Bug 2557117 (CVE-2026-91451)
| Summary: | CVE-2026-91451 openjdk: Enhance HTTP server parsing (Oracle CPU 2026-10) | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | ahughes, fferrari, khosford, mtorre, pjindal, rhel-process-autobot, tfitzsim, watson-tool-maintainers |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in the Networking component of OpenJDK. This vulnerability allows an unauthenticated remote attacker to cause unauthorized data modification by sending crafted input to exposed Application Programming Interfaces (APIs), such as through web services. Successful exploitation enables an attacker to insert, update, or delete data accessible to the application.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
OSIDB Bzimport
2026-10-20 23:12:23 UTC
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Red Hat Enterprise Linux 8.8 Telecommunications Update Service Via RHSA-2026:88352 https://access.redhat.com/errata/RHSA-2026:88352 This issue has been addressed in the following products: Red Hat Build of OpenJDK 17.0.20.1 Via RHSA-2026:89916 https://access.redhat.com/errata/RHSA-2026:89916 This issue has been addressed in the following products: Red Hat Build of OpenJDK 17.0.21 Via RHSA-2026:88353 https://access.redhat.com/errata/RHSA-2026:88353 This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 10 Via RHSA-2026:88347 https://access.redhat.com/errata/RHSA-2026:88347 This issue has been addressed in the following products: Red Hat Build of OpenJDK 21.0.12.1 Via RHSA-2026:88350 https://access.redhat.com/errata/RHSA-2026:88350 This issue has been addressed in the following products: Red Hat Build of OpenJDK 21.0.13 Via RHSA-2026:88351 https://access.redhat.com/errata/RHSA-2026:88351 This issue has been addressed in the following products: Red Hat Build of OpenJDK 25.0.5 Via RHSA-2026:88348 https://access.redhat.com/errata/RHSA-2026:88348 This issue has been addressed in the following products: Temurin Build of OpenJDK 25.0.4.1 Via RHSA-2026:90912 https://access.redhat.com/errata/RHSA-2026:90912 This issue has been addressed in the following products: Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat Enterprise Linux 10 Via RHSA-2026:90504 https://access.redhat.com/errata/RHSA-2026:90504 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Red Hat Enterprise Linux 9.6 Extended Update Support Red Hat Enterprise Linux 9 Via RHSA-2026:88349 https://access.redhat.com/errata/RHSA-2026:88349 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Red Hat Enterprise Linux 9.6 Extended Update Support Red Hat Enterprise Linux 9 Via RHSA-2026:90500 https://access.redhat.com/errata/RHSA-2026:90500 |