Threats Tagged 'cve-2026-16439'

This Red Hat security advisory addresses multiple vulnerabilities in the IBM Semeru Runtime Certified Edition 21 runtime environment, including issues in Little CMS, OpenJDK, Eclipse OpenJ9, and Eclipse OMR components. The vulnerabilities range from information disclosure, denial of service, buffer underflow, to integrity issues. The advisory provides updates for Red Hat Enterprise Linux 10 and its Extended Update Support variants across multiple architectures. The update is rated as important by Red Hat Product Security. Users are advised to apply the provided updates to remediate these issues.

A security update for IBM Java SE version 8 (java-1.8.0-ibm) addresses multiple vulnerabilities including arbitrary class loading and instantiation via a malicious IIOP server (CVE-2026-8400), information disclosure or denial of service via integer overflow in Little CMS (CVE-2026-41254), and several enhancements and fixes in OpenJDK components such as TLS certificate handling, image processing, Jar file handling, and method delegation. The update is rated as important by Red Hat Product Security and affects Red Hat Enterprise Linux 8 on multiple architectures.

CVE-2026-16439 is a medium severity buffer underwrite (buffer underflow) vulnerability in Eclipse Foundation's OpenJ9. It affects versions up to 0.60 and occurs when using the -Xtrace option to trace method arguments. This flaw can cause memory corruption due to accessing memory before the allocated buffer.

This update for postgresql13 fixes the following issues: Security fixes: - CVE-2025-12817: Fixed missing check for CREATE privileges on the schema in CREATE STATISTICS allowed table owners to create statistics in any schema, potentially leading to unexpected naming conflicts (bsc#1253332) - CVE-2025-12818: Fixed several places in libpq were not sufficiently careful about computing the required size of a memory allocation. Sufficiently large inputs could cause integer overflow, resulting in an undersized buffer, which would then lead to writing past the end of the buffer (bsc#1253333) Other fixes: - Update to 13.23 * https://www.postgresql.org/about/news/p-3171/ * https://www.postgresql.org/docs/release/13.23