RHSA-2026:52949: Important: java-1.8.0-ibm security update
IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.Security Fix(es): Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize (CVE-2026-41254) openjdk: Enhance TLS certificate handling (CVE-2026-46968) openjdk: Enhance JPEG handling (Oracle CPU 2026-07) (CVE-2026-47010) openjdk: Enhance XBM image support (Oracle CPU 2026-07) (CVE-2026-47021) openjdk: Enhance Jar file processing (Oracle CPU 2026-07) (CVE-2026-47027) openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07) (CVE-2026-47059) openjdk: Enhance Jar handling (Oracle CPU 2026-07) (CVE-2026-47063) openjdk: Improve Nashorn index handling (Oracle CPU 2026-07) (CVE-2026-47057) openjdk: Enhance Dataview Implementation (Oracle CPU 2026-07) (CVE-2026-47058) openjdk: Improve certification checking (Oracle CPU 2026-07) (CVE-2026-60147) Eclipse Foundation OpenJ9: Eclipse OpenJ9: Buffer underflow via tracing method arguments (CVE-2026-16439) Eclipse OMR: Eclipse OMR: Denial of service via improper input validation in arraycmp SIMD (CVE-2026-16243) Eclipse Foundation OpenJ9: Eclipse OpenJ9: Incorrect method delegation can lead to integrity issues (CVE-2026-16441) java-1.8.0-ibm: Arbitrary class loading and instantiation via malicious IIOP server (CVE-2026-8400) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Other sources
Important: java-1.8.0-ibm security update
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 1.8.0-ibm-1.8.0.8.70-1.el8_10 - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 1.8.0-ibm-demo-1.8.0.8.70-1.el8_10 - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 1.8.0-ibm-devel-1.8.0.8.70-1.el8_10 - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 1.8.0-ibm-headless-1.8.0.8.70-1.el8_10 - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 1.8.0-ibm-jdbc-1.8.0.8.70-1.el8_10 - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 1.8.0-ibm-plugin-1.8.0.8.70-1.el8_10 - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 1.8.0-ibm-src-1.8.0.8.70-1.el8_10 - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 1.8.0-ibm-webstart-1.8.0.8.70-1.el8_10 - Upgrade
Upgrade
Eclipse OpenJ9to a version that resolves this vulnerability.Patch CVE-2026-16439 - Upgrade
Upgrade
Eclipse OpenJ9to a version that resolves this vulnerability.Patch CVE-2026-16441 - Upgrade
Upgrade
Eclipse OMRto a version that resolves this vulnerability.Patch CVE-2026-16243 - Upgrade
Upgrade
java-1.8.0-ibmto a version that resolves this vulnerability.Patch CVE-2026-8400 - Upgrade
Upgrade
openjdkto a version that resolves this vulnerability.Patch CVE-2026-47059 - Upgrade
Upgrade
openjdkto a version that resolves this vulnerability.Patch CVE-2026-47058 - Upgrade
Upgrade
openjdkto a version that resolves this vulnerability.Patch CVE-2026-47010 - Upgrade
Upgrade
openjdkto a version that resolves this vulnerability.Patch CVE-2026-47027 - Upgrade
Upgrade
openjdkto a version that resolves this vulnerability.Patch CVE-2026-47063 - Upgrade
Upgrade
openjdkto a version that resolves this vulnerability.Patch CVE-2026-46968 - Upgrade
Upgrade
openjdkto a version that resolves this vulnerability.Patch CVE-2026-47021 - Upgrade
Upgrade
openjdkto a version that resolves this vulnerability.Patch CVE-2026-47057 - Upgrade
Upgrade
openjdkto a version that resolves this vulnerability.Patch CVE-2026-60147 - Upgrade
Upgrade
IBM Java SE version 8 (java-1.8.0-ibm) / Little CMS (lcms2)to a version that resolves this vulnerability.Patch CVE-2026-41254
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:52949?
The severity of RHSA-2026:52949 is classified as high with a score of 7.
What does the RHSA-2026:52949 vulnerability address?
RHSA-2026:52949 addresses a security issue in the java-1.8.0-ibm package.
How do I fix RHSA-2026:52949?
To fix RHSA-2026:52949, update the java-1.8.0-ibm package to the latest version provided by Red Hat.
Which software is affected by RHSA-2026:52949?
RHSA-2026:52949 affects Red Hat Enterprise Linux for Power, IBM z Systems, and x86_64 architectures.
When was RHSA-2026:52949 published?
RHSA-2026:52949 was published on August 10, 2026.