Linux · Security advisory · April 15, 2026

RHSA-2026:4832: Security update for 8 packages

RHSA-2026:4832, released April 15, 2026, fixes 3 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0099
62nd percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 3 Routine 0

Fixed package versions

ProductReleaseFixed in
java-1.8.0-ibmRHEL 81:1.8.0.8.60-1.el8_10
java-1.8.0-ibm-demoRHEL 81:1.8.0.8.60-1.el8_10
java-1.8.0-ibm-develRHEL 81:1.8.0.8.60-1.el8_10
java-1.8.0-ibm-headlessRHEL 81:1.8.0.8.60-1.el8_10
java-1.8.0-ibm-jdbcRHEL 81:1.8.0.8.60-1.el8_10
java-1.8.0-ibm-pluginRHEL 81:1.8.0.8.60-1.el8_10
java-1.8.0-ibm-srcRHEL 81:1.8.0.8.60-1.el8_10
java-1.8.0-ibm-webstartRHEL 81:1.8.0.8.60-1.el8_10

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-21945 Java(TM) SE Development Kit 21 and 1 other: Uncontrolled Resource Consumption 7.5 0.0099 None reported
High CVE-2026-21933 Java(TM) SE Development Kit 21 and 1 other: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product… 7.5 0.0030 None reported
High CVE-2026-21925 Java(TM) SE Development Kit 21 and 1 other: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product… 7.5 0.0025 None reported
Showing 1 to 3 of 3 1