0.8-2.el10_2.aa - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 21-ibm-semeru-certified-jdk-devel-21.0.12.0.8-2.el10_2.aa - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 21-ibm-semeru-certified-jdk-headless-21.0.12.0.8-2.el10_2.aa - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 21-ibm-semeru-certified-jdk-jmods-21.0.12.0.8-2.el10_2.aa - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 21-ibm-semeru-certified-jdk-src-21.0.12.0.8-2.el10_2.aa - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 21-ibm-semeru-certified-jdk-21.0.12.0.8-1.el10_0.aa - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 21-ibm-semeru-certified-jdk-headless-21.0.12.0.8-1.el10_0.aa
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:52948?
The severity of RHSA-2026:52948 is categorized as high, rated 7.
What software is affected by RHSA-2026:52948?
RHSA-2026:52948 affects multiple versions of Red Hat Enterprise Linux, including ARM 64, IBM z Systems, Power, and x86_64.
How do I fix RHSA-2026:52948?
To fix RHSA-2026:52948, you need to apply the security update for the IBM Semeru Certified JDK.
What is the nature of the vulnerability in RHSA-2026:52948?
The vulnerability in RHSA-2026:52948 involves security issues related to the Java runtime environment.
When was RHSA-2026:52948 published?
RHSA-2026:52948 was published on August 10, 2026.