This security update for java-21-openjdk addresses three security issues identified as CVE-2026-60589, CVE-2026-61308, and CVE-2026-70907. The update includes improvements to resource resolving, enhancements to HTTP connections, and enhancements to the TLS server. Additionally, a non-security issue related to classlist dependency on CPU count during build is fixed. The update corresponds to jdk-21.0.12.1+1 (August 2026 CSPU).

Security update for java-21-openjdk

This security update for java-17-openjdk addresses multiple vulnerabilities that allow unauthenticated attackers with network access to gain unauthorized read access to data or cause partial denial of service. The update upgrades to upstream tag jdk-17.0.20.1+1, including fixes for CVE-2026-60589, CVE-2026-61308, and CVE-2026-70907. The vulnerabilities involve unauthorized data access via multiple protocols and HTTP, and a denial of service via TLS.

Security update for java-17-openjdk

This security update for java-25-openjdk addresses multiple vulnerabilities including improvements in resource resolving, HTTP connections, font loading, and TLS server functionality. The update corresponds to jdk-25.0.4.1+1 and includes a backport of timezone data upgrades. These fixes are part of the August 2026 Critical Security Patch Update (CSPU) by SUSE Product Security Team.

Security update for java-25-openjdk

Red Hat has released a security update for the Eclipse Temurin build of OpenJDK 25 for Windows, version 25.0.4.1, which replaces version 25.0.4. This update addresses multiple moderate-severity vulnerabilities related to resource resolving, HTTP connections, font loading, and TLS server enhancements. The update includes fixes for CVE-2026-60589, CVE-2026-61308, CVE-2026-70906, and CVE-2026-70907. Users are advised to apply this update after ensuring all previous errata are installed.

Red Hat Security Advisory: OpenJDK 25.0.4.1 Security Update for Windows Builds

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, including multiple java-21-openjdk packages. This update addresses several vulnerabilities identified by CVE-2026-70907, CVE-2026-61308, and CVE-2026-60589. The advisory provides updated RPM packages for various architectures and package types. No specific details about the vulnerabilities or their impacts are provided in the advisory. No exploits in the wild are known, and the update is classified as a bug fix and enhancement update.

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Red Hat issued a security advisory for Red Hat Hardened Images RPMs, including multiple java-25-openjdk packages. The update addresses several CVEs including CVE-2026-60589 and others, providing bug fixes and enhancements. No specific details about the vulnerabilities or their impact are provided in the advisory. No affected versions are explicitly stated. The advisory directs users to apply the update via Red Hat's image repository.

Red Hat has released an update for the OpenJDK 11 Extended Lifecycle Support (ELS) packages for portable Linux builds. This update, version 11.0.32.1, replaces version 11.0.32 and includes security fixes addressing three vulnerabilities: CVE-2026-60589 (resource resolving improvement), CVE-2026-61308 (HTTP connections enhancement), and CVE-2026-70907 (TLS server enhancement). The update is rated as having a moderate security impact by Red Hat.

Red Hat Security Advisory: OpenJDK 11.0.32.1 ELS Security Update For Portable Linux Builds

Red Hat has released an update for its OpenJDK 11 Extended Lifecycle Support (ELS) Windows builds, version 11.0.32.1, which replaces version 11.0.32. This update addresses multiple security issues including improvements in resource resolving, HTTP connections, and TLS server functionality. The update is rated with a moderate security impact by Red Hat. Users are advised to apply this update after ensuring all previous relevant errata are installed.

Red Hat Security Advisory: OpenJDK 11.0.32.1 ELS Security Update for Windows Builds

Red Hat has issued a security update for the java-1.8.0-openjdk packages, which provide the OpenJDK 8 Java Runtime Environment and Software Development Kit. The update addresses three vulnerabilities: CVE-2026-60589 (improving resource resolving), CVE-2026-61308 (enhancing HTTP connections), and CVE-2026-70907 (enhancing the TLS server). These fixes are rated with a moderate security impact. The advisory covers multiple Red Hat Enterprise Linux versions and architectures. Users are advised to apply this update after ensuring all previous errata are installed.

Red Hat Security Advisory: java-1.8.0-openjdk security update

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically updating multiple java-25-openjdk-portable packages. The update addresses four security vulnerabilities identified by CVE-2026-60589, CVE-2026-61308, CVE-2026-70906, and CVE-2026-70907. These vulnerabilities affect the java-25-openjdk-portable RPMs on aarch64 and x86_64 architectures. No exploits in the wild are currently known. The advisory provides updated package versions to mitigate these issues.

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Red Hat has issued a security advisory for the java-17-openjdk packages, addressing three vulnerabilities related to resource resolving, HTTP connections, and TLS server enhancements. These issues are tracked as CVE-2026-60589, CVE-2026-61308, and CVE-2026-70907. The advisory rates the security impact as moderate and provides updates for multiple Red Hat Enterprise Linux versions and architectures. Users are advised to apply the update after ensuring all previous errata are installed.

Red Hat Security Advisory: java-17-openjdk security update

Red Hat has issued a security update for its Hardened Images RPMs, specifically addressing vulnerabilities in the java-21-openjdk-portable package. The update includes multiple RPMs for different architectures and fixes three identified CVEs: CVE-2026-60589, CVE-2026-61308, and CVE-2026-70907. These vulnerabilities relate to issues categorized under CWE-918, CWE-212, and CWE-770. No exploits in the wild are currently known. The update is available as version 21.0.12.1.1-0.1.hum1 for affected packages.

Red Hat has released a security update for the java-11-openjdk packages with Extended Lifecycle Support for Red Hat Enterprise Linux 7, 8, and 9. This update addresses three security issues identified by CVE-2026-60589, CVE-2026-61308, and CVE-2026-70907, which involve improvements in resource resolving, HTTP connections, and TLS server functionality within the OpenJDK 11 runtime and development kit. The advisory classifies these issues as moderate severity. Users are advised to apply the update after ensuring all previous errata have been applied.

Red Hat Security Advisory: Java 11 OpenJDK ELS Security Update

Red Hat has released an update for its OpenJDK 25 build for portable Linux, version 25.0.4.1, which addresses multiple security issues. The update fixes vulnerabilities related to resource resolving, HTTP connections, font loading, and TLS server enhancements. These issues are tracked under CVE-2026-60589, CVE-2026-61308, CVE-2026-70906, and CVE-2026-70907. The update replaces the previous OpenJDK 25.0.4 build and includes security and bug fixes as well as enhancements. Red Hat rates the security impact as moderate. No specific affected versions or exploit activity in the wild are reported.

Red Hat Security Advisory: OpenJDK 25.0.4.1 Security Update for Portable Linux Builds

Red Hat has released a security update for its OpenJDK 21 build for Windows, version 21.0.12.1, which replaces version 21.0.12. This update addresses multiple security issues including improvements in resource resolving, HTTP connections, and TLS server functionality. The update is rated as having a moderate security impact. Users are advised to apply this update after ensuring all previous relevant errata are installed.

Red Hat Security Advisory: OpenJDK 21.0.12.1 Security Update for Windows Builds

Red Hat has released an update for its OpenJDK 21 build for portable Linux, version 21.0.12.1, which addresses multiple security issues. The update replaces the previous 21.0.12 version and includes fixes for vulnerabilities related to resource resolving, HTTP connections, and TLS server enhancements. These issues are tracked under CVE-2026-60589, CVE-2026-61308, and CVE-2026-70907. The update is rated as having a moderate security impact by Red Hat.

Red Hat Security Advisory: OpenJDK 21.0.12.1 Security Update for Portable Linux Builds

Red Hat has released an update for its OpenJDK 17 build for Windows (version 17.0.20.1) addressing multiple security issues. The update replaces the previous 17.0.20 release and includes fixes for vulnerabilities related to resource resolving, HTTP connections, and TLS server enhancements. These issues are tracked under CVE-2026-60589, CVE-2026-61308, and CVE-2026-70907. The update is rated as having a moderate security impact by Red Hat.

Red Hat Security Advisory: OpenJDK 17.0.20.1 Security Update for Windows Builds

Red Hat has released a security update for the OpenJDK 17 build for portable Linux, version 17.0.20.1, which replaces version 17.0.20. This update addresses three security issues: improving resource resolving (CVE-2026-60589), enhancing HTTP connections (CVE-2026-61308), and enhancing the TLS server (CVE-2026-70907). The update includes security fixes, bug fixes, and enhancements.

Red Hat Security Advisory: OpenJDK 17.0.20.1 Security Update for Portable Linux Builds

Red Hat released an update for OpenJDK 8 on Windows (version 8u504) addressing multiple security issues. The update replaces version 8u502 and includes fixes for vulnerabilities related to resource resolving, HTTP connections, and TLS server enhancements. These issues are tracked under CVE-2026-60589, CVE-2026-61308, and CVE-2026-70907. The update is rated with moderate security impact by Red Hat.

Red Hat Security Advisory: OpenJDK 8u504 Windows Security Update

Red Hat has released an update for its OpenJDK 8 build for portable Linux (version 8u504) that addresses multiple security issues. The update replaces the previous 8u502 release and includes fixes for vulnerabilities identified as CVE-2026-60589, CVE-2026-61308, and CVE-2026-70907. These issues relate to resource resolving, HTTP connection handling, and TLS server enhancements. The update is rated with a moderate security impact by Red Hat.

Search: CVE-2026-60589