Bug 2502792 (CVE-2026-47059)
| Summary: | CVE-2026-47059 openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07) | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security <prodsec-ir-bot> |
| Status: | NEW --- | QA Contact: | |
| Severity: | low | Docs Contact: | |
| Priority: | low | ||
| Version: | unspecified | CC: | ahughes, fferrari, khosford, mtorre, pjindal, rhel-process-autobot, security-response-team, tfitzsim, watson-tool-maintainers |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in OpenJDK. When the software processes certain images, a specific function fails to manage memory boundaries correctly. This can lead to the application attempting to access invalid memory or dereference a null pointer, which may cause the application to unexpectedly terminate. The primary consequence of this vulnerability is a denial of service, making the affected application unavailable.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Deadline: | 2026-07-21 | ||
|
Description
OSIDB Bzimport
2026-07-20 13:18:32 UTC
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 10 Via RHSA-2026:42899 https://access.redhat.com/errata/RHSA-2026:42899 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Red Hat Enterprise Linux 8.8 Telecommunications Update Service Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Red Hat Enterprise Linux 9.6 Extended Update Support Red Hat Enterprise Linux 9 Via RHSA-2026:42887 https://access.redhat.com/errata/RHSA-2026:42887 This issue has been addressed in the following products: Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Red Hat Enterprise Linux 9.6 Extended Update Support Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 9 Via RHSA-2026:42895 https://access.redhat.com/errata/RHSA-2026:42895 This issue has been addressed in the following products: Red Hat OpenJDK 11 els for RHEL 7 Red Hat OpenJDK 11 els for RHEL 8 Red Hat OpenJDK 11 els for RHEL 9 Via RHSA-2026:42880 https://access.redhat.com/errata/RHSA-2026:42880 This issue has been addressed in the following products: OPENJDK ELS 11.0.32 Via RHSA-2026:42881 https://access.redhat.com/errata/RHSA-2026:42881 This issue has been addressed in the following products: OPENJDK ELS 11.0.32 Via RHSA-2026:42882 https://access.redhat.com/errata/RHSA-2026:42882 This issue has been addressed in the following products: Red Hat Build of OpenJDK 8u502 Via RHSA-2026:42879 https://access.redhat.com/errata/RHSA-2026:42879 This issue has been addressed in the following products: Red Hat Build of OpenJDK 8u502 Via RHSA-2026:42878 https://access.redhat.com/errata/RHSA-2026:42878 This issue has been addressed in the following products: Red Hat Build of OpenJDK 17.0.20 Via RHSA-2026:42889 https://access.redhat.com/errata/RHSA-2026:42889 This issue has been addressed in the following products: Red Hat Build of OpenJDK 17.0.20 Via RHSA-2026:42893 https://access.redhat.com/errata/RHSA-2026:42893 This issue has been addressed in the following products: Red Hat Build of OpenJDK 21.0.12 Via RHSA-2026:42898 https://access.redhat.com/errata/RHSA-2026:42898 This issue has been addressed in the following products: Red Hat Build of OpenJDK 21.0.12 Via RHSA-2026:42897 https://access.redhat.com/errata/RHSA-2026:42897 This issue has been addressed in the following products: Red Hat Build of OpenJDK 25.0.4 Via RHSA-2026:42900 https://access.redhat.com/errata/RHSA-2026:42900 This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Extended Lifecycle Support Via RHSA-2026:42876 https://access.redhat.com/errata/RHSA-2026:42876 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Red Hat Enterprise Linux 9.6 Extended Update Support Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Red Hat Enterprise Linux 8.8 Telecommunications Update Service Via RHSA-2026:42877 https://access.redhat.com/errata/RHSA-2026:42877 This issue has been addressed in the following products: Temurin Build of OpenJDK 25.0.4 Via RHSA-2026:48845 https://access.redhat.com/errata/RHSA-2026:48845 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2026:52949 https://access.redhat.com/errata/RHSA-2026:52949 This issue has been addressed in the following products: Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat Enterprise Linux 10 Via RHSA-2026:52948 https://access.redhat.com/errata/RHSA-2026:52948 |