RHSA-2026:95527: Critical: OpenJDK 8u512 Security Update for Portable Linux Builds
Critical: OpenJDK 8u512 Security Update for Portable Linux Builds
Other sources
The OpenJDK 8 packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.This release of the Red Hat build of OpenJDK 8 (8u512) for portable Linux serves as a replacement for Red Hat build of OpenJDK 8 (8u502 and 8u504) and includes security and bug fixes as well as enhancements. For further information, refer to the release notes linked to in the References section.Security Fix(es): JDK: Enhance PKCS5 padding (CVE-2026-83374) JDK: Enhance TLS certificate handling (CVE-2026-83376) JDK: Enhance LDAP logins (CVE-2026-83380) JDK: Enhance SASL Authentication (CVE-2026-83381) JDK: Enhance WebRowSets (CVE-2026-83387) JDK: Enhance HTTP Client Response Handling (CVE-2026-83395) JDK: Enhance Certificate Name Checks (CVE-2026-87294) JDK: Enhance XPath Expressions (CVE-2026-87290) JDK: Enhance Network Clients (CVE-2026-87292) JDK: Enhance RMI connections (CVE-2026-87293) JDK: Enhance Certificate Constraint Checking (CVE-2026-101516) JDK: Enhance XML Processing (CVE-2026-83400) JDK: Enhance JPEG loading (CVE-2026-91334) JDK: Enhance Template Handling (CVE-2026-87367) JDK: Enhance Image Handling (CVE-2026-91335) JDK: Enhance Preferences (CVE-2026-91380) JDK: Enhance TLS handshakes (CVE-2026-91373) JDK: Enhance Font Rendering (CVE-2026-91381) JDK: Enhance Image Processing (CVE-2026-91382) JDK: Enhance jstatd (CVE-2026-91374) JDK: Enhance Pack200 unpacking (CVE-2026-91395) JDK: Improve Pack200 handling (CVE-2026-91396) JDK: Enhance diagnostic sessions (CVE-2026-91397) JDK: Enhance SOCKS5 support (CVE-2026-91398) JDK: Enhance MIDI file handling (CVE-2026-91400) JDK: Enhance zipfs (CVE-2026-91410) JDK: Enhance JGSS (CVE-2026-91411) JDK: Enhance CORBA (CVE-2026-91417) JDK: Enhance font rendering (CVE-2026-91415) JDK: Enhance HTTP server parsing (CVE-2026-91451) JDK: Enhance HTTP Server Handler (CVE-2026-91452) JDK: Improve HTTP headers (CVE-2026-91453) JDK: Enhance GIF loading (CVE-2026-91418) JDK: Enhance TLS Extensions (CVE-2026-91461) JDK: Enhance krb5 tokens (CVE-2026-91462) JDK: Enhance krb5 client (CVE-2026-91463) JDK: Enhance Kerberos validation (CVE-2026-91464) JDK: CA Enhancements (CVE-2026-91403) JDK: CA certificate improvements (CVE-2026-114820) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Red Hat build of OpenJDK 8 for portable Linuxto a version that resolves this vulnerability.Fixed in 8u512 - Operational
Before applying the OpenJDK 8u512 update, ensure all previously released errata relevant to the system have been applied.