Red Hat Product Errata RHSA-2026:42876 - Security Advisory Issued: 2026-07-23 Updated: 2026-07-23 RHSA-2026:42876 - Security Advisory Overview Updated Packages Synopsis Important: java-1.8.0-openjdk security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): JDK: Enhance TLS certificate handling (CVE-2026-46968) JDK: Enhance JPEG handling (CVE-2026-47010) JDK: Enhance XBM image support (CVE-2026-47021) JDK: Enhance Jar file processing (CVE-2026-47027) JDK: Improve certification checking (CVE-2026-60147) JDK: Enhance AWT ImagingLib (CVE-2026-47059) JDK: Enhance Jar handling (CVE-2026-47063) JDK: Improve Nashorn index handling (CVE-2026-47057) JDK: Enhance Dataview Implementation (CVE-2026-47058) JDK: Update LCMS to 2.19 (CVE-2026-41254) Enhancements: For the last couple of years, OpenJDK has used a single build shared among multiple RPMs and a tarball available on the customer portal. The single "portable" build has a release number ('p') and each RPM has its own release number ('r'). However, the RPM naming only showed the RPM release number, while the version output from the build showed the portable release number, making it unclear that they were different numbers. From this release onwards, a release field of the form 'p.r' is always used for RPMs and the version output shows 'p'. (RHEL-212138) Bug Fix(es): In previous releases, the RPM did not correctly own the subdirectories used for documentation in /usr/share/doc and /usr/share/javadoc. This is fixed in this release, so these subdirectories will be removed when the package is uninstalled. (RHEL-212148) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64 Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le Fixes BZ - 2459420 - CVE-2026-41254 Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize BZ - 2502751 - CVE-2026-46968 openjdk: Enhance TLS certificate handling BZ - 2502783 - CVE-2026-47010 openjdk: OpenJDK: Enhance JPEG handling (Oracle CPU 2026-07) BZ - 2502784 - CVE-2026-47021 openjdk: OpenJDK: Enhance XBM image support (Oracle CPU 2026-07) BZ - 2502791 - CVE-2026-47027 openjdk: OpenJDK: Enhance Jar file processing (Oracle CPU 2026-07) BZ - 2502792 - CVE-2026-47059 openjdk: OpenJDK: Enhance AWT ImagingLib (Oracle CPU 2026-07) BZ - 2502793 - CVE-2026-47063 openjdk: OpenJDK: Enhance Jar handling (Oracle CPU 2026-07) BZ - 2502794 - CVE-2026-47057 openjdk: OpenJDK: Improve Nashorn index handling (Oracle CPU 2026-07) BZ - 2502795 - CVE-2026-47058 openjdk: OpenJDK: Enhance Dataview Implementation (Oracle CPU 2026-07) BZ - 2503636 - CVE-2026-60147 openjdk: OpenJDK: Improve certification checking (Oracle CPU 2026-07) CVEs CVE-2026-41254 CVE-2026-46968 CVE-2026-47010 CVE-2026-47021 CVE-2026-47027 CVE-2026-47057 CVE-2026-47058 CVE-2026-47059 CVE-2026-47063 CVE-2026-60147 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 SRPM java-1.8.0-openjdk-1.8.0.502.b07-1.1.el7_9.src.rpm SHA-256: 99eca35f1fbbe85b9c07f5cde641059e5f8e28b4d8e76bcb122cd918303a4ea7 x86_64 java-1.8.0-openjdk-1.8.0.502.b07-1.1.el7_9.i686.rpm SHA-256: c6414a2111ea183f00a8bcefd8b30b168ca4a1dc5fe5b007399c764cd18fbe7e java-1.8.0-openjdk-1.8.0.502.b07-1.1.el7_9.x86_64.rpm SHA-256: 5919ef11ce569844ea5ee2fea86654e3b768847d2e483c2a27ba69e2f8d94a68 java-1.8.0-openjdk-accessibility-1.8.0.502.b07-1.1.el7_9.i686.rpm SHA-256: ee01b89e950d1841756908a44d3625d91012bc770fb0a6bf7596d334fc85cf80 java-1.8.0-openjdk-accessibility-1.8.0.502.b07-1.1.el7_9.x86_64.rpm SHA-256: bd24ce49e2f41a0133e581cbe71a334c5c201880ad36ef6f9e9e772ddb680323 java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-1.1.el7_9.i686.rpm SHA-256: 4f5db1adfd775202f7182890678cf097ad887426af3bf3984cd0d211cad192d6 java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-1.1.el7_9.i686.rpm SHA-256: 4f5db1adfd775202f7182890678cf097ad887426af3bf3984cd0d211cad192d6 java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-1.1.el7_9.x86_64.rpm SHA-256: 324bd979ad3b412eb387a65604b73708597b1312b1a460f95875035311faa070 java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-1.1.el7_9.x86_64.rpm SHA-256: 324bd979ad3b412eb387a65604b73708597b1312b1a460f95875035311faa070 java-1.8.0-openjdk-demo-1.8.0.502.b07-1.1.el7_9.i686.rpm SHA-256: a159e28221a3daa6e3c972ef195892cc3bb29e1952960380f2b79e52898b1ada java-1.8.0-openjdk-demo-1.8.0.502.b07-1.1.el7_9.x86_64.rpm SHA-256: 7484b2f9efd6121727eee4c39226349af78bf548c6717c58a66bab97e9a3938c java-1.8.0-openjdk-devel-1.8.0.502.b07-1.1.el7_9.i686.rpm SHA-256: 2dc1ef66c8e5175327ec875d2e77963720b0290461be4f88c7ae70b137076273 java-1.8.0-openjdk-devel-1.8.0.502.b07-1.1.el7_9.x86_64.rpm SHA-256: 3546d2002ef9cba32da498db8c14cc44e5052ac571bf308187def923992f46de java-1.8.0-openjdk-headless-1.8.0.502.b07-1.1.el7_9.i686.rpm SHA-256: f6be39144c46100b2f1e6a4c2e37574bc68a61318adbf98ed7c3134002e1503f java-1.8.0-openjdk-headless-1.8.0.502.b07-1.1.el7_9.x86_64.rpm SHA-256: d2f55d5750fb6ab537b18efdd2a363cb527ec91c58174242c4befcfbd0234b53 java-1.8.0-openjdk-javadoc-1.8.0.502.b07-1.1.el7_9.noarch.rpm SHA-256: f297af77b1768d0f977e55d3fb6a64edac24c14a734379cb6f51f472c7b5303b java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-1.1.el7_9.noarch.rpm SHA-256: a36dfacf2b2d92e39d38107ca218d098a49bf1764279f6a01240012a3428a350 java-1.8.0-openjdk-src-1.8.0.502.b07-1.1.el7_9.i686.rpm SHA-256: a77451a011986c5e7a40f785eec98e6c3195da6d98914d788cf26a3c47326b24 java-1.8.0-openjdk-src-1.8.0.502.b07-1.1.el7_9.x86_64.rpm SHA-256: a89513479a2cca84d847a50741581a70b655d2a5628b8e0def25dbc2830fb511 Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 SRPM java-1.8.0-openjdk-1.8.0.502.b07-1.1.el7_9.src.rpm SHA-256: 99eca35f1fbbe85b9c07f5cde641059e5f8e28b4d8e76bcb122cd918303a4ea7 s390x java-1.8.0-openjdk-1.8.0.502.b07-1.1.el7_9.s390x.rpm SHA-256: 3272becbb9fefb4f4c59688469dfa26bf45399852f59f38d59f8d37ff7c3d585 java-1.8.0-openjdk-accessibility-1.8.0.502.b07-1.1.el7_9.s390x.rpm SHA-256: 977330b5d3d0360321280bfa422f071c74178603a8b0f8cf1dfe879c09c33e12 java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-1.1.el7_9.s390x.rpm SHA-256: db1c17c77b093213bb3b6ed4acdb38ab44c0e980558f24f900d86cf09e1bb512 java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-1.1.el7_9.s390x.rpm SHA-256: db1c17c77b093213bb3b6ed4acdb38ab44c0e980558f24f900d86cf09e1bb512 java-1.8.0-openjdk-demo-1.8.0.502.b07-1.1.el7_9.s390x.rpm SHA-256: 41877bc0c56db810386c666ea477b8fc468ca1325b5f6e8625c6ddf16fae9546 java-1.8.0-openjdk-devel-1.8.0.502.b07-1.1.el7_9.s390x.rpm SHA-256: 66fd2a9a9d8bf8005e80a2f85723ce1cdd7aaa48f31bbe02fd5a7d561daf4a28 java-1.8.0-openjdk-headless-1.8.0.502.b07-1.1.el7_9.s390x.rpm SHA-256: 7e534ab618f58fbe5b1c3a4c7fd9d4254ffa938ed9718c5adec9ef406e48f0ee java-1.8.0-openjdk-javadoc-1.8.0.502.b07-1.1.el7_9.noarch.rpm SHA-256: f297af77b1768d0f977e55d3fb6a64edac24c14a734379cb6f51f472c7b5303b java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-1.1.el7_9.noarch.rpm SHA-256: a36dfacf2b2d92e39d38107ca218d098a49bf1764279f6a01240012a3428a350 java-1.8.0-openjdk-src-1.8.0.502.b07-1.1.el7_9.s390x.rpm SHA-256: 4ed05de33d08de860b05e82982eae8e704eb170231ffad5a78a09328877d8161 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 SRPM java-1.8.0-openjdk-1.8.0.502.b07-1.1.el7_9.src.rpm SHA-256: 99eca35f1fbbe85b9c07f5cde641059e5f8e28b4d8e76bcb122cd918303a4ea7 ppc64 java-1.8.0-openjdk-1.8.0.502.b07-1.1.el7_9.ppc64.rpm SHA-256: 1bb70fe25f40c24a6d70501a55f8bda7e19916765bc393dac35fdbe939d1f31c java-1.8.0-openjdk-accessibility-1.8.0.502.b07-1.1.el7_9.ppc64.rpm SHA-256: 2d6e20f0208b606febced4835a7adae6b8ad7f35b6e296aff4681d6ca56b0c36 java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-1.1.el7_9.ppc64.rpm SHA-256: 4b7a93b81904426d429d2e654b835d2fc51e3dc7f7e303c452d6fc1b5beca861 java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-1.1.el7_9.ppc64.rpm SHA-256: 4b7a93b81904426d429d2e654b835d2fc51e3dc7f7e303c452d6fc1b5beca861 java-1.8.0-openjdk-demo-1.8.0.502.b07-1.1.el7_9.ppc64.rpm SHA-256: 2c567637689de35aa7cc486042bd69cffa959f4863e67708d593676fbe043344 java-1.8.0-openjdk-devel-1.8.0.502.b07-1.1.el7_9.ppc64.rpm SHA-256: a92174da1fe8cd6f9ba7be3bdac9ca91d3c07446ff67414e9d9a2a4c797d707e java-1.8.0-openjdk-headless-1.8.0.502.b07-1.1.el7_9.ppc64.rpm SHA-256: c12fc56c8ae5df863034f47da803b78269d137a969e4adcd122a51c5ceab29a3 java-1.8.0-openjdk-javadoc-1.8.0.502.b07-1.1.el7_9.noarch.rpm SHA-256: f297af77b1768d0f977e55d3fb6a64edac24c14a734379cb6f51f472c7b5303b java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-1.1.el7_9.noarch.rpm SHA-256: a36dfacf2b2d92e39d38107ca218d098a49bf1764279f6a01240012a3428a350 jav