What is RHSA-2026:72888?

RHSA-2026:72888 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: java-21-ibm-semeru-certified-jdk security update

Which CVE IDs does RHSA-2026:72888 cover?

RHSA-2026:72888 covers the following CVE IDs: CVE-2026-16440, CVE-2026-60589, CVE-2026-61308, CVE-2026-70907. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2026:72888?

RHSA-2026:72888 has a CVSS v3 base score of 6.8, published by Red Hat Product Security.

Which products are affected by RHSA-2026:72888?

RHSA-2026:72888 affects 32 products, including: Red Hat Enterprise Linux Supplementary (v. 10); Red Hat Enterprise Linux Supplementary EUS (v. 10.0); java-21-ibm-semeru-certified-jdk-1:21.0.12.1.1-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux Supplementary EUS (v. 10.0); java-21-ibm-semeru-certified-jdk-1:21.0.12.1.1-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux Supplementary EUS (v. 10.0); java-21-ibm-semeru-certified-jdk-1:21.0.12.1.1-1.el10_0.s390x as a component of Red Hat Enterprise Linux Supplementary EUS (v. 10.0); and others — see the full list on the advisory page.

RHSA-2026:72888MediumCVSS 6.8

Red Hat Security Advisory: java-21-ibm-semeru-certified-jdk security update

Vendor

Red Hat Product Security

Published

September 28, 2026

Last Modified

October 19, 2026

🔗 CVE IDs covered (4)

CVE-2026-16440 →CVE-2026-60589 →CVE-2026-61308 →CVE-2026-70907 →

📋 Description

CVE-2026-16440 — openj9: Eclipse OpenJ9: Denial of Service via crafted .class file CVE-2026-60589 — OpenJDK: Improve Resource Resolving (2026-08 Security Update) CVE-2026-61308 — OpenJDK: Enhance HTTP Connections (2026-08 Security Update) CVE-2026-70907 — OpenJDK: Enhance TLS server (2026-08 Security Update)

🎯 Affected products32

Red Hat Enterprise Linux Supplementary (v. 10)
Red Hat Enterprise Linux Supplementary EUS (v. 10.0)
java-21-ibm-semeru-certified-jdk-1:21.0.12.1.1-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux Supplementary EUS (v. 10.0)
java-21-ibm-semeru-certified-jdk-1:21.0.12.1.1-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux Supplementary EUS (v. 10.0)
java-21-ibm-semeru-certified-jdk-1:21.0.12.1.1-1.el10_0.s390x as a component of Red Hat Enterprise Linux Supplementary EUS (v. 10.0)
java-21-ibm-semeru-certified-jdk-1:21.0.12.1.1-1.el10_0.src as a component of Red Hat Enterprise Linux Supplementary EUS (v. 10.0)
java-21-ibm-semeru-certified-jdk-1:21.0.12.1.1-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux Supplementary EUS (v. 10.0)
java-21-ibm-semeru-certified-jdk-1:21.0.12.1.1-2.el10_2.aarch64 as a component of Red Hat Enterprise Linux Supplementary (v. 10)
java-21-ibm-semeru-certified-jdk-1:21.0.12.1.1-2.el10_2.ppc64le as a component of Red Hat Enterprise Linux Supplementary (v. 10)
java-21-ibm-semeru-certified-jdk-1:21.0.12.1.1-2.el10_2.s390x as a component of Red Hat Enterprise Linux Supplementary (v. 10)
java-21-ibm-semeru-certified-jdk-1:21.0.12.1.1-2.el10_2.src as a component of Red Hat Enterprise Linux Supplementary (v. 10)
java-21-ibm-semeru-certified-jdk-1:21.0.12.1.1-2.el10_2.x86_64 as a component of Red Hat Enterprise Linux Supplementary (v. 10)
java-21-ibm-semeru-certified-jdk-devel-1:21.0.12.1.1-2.el10_2.aarch64 as a component of Red Hat Enterprise Linux Supplementary (v. 10)
java-21-ibm-semeru-certified-jdk-devel-1:21.0.12.1.1-2.el10_2.ppc64le as a component of Red Hat Enterprise Linux Supplementary (v. 10)
java-21-ibm-semeru-certified-jdk-devel-1:21.0.12.1.1-2.el10_2.s390x as a component of Red Hat Enterprise Linux Supplementary (v. 10)
java-21-ibm-semeru-certified-jdk-devel-1:21.0.12.1.1-2.el10_2.x86_64 as a component of Red Hat Enterprise Linux Supplementary (v. 10)
java-21-ibm-semeru-certified-jdk-headless-1:21.0.12.1.1-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux Supplementary EUS (v. 10.0)
java-21-ibm-semeru-certified-jdk-headless-1:21.0.12.1.1-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux Supplementary EUS (v. 10.0)
java-21-ibm-semeru-certified-jdk-headless-1:21.0.12.1.1-1.el10_0.s390x as a component of Red Hat Enterprise Linux Supplementary EUS (v. 10.0)
java-21-ibm-semeru-certified-jdk-headless-1:21.0.12.1.1-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux Supplementary EUS (v. 10.0)
java-21-ibm-semeru-certified-jdk-headless-1:21.0.12.1.1-2.el10_2.aarch64 as a component of Red Hat Enterprise Linux Supplementary (v. 10)
java-21-ibm-semeru-certified-jdk-headless-1:21.0.12.1.1-2.el10_2.ppc64le as a component of Red Hat Enterprise Linux Supplementary (v. 10)
java-21-ibm-semeru-certified-jdk-headless-1:21.0.12.1.1-2.el10_2.s390x as a component of Red Hat Enterprise Linux Supplementary (v. 10)
java-21-ibm-semeru-certified-jdk-headless-1:21.0.12.1.1-2.el10_2.x86_64 as a component of Red Hat Enterprise Linux Supplementary (v. 10)
java-21-ibm-semeru-certified-jdk-jmods-1:21.0.12.1.1-2.el10_2.aarch64 as a component of Red Hat Enterprise Linux Supplementary (v. 10)
java-21-ibm-semeru-certified-jdk-jmods-1:21.0.12.1.1-2.el10_2.ppc64le as a component of Red Hat Enterprise Linux Supplementary (v. 10)
java-21-ibm-semeru-certified-jdk-jmods-1:21.0.12.1.1-2.el10_2.s390x as a component of Red Hat Enterprise Linux Supplementary (v. 10)
java-21-ibm-semeru-certified-jdk-jmods-1:21.0.12.1.1-2.el10_2.x86_64 as a component of Red Hat Enterprise Linux Supplementary (v. 10)
java-21-ibm-semeru-certified-jdk-src-1:21.0.12.1.1-2.el10_2.aarch64 as a component of Red Hat Enterprise Linux Supplementary (v. 10)
java-21-ibm-semeru-certified-jdk-src-1:21.0.12.1.1-2.el10_2.ppc64le as a component of Red Hat Enterprise Linux Supplementary (v. 10)
+2 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 CVE IDs covered (4)

📋 Description

🎯 Affected products32

✅ Remediation

🔗 References (7)