Red Hat Product Errata RHSA-2026:52948 - Security Advisory Issued: 2026-08-10 Updated: 2026-08-10 RHSA-2026:52948 - Security Advisory Overview Updated Packages Synopsis Important: java-21-ibm-semeru-certified-jdk security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for java-21-ibm-semeru-certified-jdk is now available for Red Hat Enterprise Linux 10.0 Extended Update Support and Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The IBM Semeru Runtime Certified Edition 21 runtime environment. Security Fix(es): Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize (CVE-2026-41254) openjdk: Enhance TLS certificate handling (CVE-2026-46968) openjdk: Improve DTLS handshaking (Oracle CPU 2026-07) (CVE-2026-46917) openjdk: Enhance JPEG handling (Oracle CPU 2026-07) (CVE-2026-47010) openjdk: Enhance XBM image support (Oracle CPU 2026-07) (CVE-2026-47021) openjdk: Enhance Jar file processing (Oracle CPU 2026-07) (CVE-2026-47027) openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07) (CVE-2026-47059) openjdk: Enhance Jar handling (Oracle CPU 2026-07) (CVE-2026-47063) openjdk: Improve certification checking (Oracle CPU 2026-07) (CVE-2026-60147) Eclipse Foundation OpenJ9: Eclipse OpenJ9: Buffer underflow via tracing method arguments (CVE-2026-16439) Eclipse OMR: Eclipse OMR: Denial of service via improper input validation in arraycmp SIMD (CVE-2026-16243) Eclipse Foundation OpenJ9: Eclipse OpenJ9: Incorrect method delegation can lead to integrity issues (CVE-2026-16441) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Fixes BZ - 2459420 - CVE-2026-41254 Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize BZ - 2502751 - CVE-2026-46968 openjdk: Enhance TLS certificate handling BZ - 2502782 - CVE-2026-46917 openjdk: Improve DTLS handshaking (Oracle CPU 2026-07) BZ - 2502783 - CVE-2026-47010 openjdk: Enhance JPEG handling (Oracle CPU 2026-07) BZ - 2502784 - CVE-2026-47021 openjdk: Enhance XBM image support (Oracle CPU 2026-07) BZ - 2502791 - CVE-2026-47027 openjdk: Enhance Jar file processing (Oracle CPU 2026-07) BZ - 2502792 - CVE-2026-47059 openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07) BZ - 2502793 - CVE-2026-47063 openjdk: Enhance Jar handling (Oracle CPU 2026-07) BZ - 2503636 - CVE-2026-60147 openjdk: Improve certification checking (Oracle CPU 2026-07) BZ - 2503798 - CVE-2026-16439 Eclipse Foundation OpenJ9: Eclipse OpenJ9: Buffer underflow via tracing method arguments BZ - 2503988 - CVE-2026-16243 Eclipse OMR: Eclipse OMR: Denial of service via improper input validation in arraycmp SIMD BZ - 2503992 - CVE-2026-16441 Eclipse Foundation OpenJ9: Eclipse OpenJ9: Incorrect method delegation can lead to integrity issues CVEs CVE-2026-16243 CVE-2026-16439 CVE-2026-16441 CVE-2026-41254 CVE-2026-46917 CVE-2026-46968 CVE-2026-47010 CVE-2026-47021 CVE-2026-47027 CVE-2026-47059 CVE-2026-47063 CVE-2026-60147 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM java-21-ibm-semeru-certified-jdk-21.0.12.0.8-2.el10_2.src.rpm SHA-256: bab1bd4325d25b222b0edd5377fad660448a041902edc26a88e7f3ecf29586ab x86_64 java-21-ibm-semeru-certified-jdk-21.0.12.0.8-2.el10_2.x86_64.rpm SHA-256: f42688d300f78b57d218764da15e6bf4061aaf3ff363609d5f7733a6fbb6989f java-21-ibm-semeru-certified-jdk-devel-21.0.12.0.8-2.el10_2.x86_64.rpm SHA-256: 44af8ed8e3bff6c583dbcf7d5ff84d294478f5db5e23f1eb0066e35a21822099 java-21-ibm-semeru-certified-jdk-headless-21.0.12.0.8-2.el10_2.x86_64.rpm SHA-256: 5452e6197362b9c8aef5fd43d2846c0b994c83e199c474b2fcb0f02ec35bef68 java-21-ibm-semeru-certified-jdk-jmods-21.0.12.0.8-2.el10_2.x86_64.rpm SHA-256: 457f67d7f55b1ced9f5fcafb4e57fa238ace0580492a2aa0f890967f5a6027a0 java-21-ibm-semeru-certified-jdk-src-21.0.12.0.8-2.el10_2.x86_64.rpm SHA-256: 7ab8fbbdf388083daf1e02a45aa1f2b9a27b18cea13f20d34ae8dcf13a2ba2e7 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM java-21-ibm-semeru-certified-jdk-21.0.12.0.8-2.el10_2.src.rpm SHA-256: bab1bd4325d25b222b0edd5377fad660448a041902edc26a88e7f3ecf29586ab x86_64 java-21-ibm-semeru-certified-jdk-21.0.12.0.8-2.el10_2.x86_64.rpm SHA-256: f42688d300f78b57d218764da15e6bf4061aaf3ff363609d5f7733a6fbb6989f java-21-ibm-semeru-certified-jdk-devel-21.0.12.0.8-2.el10_2.x86_64.rpm SHA-256: 44af8ed8e3bff6c583dbcf7d5ff84d294478f5db5e23f1eb0066e35a21822099 java-21-ibm-semeru-certified-jdk-headless-21.0.12.0.8-2.el10_2.x86_64.rpm SHA-256: 5452e6197362b9c8aef5fd43d2846c0b994c83e199c474b2fcb0f02ec35bef68 java-21-ibm-semeru-certified-jdk-jmods-21.0.12.0.8-2.el10_2.x86_64.rpm SHA-256: 457f67d7f55b1ced9f5fcafb4e57fa238ace0580492a2aa0f890967f5a6027a0 java-21-ibm-semeru-certified-jdk-src-21.0.12.0.8-2.el10_2.x86_64.rpm SHA-256: 7ab8fbbdf388083daf1e02a45aa1f2b9a27b18cea13f20d34ae8dcf13a2ba2e7 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM java-21-ibm-semeru-certified-jdk-21.0.12.0.8-1.el10_0.src.rpm SHA-256: 2642452ee4db40320332e33152591304a008a7d4d941e30747631aa4c1f87307 x86_64 java-21-ibm-semeru-certified-jdk-21.0.12.0.8-1.el10_0.x86_64.rpm SHA-256: 8e86cb81074f3ad4fc65e6ea1aaa5c59aa63e520de611fd39da38de9343e802a java-21-ibm-semeru-certified-jdk-headless-21.0.12.0.8-1.el10_0.x86_64.rpm SHA-256: 14c163e0f40631db1ef253015cc1b52ece0a1c4f53f11693de7ec32f09b11a46 Red Hat Enterprise Linux for IBM z Systems 10 SRPM java-21-ibm-semeru-certified-jdk-21.0.12.0.8-2.el10_2.src.rpm SHA-256: bab1bd4325d25b222b0edd5377fad660448a041902edc26a88e7f3ecf29586ab s390x java-21-ibm-semeru-certified-jdk-21.0.12.0.8-2.el10_2.s390x.rpm SHA-256: ef655f1d81834a3e8b1685ce13bbbc4db525074d9deb93c7b76a6ec3fd7400ad java-21-ibm-semeru-certified-jdk-devel-21.0.12.0.8-2.el10_2.s390x.rpm SHA-256: 6367a6815ba667190234ee9f1de04389e73007824f1a4d9c946f6e2a848b9d9f java-21-ibm-semeru-certified-jdk-headless-21.0.12.0.8-2.el10_2.s390x.rpm SHA-256: ef455e90141a3fad248f289f471e9ff103f88ce5a0d43151178bc96ecd44069a java-21-ibm-semeru-certified-jdk-jmods-21.0.12.0.8-2.el10_2.s390x.rpm SHA-256: e27715662447a3486c6740a1b47da20204fa08916a4b94fd9e8d2abeab17fad6 java-21-ibm-semeru-certified-jdk-src-21.0.12.0.8-2.el10_2.s390x.rpm SHA-256: 9c3bad441ba60cf91ff03a1fa80a9843a4e6d27d384f5ed1f48b04ab5f92bb1e Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM java-21-ibm-semeru-certified-jdk-21.0.12.0.8-2.el10_2.src.rpm SHA-256: bab1bd4325d25b222b0edd5377fad660448a041902edc26a88e7f3ecf29586ab s390x java-21-ibm-semeru-certified-jdk-21.0.12.0.8-2.el10_2.s390x.rpm SHA-256: ef655f1d81834a3e8b1685ce13bbbc4db525074d9deb93c7b76a6ec3fd7400ad java-21-ibm-semeru-certified-jdk-devel-21.0.12.0.8-2.el10_2.s390x.rpm SHA-256: 6367a6815ba667190234ee9f1de04389e73007824f1a4d9c946f6e2a848b9d9f java-21-ibm-semeru-certified-jdk-headless-21.0.12.0.8-2.el10_2.s390x.rpm SHA-256: ef455e90141a3fad248f289f471e9ff103f88ce5a0d43151178bc96ecd44069a java-21-ibm-semeru-certified-jdk-jmods-21.0.12.0.8-2.el10_2.s390x.rpm SHA-256: e27715662447a3486c6740a1b47da20204fa08916a4b94fd9e8d2abeab17fad6 java-21-ibm-semeru-certified-jdk-src-21.0.12.0.8-2.el10_2.s390x.rpm SHA-256: 9c3bad441ba60cf91ff03a1fa80a9843a4e6d27d384f5ed1f48b04ab5f92bb1e Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 SRPM java-21-ibm-semeru-certified-jdk-21.0.12.0.8-1.el10_0.src.rpm SHA-256: 2642452ee4db40320332e33152591304a008a7d4d941e30747631aa4c1f87307 s390x java-21-ibm-semeru-certified-jdk-21.0.12.0.8-1.el10_0.s390x.rpm SHA-256: 124b9d5798c31e81654783b52bd4fce0db6a8964adebbfa9a26ca8389d35b1c6 java-21-ibm-semeru-certified-jdk-headless-21.0.12.0.8-1.el10_0.s390x.rpm SHA-256: f3cf08ddbc60e10a111322d9a78af0b2931eaa8eb8227b9a31a6a955d187c635 Red Hat Enterprise Linux for Power, little endian 10 SRPM java-21-ibm-semeru-certified-jdk-21.0.12.0.8-2.el10_2.src.rpm SHA-256: bab1bd4325d25b222b0edd5377fad660448a041902edc26a88e7f3ecf29586ab ppc64le java-21-ibm-semeru-certified-jdk-21.0.12.0.8-2.el10_2.ppc64le.rpm SHA-256: 699238e07d9117be1179ef148c34a2021b5165c8a0ddc235e4727fa7c2a0006c java-21-ibm-semeru-certified-jdk-devel-21.0.12.0.8-2.el10_2.ppc64le.rpm SHA-256: 8d19c2b7b200cdc54ac73d88fb10a283904a85c4dbf060412db1c5fff91f62f3 java-21-ibm-semeru-certified-jdk-headless-21.0.12.0.8-2.el10_2.ppc64le.rpm SHA-256: a971964cf47aaade