RHSA-2026:72888: Moderate: java-21

Synopsis Moderate: java-21-ibm-semeru-certified-jdk security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for java-21-ibm-semeru-certified-jdk is now available for Red Hat Enterprise Linux 10.0 Extended Update Support and Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The IBM Semeru Runtime Certified Edition 21 runtime environment. Security Fix(es): - OpenJDK: Improve Resource Resolving (2026-08 Security Update) (CVE-2026-60589) - OpenJDK: Enhance HTTP Connections (2026-08 Security Update) (CVE-2026-61308) - OpenJDK: Enhance TLS server (2026-08 Security Update) (CVE-2026-70907) - openj9: Eclipse OpenJ9: Denial of Service via crafted .class file (CVE-2026-16440) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Affected Products - Red Hat Enterprise Linux for x86_64 10 x86_64 - Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 - Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 - Red Hat Enterprise Linux for IBM z Systems 10 s390x - Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x - Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x - Red Hat Enterprise Linux for Power, little endian 10 ppc64le - Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le - Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le - Red Hat Enterprise Linux for ARM 64 10 aarch64 - Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 - Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Fixes - BZ - 2513035 - CVE-2026-60589 OpenJDK: Improve Resource Resolving (2026-08 Security Update) - BZ - 2513037 - CVE-2026-61308 OpenJDK: Enhance HTTP Connections (2026-08 Security Update) - BZ - 2513038 - CVE-2026-70907 OpenJDK: Enhance TLS server (2026-08 Security Update) - BZ - 2519478 - CVE-2026-16440 openj9: Eclipse OpenJ9: Denial of Service via crafted .class file Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 | SRPM | | java-21-ibm-semeru-certified-jdk-21.0.12.1.1-2.el10_2.src.rpm | SHA-256: def8934d43b51b270d7fbbcb5a105dce22ef7820f012bc7b2382f598101b8b7c | | x86_64 | | java-21-ibm-semeru-certified-jdk-21.0.12.1.1-2.el10_2.x86_64.rpm | SHA-256: bd6faaa2db74d528bbdaacf6ea953769c3b6d4b48c9b1370ad90a5f532825141 | | java-21-ibm-semeru-certified-jdk-devel-21.0.12.1.1-2.el10_2.x86_64.rpm | SHA-256: 6d79c4b25b8e2dfa065cbe6688b9051f47fb746e9d0a49fa50ac3da73aa1c2aa | | java-21-ibm-semeru-certified-jdk-headless-21.0.12.1.1-2.el10_2.x86_64.rpm | SHA-256: f7b636138baf71ebc0b42e4e8051769fc069fbd0cb9cab8602f6edd6e7a1274b | | java-21-ibm-semeru-certified-jdk-jmods-21.0.12.1.1-2.el10_2.x86_64.rpm | SHA-256: cb3ff3960e86332989a3b3fb58452e76e9a84d45c9bde3637d29bac68b67abbd | | java-21-ibm-semeru-certified-jdk-src-21.0.12.1.1-2.el10_2.x86_64.rpm | SHA-256: af2857390dc02c9f4c9c0fc5d9d1f74af6f3247c099ad98989c18deb55261b36 | Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 | SRPM | | java-21-ibm-semeru-certified-jdk-21.0.12.1.1-2.el10_2.src.rpm | SHA-256: def8934d43b51b270d7fbbcb5a105dce22ef7820f012bc7b2382f598101b8b7c | | x86_64 | | java-21-ibm-semeru-certified-jdk-21.0.12.1.1-2.el10_2.x86_64.rpm | SHA-256: bd6faaa2db74d528bbdaacf6ea953769c3b6d4b48c9b1370ad90a5f532825141 | | java-21-ibm-semeru-certified-jdk-devel-21.0.12.1.1-2.el10_2.x86_64.rpm | SHA-256: 6d79c4b25b8e2dfa065cbe6688b9051f47fb746e9d0a49fa50ac3da73aa1c2aa | | java-21-ibm-semeru-certified-jdk-headless-21.0.12.1.1-2.el10_2.x86_64.rpm | SHA-256: f7b636138baf71ebc0b42e4e8051769fc069fbd0cb9cab8602f6edd6e7a1274b | | java-21-ibm-semeru-certified-jdk-jmods-21.0.12.1.1-2.el10_2.x86_64.rpm | SHA-256: cb3ff3960e86332989a3b3fb58452e76e9a84d45c9bde3637d29bac68b67abbd | | java-21-ibm-semeru-certified-jdk-src-21.0.12.1.1-2.el10_2.x86_64.rpm | SHA-256: af2857390dc02c9f4c9c0fc5d9d1f74af6f3247c099ad98989c18deb55261b36 | Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 | SRPM | | java-21-ibm-semeru-certified-jdk-21.0.12.1.1-1.el10_0.src.rpm | SHA-256: 59a5f802c995da7bccccb1d83a42febdc8d63c15f0442b0783b2eda16b98a8b4 | | x86_64 | | java-21-ibm-semeru-certified-jdk-21.0.12.1.1-1.el10_0.x86_64.rpm | SHA-256: 841ef66c7bddf9a9730707db906de7ceb22e49b436b118145d8d5a64a7117a56 | | java-21-ibm-semeru-certified-jdk-headless-21.0.12.1.1-1.el10_0.x86_64.rpm | SHA-256: 9505eeeffc6666ec25418ce4a91870c902fff1502fb87793d09eda8d8623f0fd | Red Hat Enterprise Linux for IBM z Systems 10 | SRPM | | java-21-ibm-semeru-certified-jdk-21.0.12.1.1-2.el10_2.src.rpm | SHA-256: def8934d43b51b270d7fbbcb5a105dce22ef7820f012bc7b2382f598101b8b7c | | s390x | | java-21-ibm-semeru-certified-jdk-21.0.12.1.1-2.el10_2.s390x.rpm | SHA-256: 9c26f6b10815bc489907728da784d46477d3dba6b6d608f73825f2885e3252d1 | | java-21-ibm-semeru-certified-jdk-devel-21.0.12.1.1-2.el10_2.s390x.rpm | SHA-256: 534ab3ff51914a17455cc5697be15e756ebfd36c5053f35fa48174d8ab612001 | | java-21-ibm-semeru-certified-jdk-headless-21.0.12.1.1-2.el10_2.s390x.rpm | SHA-256: 43cc0eb5aeab405e3b3fa13e2ec7ebe9666d478971c97479eee04beef61abdd6 | | java-21-ibm-semeru-certified-jdk-jmods-21.0.12.1.1-2.el10_2.s390x.rpm | SHA-256: c46ae24e172428d6c370a18c29691e8f2479bc3f86d50c5b0d32475e6a280134 | | java-21-ibm-semeru-certified-jdk-src-21.0.12.1.1-2.el10_2.s390x.rpm | SHA-256: 519eb96fd31ed876a087d592167cc17026e94b7d110979fb7cc346f0bcae84b4 | Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 | SRPM | | java-21-ibm-semeru-certified-jdk-21.0.12.1.1-2.el10_2.src.rpm | SHA-256: def8934d43b51b270d7fbbcb5a105dce22ef7820f012bc7b2382f598101b8b7c | | s390x | | java-21-ibm-semeru-certified-jdk-21.0.12.1.1-2.el10_2.s390x.rpm | SHA-256: 9c26f6b10815bc489907728da784d46477d3dba6b6d608f73825f2885e3252d1 | | java-21-ibm-semeru-certified-jdk-devel-21.0.12.1.1-2.el10_2.s390x.rpm | SHA-256: 534ab3ff51914a17455cc5697be15e756ebfd36c5053f35fa48174d8ab612001 | | java-21-ibm-semeru-certified-jdk-headless-21.0.12.1.1-2.el10_2.s390x.rpm | SHA-256: 43cc0eb5aeab405e3b3fa13e2ec7ebe9666d478971c97479eee04beef61abdd6 | | java-21-ibm-semeru-certified-jdk-jmods-21.0.12.1.1-2.el10_2.s390x.rpm | SHA-256: c46ae24e172428d6c370a18c29691e8f2479bc3f86d50c5b0d32475e6a280134 | | java-21-ibm-semeru-certified-jdk-src-21.0.12.1.1-2.el10_2.s390x.rpm | SHA-256: 519eb96fd31ed876a087d592167cc17026e94b7d110979fb7cc346f0bcae84b4 | Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 | SRPM | | java-21-ibm-semeru-certified-jdk-21.0.12.1.1-1.el10_0.src.rpm | SHA-256: 59a5f802c995da7bccccb1d83a42febdc8d63c15f0442b0783b2eda16b98a8b4 | | s390x | | java-21-ibm-semeru-certified-jdk-21.0.12.1.1-1.el10_0.s390x.rpm | SHA-256: 76f9f0846df4acaa4b5363292a8b5b6a5652b8eab74e81edd08c05517439dd8a | | java-21-ibm-semeru-certified-jdk-headless-21.0.12.1.1-1.el10_0.s390x.rpm | SHA-256: a6c243ed430b1ae1aedbe5cdb140eb6a38186b314fa73ca8d1b5e992a915ae0d | Red Hat Enterprise Linux for Power, little endian 10 | SRPM | | java-21-ibm-semeru-certified-jdk-21.0.12.1.1-2.el10_2.src.rpm | SHA-256: def8934d43b51b270d7fbbcb5a105dce22ef7820f012bc7b2382f598101b8b7c | | ppc64le | | java-21-ibm-semeru-certified-jdk-21.0.12.1.1-2.el10_2.ppc64le.rpm | SHA-256: 09bb989d6102d3d78a9b42e1388317d6b74016d254518bff608a8c671319941f | | java-21-ibm-semeru-certified-jdk-devel-21.0.12.1.1-2.el10_2.ppc64le.rpm | SHA-256: 709966d16e701d6cc80154e2b5c0ffb3e4ee1664bf2fa57170a85e449f046a13 | | java-21-ibm-semeru-certified-jdk-headless-21.0.12.1.1-2.el10_2.ppc64le.rpm | SHA-256: 7f2c2d2cf23a7bdaf89a310e8eed4eaee10c52166654a801aa1fd0eaef71a548 | | java-21-ibm-semeru-certified-jdk-jmods-21.0.12.1.1-2.el10_2.ppc64le.rpm | SHA-256: 2c1041af1b64e8f58558099760e9cc71279753816e4746f2670f4ee5138d3e08 | | java-21-ibm-semeru-certified-jdk-src-21.0.12.1.1-2.el10_2.ppc64le.rpm | SHA-256: c82315f4e18c0d2d6b74eb7aaa0609d21aca56323a8c3fc625b49a9aeafe42e9 | Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 | SRPM | | java-21-ibm-semeru-certified-jdk-21.0.12.1.1-2.el10_2.src.rpm | SHA-256: def8934d43b51b270d7fbbcb5a105dce22ef7820f012bc7b2382f598101b8b7c | | ppc64le | | java-21-ibm-semeru-certified-jdk-21.0.12.1.1-2.el10_2.ppc64le.rpm | SHA-256: 09bb989d6102d3d78a9b42e1388317d6b74016d254518bff608a8c671319941f | | java-21-ibm-semeru-certified-jdk-devel-21.0.12.1.1-2.el10_2.ppc64le.rpm | SHA-256: 709966d16e701d6cc80154e2b5c0ffb3e4ee1664bf2fa57170a85e449f046a13 | | java-21-ibm-semeru-certified-jdk-headless-21.0.12.1.1-2.el10_2.ppc64le.rpm | SHA-256: 7f2c2d2cf23a7bdaf89a310e8eed4eaee10c52166654a801aa1fd0eaef71a548 | | java-21-ibm-semeru-certified-jdk-jmods-21.0.12.1.1-2.el10_2.ppc64le.rpm | SHA-256: 2c1041af1b64e8f58558099760e9cc71279753816e4746f2670f4ee5138d3e08 | | java-21-ibm-semeru-certified-jdk-src-21.0.12.1.1-2.el10_2.ppc64le.rpm | SHA-256: c82315f4e18c0d2d6b74eb7aaa0609d21aca56323a8c3fc625b49a9aeafe42e9 | Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 | SRPM | | java-21-ibm-semeru-certified-jdk-21.0.12.1.1-1.el10_0.src.rpm | SHA-256: 59a5f802c995da7bccccb1d83a42febdc8d63c15f0442b0783b2eda16b98a8b4 | | ppc64le | | java-21-ibm-semeru-certified-jdk-21.0.12.1.1-1.el10_0.ppc64le.rpm | SHA-256: cb39711b9bc285e52ced9aa2cd3e6236fb391fcce22e58f6f249f44b1fa65aab | | java-21-ibm-semeru-certified-jdk-headless-21.0.12.1.1-1.el10_0.ppc64le.rpm | SHA-256: 33a789a1a8769a20693e0e1ce8f6d1fda0070ad7da060ceb1eb1c7c9e660761f | Red Hat Enterprise Linux for ARM 64 10 | SRPM | | java-21-ibm-semeru-certified-jdk-21.0.12.1.1-2.el10_2.src.rpm | SHA-256: def8934d43b51b270d7fbbcb5a105dce22ef7820f012bc7b2382f598101b8b7c | | aarch64 | | java-21-ibm-semeru-certified-jdk-21.0.12.1.1-2.el10_2.aarch64.rpm | SHA-256: d80c459914cefb0d8d6766e2934ef6156e85f448cf4119044ee9399843fa60a8 | | java-21-ibm-semeru-certified-jdk-devel-21.0.12.1.1-2.el10_2.aarch64.rpm | SHA-256: a62bec46f8ab1afaa150045c5c5151b1135a89b23a5e0b680974d91aa8da73c8 | | java-21-ibm-semeru-certified-jdk-headless-21.0.12.1.1-2.el10_2.aarch64.rpm | SHA-256: c7bacf9997bf3d276ebf1d1cc945af15a84d2f4dfe20a6f32fc13c9dc544fcdb | | java-21-ibm-semeru-certified-jdk-jmods-21.0.12.1.1-2.el10_2.aarch64.rpm | SHA-256: ca5f9a4fb67aa26f0719f26bde773f02cbd40e20342acb11474b6f6899e61b35 | | java-21-ibm-semeru-certified-jdk-src-21.0.12.1.1-2.el10_2.aarch64.rpm | SHA-256: 8176e00b16da1606ea74628593fa0a60312277436705ca3a6438a303a1224228 | Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 | SRPM | | java-21-ibm-semeru-certified-jdk-21.0.12.1.1-2.el10_2.src.rpm | SHA-256: def8934d43b51b270d7fbbcb5a105dce22ef7820f012bc7b2382f598101b8b7c | | aarch64 | | java-21-ibm-semeru-certified-jdk-21.0.12.1.1-2.el10_2.aarch64.rpm | SHA-256: d80c459914cefb0d8d6766e2934ef6156e85f448cf4119044ee9399843fa60a8 | | java-21-ibm-semeru-certified-jdk-devel-21.0.12.1.1-2.el10_2.aarch64.rpm | SHA-256: a62bec46f8ab1afaa150045c5c5151b1135a89b23a5e0b680974d91aa8da73c8 | | java-21-ibm-semeru-certified-jdk-headless-21.0.12.1.1-2.el10_2.aarch64.rpm | SHA-256: c7bacf9997bf3d276ebf1d1cc945af15a84d2f4dfe20a6f32fc13c9dc544fcdb | | java-21-ibm-semeru-certified-jdk-jmods-21.0.12.1.1-2.el10_2.aarch64.rpm | SHA-256: ca5f9a4fb67aa26f0719f26bde773f02cbd40e20342acb11474b6f6899e61b35 | | java-21-ibm-semeru-certified-jdk-src-21.0.12.1.1-2.el10_2.aarch64.rpm | SHA-256: 8176e00b16da1606ea74628593fa0a60312277436705ca3a6438a303a1224228 | Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 | SRPM | | java-21-ibm-semeru-certified-jdk-21.0.12.1.1-1.el10_0.src.rpm | SHA-256: 59a5f802c995da7bccccb1d83a42febdc8d63c15f0442b0783b2eda16b98a8b4 | | aarch64 | | java-21-ibm-semeru-certified-jdk-21.0.12.1.1-1.el10_0.aarch64.rpm | SHA-256: a41a623b7e34c1896b5ee361854ae77a0972ebde39b21f309d77b94ace3f0440 | | java-21-ibm-semeru-certified-jdk-headless-21.0.12.1.1-1.el10_0.aarch64.rpm | SHA-256: 42607dda9c793b1f02289b30aec0220e1d189feca0847b4d52dabc026ed498fe |