CVE-2026-87294

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...

6.5 MediumFix available

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: Low
Integrity: Low
Availability: None

Exploit likelihood

0.26%Unchanged since Oct 21, 2026

What each source reports

CVE List Score used 6.5

Record: CVE-2026-87294
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness: CWE-284
Updated: 2026-11-02

EUVDEUVD-2026-106335 6.5

Record: EUVD-2026-106335
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated: 2026-11-02

GitHub AdvisoriesGHSA-f77q-p3hr-hvw8 6.5

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...

Record: GHSA-f77q-p3hr-hvw8
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness: CWE-284
Updated: 2026-11-02

NVD 6.5

Record: CVE-2026-87294
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness: CWE-284
Updated: 2026-11-02

OSVALPINE-CVE-2026-87294 6.5

Record: ALPINE-CVE-2026-87294
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated: 2026-11-03

OSVBELL-CVE-2026-87294 6.5

Record: BELL-CVE-2026-87294
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated: 2026-11-02

Show 17 moreShow less

OSVDEBIAN-CVE-2026-87294 6.5

Record: DEBIAN-CVE-2026-87294
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated: 2026-11-02

OSVRLSA-2026:88347 6.8

Important: java-25-openjdk security update

The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Improve C2 loop transformations (CVE-2026-83378)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance Vector Processing (CVE-2026-87255)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance HTTP Server (CVE-2026-87291)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance HTTP Client (CVE-2026-91332)
JDK: Improve ciphertext handling (CVE-2026-91333)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance jmod handling (CVE-2026-91375)
JDK: Enhance JShell (CVE-2026-91379)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance HTTP client caching (CVE-2026-91394)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP server (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)
JDK: Enhance C2 comparisons (CVE-2026-91487)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record: RLSA-2026:88347
CVSS 3.1: 6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated: 2026-11-02

OSVRLSA-2026:88352 6.8

Important: java-17-openjdk security update for Rocky Linux 8

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance HTTP Client (CVE-2026-91332)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance jmod handling (CVE-2026-91375)
JDK: Enhance JShell (CVE-2026-91379)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance Image Processing (CVE-2026-91382)
JDK: Enhance HTTP client caching (CVE-2026-91394)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP server (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)
JDK: Enhance C2 comparisons (CVE-2026-91487)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record: RLSA-2026:88352
CVSS 3.1: 6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated: 2026-11-02

OSVUBUNTU-CVE-2026-87294 6.5

Record: UBUNTU-CVE-2026-87294
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated: 2026-11-02

OSVALSA-2026:88347 No score

Important: java-25-openjdk security update

The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Improve C2 loop transformations (CVE-2026-83378)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance Vector Processing (CVE-2026-87255)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance HTTP Server (CVE-2026-87291)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance HTTP Client (CVE-2026-91332)
JDK: Improve ciphertext handling (CVE-2026-91333)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance jmod handling (CVE-2026-91375)
JDK: Enhance JShell (CVE-2026-91379)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance HTTP client caching (CVE-2026-91394)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP server (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)
JDK: Enhance C2 comparisons (CVE-2026-91487)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record: ALSA-2026:88347
Updated: 2026-11-02

OSVALSA-2026:88349 No score

Important: java-21-openjdk security update for AlmaLinux 8 and 9

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Improve C2 loop transformations (CVE-2026-83378)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance HTTP Server (CVE-2026-87291)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance HTTP Client (CVE-2026-91332)
JDK: Improve ciphertext handling (CVE-2026-91333)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance jmod handling (CVE-2026-91375)
JDK: Enhance JShell (CVE-2026-91379)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance HTTP client caching (CVE-2026-91394)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP server (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)
JDK: Enhance C2 comparisons (CVE-2026-91487)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record: ALSA-2026:88349
Updated: 2026-11-02

OSVALSA-2026:88352 No score

Important: java-17-openjdk security update for AlmaLinux 8

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance HTTP Client (CVE-2026-91332)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance jmod handling (CVE-2026-91375)
JDK: Enhance JShell (CVE-2026-91379)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance Image Processing (CVE-2026-91382)
JDK: Enhance HTTP client caching (CVE-2026-91394)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP server (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)
JDK: Enhance C2 comparisons (CVE-2026-91487)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record: ALSA-2026:88352
Updated: 2026-11-02

OSVALSA-2026:90500 No score

Important: java-17-openjdk security update for AlmaLinux 9

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance HTTP Client (CVE-2026-91332)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance jmod handling (CVE-2026-91375)
JDK: Enhance JShell (CVE-2026-91379)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance Image Processing (CVE-2026-91382)
JDK: Enhance HTTP client caching (CVE-2026-91394)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP server (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)
JDK: Enhance C2 comparisons (CVE-2026-91487)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record: ALSA-2026:90500
Updated: 2026-11-02

OSVALSA-2026:90504 No score

Important: java-21-openjdk security update for AlmaLinux 10

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Improve C2 loop transformations (CVE-2026-83378)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance HTTP Server (CVE-2026-87291)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance HTTP Client (CVE-2026-91332)
JDK: Improve ciphertext handling (CVE-2026-91333)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance jmod handling (CVE-2026-91375)
JDK: Enhance JShell (CVE-2026-91379)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance HTTP client caching (CVE-2026-91394)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP server (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)
JDK: Enhance C2 comparisons (CVE-2026-91487)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record: ALSA-2026:90504
Updated: 2026-11-02

OSVAZL-112156 No score

CVE-2026-87294 affecting package python-tensorboard 2.16.2-6

Record: AZL-112156
Updated: 2026-11-05

OSVMGASA-2026-0572 No score

Updated java-latest-openjdk, timezone, java-21-openjdk, java-17-openjdk packages fix security vulnerabilities

Enhance PKCS5 padding. (CVE-2026-83374) Enhance TLS certificate handling. (CVE-2026-83376) Improve C2 loop transformations. (CVE-2026-83378) Enhance LDAP logins. (CVE-2026-83380) Enhance SASL Authentication. (CVE-2026-83381) Enhance WebRowSets. (CVE-2026-83387) Enhance HTTP Client Response Handling. (CVE-2026-83395) Enhance XML Processing. (CVE-2026-83400) Enhance XPath Expressions. (CVE-2026-87290) Enhance HTTP Server. (CVE-2026-87291) Enhance Network Clients. (CVE-2026-87292) Enhance Certificate Name Checks. (CVE-2026-87294) Enhance Template Handling. (CVE-2026-87367) Enhance HTTP Client. (CVE-2026-91332) Improve ciphertext handling. (CVE-2026-91333) Enhance JPEG loading. (CVE-2026-91334) Enhance Image Handling. (CVE-2026-91335) Enhance TLS handshakes. (CVE-2026-91373) Enhance jstatd. (CVE-2026-91374) Enhance jmod handling. (CVE-2026-91375) Enhance JShell. (CVE-2026-91379) Enhance Preferences. (CVE-2026-91380) Enhance HTTP client caching. (CVE-2026-91394) Enhance diagnostic sessions. (CVE-2026-91397) Enhance SOCKS5 support. (CVE-2026-91398) Enhance MIDI file handling. (CVE-2026-91400) Enhance zipfs. (CVE-2026-91410) Enhance font rendering. (CVE-2026-91415) Enhance GIF loading. (CVE-2026-91418) Enhance HTTP server parsing. (CVE-2026-91451) Enhance HTTP server. (CVE-2026-91452) Improve HTTP headers. (CVE-2026-91453) Enhance TLS Extensions. (CVE-2026-91461) Enhance krb5 tokens. (CVE-2026-91462) Enhance krb5 client. (CVE-2026-91463) Enhance Kerberos validation. (CVE-2026-91464) Enhance C2 comparisons. (CVE-2026-91487) Enhance Certificate Constraint Checking. (CVE-2026-101516)

Record: MGASA-2026-0572
Updated: 2026-11-03

OSVopenSUSE-SU-2026:12294-1 No score

java-17-openjdk-17.0.21.0-1.1 on GA media

These are all security issues fixed in the java-17-openjdk-17.0.21.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12294-1
Updated: 2026-11-02

OSVopenSUSE-SU-2026:12328-1 No score

java-21-openjdk-21.0.13.0-1.1 on GA media

These are all security issues fixed in the java-21-openjdk-21.0.13.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12328-1
Updated: 2026-11-02

OSVopenSUSE-SU-2026:12329-1 No score

java-25-openjdk-25.0.5.0-1.1 on GA media

These are all security issues fixed in the java-25-openjdk-25.0.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12329-1
Updated: 2026-11-02

OSVopenSUSE-SU-2026:12418-1 No score

java-11-openjdk-11.0.33.0-1.1 on GA media

These are all security issues fixed in the java-11-openjdk-11.0.33.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12418-1
Updated: 2026-11-05

OSVopenSUSE-SU-2026:12436-1 No score

java-25-openj9-25.0.5.0-1.1 on GA media

These are all security issues fixed in the java-25-openj9-25.0.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12436-1
Updated: 2026-11-06

OSVopenSUSE-SU-2026:12459-1 No score

java-1_8_0-openj9-1.8.0.512-1.1 on GA media

These are all security issues fixed in the java-1_8_0-openj9-1.8.0.512-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12459-1
Updated: 2026-11-07

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`openjdk17` Alpine:v3.23	before 17.0.21.0.3_p1-r0	17.0.21.0.3_p1-r0
`openjdk17` Alpine:v3.24	before 17.0.21.0.3_p1-r0	17.0.21.0.3_p1-r0
`openjdk25` Alpine:v3.23	before 25.0.5.0.3_p1-r0	25.0.5.0.3_p1-r0
`openjdk25` Alpine:v3.24	before 25.0.5.0.3_p1-r0	25.0.5.0.3_p1-r0
`java-25-openjdk` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-crypto-adapter` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-crypto-adapter-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-crypto-adapter-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-demo` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-demo-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`java-25-openjdk-demo-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-devel` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-devel-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-devel-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-headless` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-headless-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-headless-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-javadoc` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-javadoc-zip` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-jmods` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-jmods-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-jmods-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-src` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-src-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-src-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-static-libs` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-static-libs-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-static-libs-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-crypto-adapter` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-crypto-adapter-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-crypto-adapter-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-demo` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-demo-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-demo-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-devel` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-devel-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-devel-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-headless` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-headless-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-headless-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-javadoc` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-javadoc-zip` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-jmods` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-jmods-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-jmods-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-src` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-src-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-src-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-static-libs` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-static-libs-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-static-libs-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-21-openjdk` AlmaLinux:8 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.1.el8	1:21.0.13.0.9-1.1.el8
`java-21-openjdk` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-demo` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-demo-fastdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-demo-slowdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-devel` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-devel-fastdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-devel-slowdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-fastdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-headless` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-headless-fastdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-headless-slowdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-javadoc` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-javadoc-zip` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-jmods` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-jmods-fastdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-jmods-slowdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-slowdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-src` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-src-fastdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-src-slowdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-static-libs` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-static-libs-fastdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-static-libs-slowdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-17-openjdk` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-demo` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-demo-fastdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-demo-slowdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-devel` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-devel-fastdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-devel-slowdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-fastdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-headless` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-headless-fastdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-headless-slowdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-javadoc` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-javadoc-zip` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-jmods` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-jmods-fastdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-jmods-slowdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-slowdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-src` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-src-fastdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-src-slowdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-static-libs` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-static-libs-fastdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-static-libs-slowdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-demo` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-demo-fastdebug` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-demo-slowdebug` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-devel` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-devel-fastdebug` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-devel-slowdebug` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-fastdebug` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-headless` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-headless-fastdebug` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-headless-slowdebug` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-javadoc` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-javadoc-zip` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-jmods` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-jmods-fastdebug` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-jmods-slowdebug` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-slowdebug` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-src` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-src-fastdebug` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-src-slowdebug` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-static-libs` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-static-libs-fastdebug` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-static-libs-slowdebug` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-21-openjdk` AlmaLinux:10 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el10.alma.1	1:21.0.13.0.9-1.2.el10.alma.1
`java-21-openjdk-demo` AlmaLinux:10 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el10.alma.1	1:21.0.13.0.9-1.2.el10.alma.1
`java-21-openjdk-demo-fastdebug` AlmaLinux:10 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el10.alma.1	1:21.0.13.0.9-1.2.el10.alma.1
`java-21-openjdk-demo-slowdebug` AlmaLinux:10 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el10.alma.1	1:21.0.13.0.9-1.2.el10.alma.1
`java-21-openjdk-devel` AlmaLinux:10 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el10.alma.1	1:21.0.13.0.9-1.2.el10.alma.1
`java-21-openjdk-devel-fastdebug` AlmaLinux:10 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el10.alma.1	1:21.0.13.0.9-1.2.el10.alma.1
`java-21-openjdk-devel-slowdebug` AlmaLinux:10 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el10.alma.1	1:21.0.13.0.9-1.2.el10.alma.1
`java-21-openjdk-fastdebug` AlmaLinux:10 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el10.alma.1	1:21.0.13.0.9-1.2.el10.alma.1
`java-21-openjdk-headless` AlmaLinux:10 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el10.alma.1	1:21.0.13.0.9-1.2.el10.alma.1
`java-21-openjdk-headless-fastdebug` AlmaLinux:10 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el10.alma.1	1:21.0.13.0.9-1.2.el10.alma.1
`java-21-openjdk-headless-slowdebug` AlmaLinux:10 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el10.alma.1	1:21.0.13.0.9-1.2.el10.alma.1
`java-21-openjdk-javadoc` AlmaLinux:10 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el10.alma.1	1:21.0.13.0.9-1.2.el10.alma.1
`java-21-openjdk-javadoc-zip` AlmaLinux:10 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el10.alma.1	1:21.0.13.0.9-1.2.el10.alma.1
`java-21-openjdk-jmods` AlmaLinux:10 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el10.alma.1	1:21.0.13.0.9-1.2.el10.alma.1
`java-21-openjdk-jmods-fastdebug` AlmaLinux:10 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el10.alma.1	1:21.0.13.0.9-1.2.el10.alma.1
`java-21-openjdk-jmods-slowdebug` AlmaLinux:10 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el10.alma.1	1:21.0.13.0.9-1.2.el10.alma.1
`java-21-openjdk-slowdebug` AlmaLinux:10 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el10.alma.1	1:21.0.13.0.9-1.2.el10.alma.1
`python-tensorboard` Azure Linux:3	through 2.16.2-6	None known
`openjdk11` Alpaquita:23	11.0.19_p7-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-container-jre` Alpaquita:23	11.0.19_p7-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-lite` Alpaquita:23	11.0.19_p7-r1 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-perf` Alpaquita:23	11.0.20.1_p1-r0 up to 11.0.33.0.3_p8-r0	11.0.33.0.3_p8-r0
`openjdk17` Alpaquita:23	17.0.7_p7-r1 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-container-jre` Alpaquita:23	17.0.7_p7-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-crac` Alpaquita:23	17.0.13_p13-r0 up to 17.0.21.0.3_p6-r0	17.0.21.0.3_p6-r0
`openjdk17-lite` Alpaquita:23	17.0.7_p7-r1 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk21` Alpaquita:23	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-container-jre` Alpaquita:23	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-crac` Alpaquita:23	21.0.5_p12-r0 up to 21.0.13.0.3_p6-r0	21.0.13.0.3_p6-r0
`openjdk21-lite` Alpaquita:23	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk25` Alpaquita:23	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-container-jre` Alpaquita:23	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-lite` Alpaquita:23	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk27` Alpaquita:23	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-container-jre` Alpaquita:23	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-lite` Alpaquita:23	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk8` Alpaquita:23	8u372_p7-r0 up to 8.513_p9-r0	8.513_p9-r0
`openjdk8-perf` Alpaquita:23	8u392_p9-r1 up to 8.513_p10-r0	8.513_p10-r0
`openjdk11` Alpaquita:25	11.0.27_p9-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-container-jre` Alpaquita:25	11.0.27_p9-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-lite` Alpaquita:25	11.0.27_p9-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-perf` Alpaquita:25	11.0.29_p11-r0 up to 11.0.33.0.3_p8-r0	11.0.33.0.3_p8-r0
`openjdk17` Alpaquita:25	17.0.15_p10-r1 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-container-jre` Alpaquita:25	17.0.15_p10-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-crac` Alpaquita:25	17.0.15_p13-r1 up to 17.0.21.0.3_p6-r0	17.0.21.0.3_p6-r0
`openjdk17-lite` Alpaquita:25	17.0.15_p10-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk21` Alpaquita:25	21.0.7_p9-r1 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-container-jre` Alpaquita:25	21.0.7_p9-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-crac` Alpaquita:25	21.0.7_p12-r1 up to 21.0.13.0.3_p6-r0	21.0.13.0.3_p6-r0
`openjdk21-lite` Alpaquita:25	21.0.7_p9-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk25` Alpaquita:25	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-container-jre` Alpaquita:25	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-lite` Alpaquita:25	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk27` Alpaquita:25	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-container-jre` Alpaquita:25	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-lite` Alpaquita:25	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk8` Alpaquita:25	8.452_p11-r0 up to 8.513_p9-r0	8.513_p9-r0
`openjdk8-perf` Alpaquita:25	8.472_p10-r0 up to 8.513_p10-r0	8.513_p10-r0
`openjdk11` Alpaquita:stream	11.0.19_p7-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-container-jre` Alpaquita:stream	11.0.19_p7-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-lite` Alpaquita:stream	11.0.19_p7-r1 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk17` Alpaquita:stream	17.0.7_p7-r1 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-container-jre` Alpaquita:stream	17.0.7_p7-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-crac` Alpaquita:stream	17.0.10_p13-r0 up to 17.0.21.0.3_p6-r0	17.0.21.0.3_p6-r0
`openjdk17-lite` Alpaquita:stream	17.0.7_p7-r1 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk21` Alpaquita:stream	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-container-jre` Alpaquita:stream	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-crac` Alpaquita:stream	21.0.2_p15-r0 up to 21.0.13.0.3_p6-r0	21.0.13.0.3_p6-r0
`openjdk21-lite` Alpaquita:stream	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk25` Alpaquita:stream	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-container-jre` Alpaquita:stream	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-lite` Alpaquita:stream	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk27` Alpaquita:stream	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-container-jre` Alpaquita:stream	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-lite` Alpaquita:stream	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk8` Alpaquita:stream	8u372_p7-r1 up to 8.513_p9-r0	8.513_p9-r0
`openjdk11-container-jre` BellSoft Hardened Containers:23	11.0.19_p7-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-lite` BellSoft Hardened Containers:23	11.0.19_p7-r1 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-perf` BellSoft Hardened Containers:23	11.0.20.1_p1-r0 up to 11.0.33.0.3_p8-r0	11.0.33.0.3_p8-r0
`openjdk17-container-jre` BellSoft Hardened Containers:23	17.0.7_p7-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-crac` BellSoft Hardened Containers:23	17.0.13_p13-r0 up to 17.0.21.0.3_p6-r0	17.0.21.0.3_p6-r0
`openjdk17-lite` BellSoft Hardened Containers:23	17.0.7_p7-r1 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk21-container-jre` BellSoft Hardened Containers:23	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-crac` BellSoft Hardened Containers:23	21.0.5_p12-r0 up to 21.0.13.0.3_p6-r0	21.0.13.0.3_p6-r0
`openjdk21-lite` BellSoft Hardened Containers:23	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk25-container-jre` BellSoft Hardened Containers:23	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-lite` BellSoft Hardened Containers:23	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk27-container-jre` BellSoft Hardened Containers:23	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-lite` BellSoft Hardened Containers:23	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk8` BellSoft Hardened Containers:23	8u372_p7-r0 up to 8.513_p9-r0	8.513_p9-r0
`openjdk8-perf` BellSoft Hardened Containers:23	8u392_p9-r1 up to 8.513_p10-r0	8.513_p10-r0
`openjdk11-container-jre` BellSoft Hardened Containers:25	11.0.27_p9-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-lite` BellSoft Hardened Containers:25	11.0.27_p9-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-perf` BellSoft Hardened Containers:25	11.0.29_p11-r0 up to 11.0.33.0.3_p8-r0	11.0.33.0.3_p8-r0
`openjdk17-container-jre` BellSoft Hardened Containers:25	17.0.15_p10-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-crac` BellSoft Hardened Containers:25	17.0.15_p13-r1 up to 17.0.21.0.3_p6-r0	17.0.21.0.3_p6-r0
`openjdk17-lite` BellSoft Hardened Containers:25	17.0.15_p10-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk21-container-jre` BellSoft Hardened Containers:25	21.0.7_p9-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-crac` BellSoft Hardened Containers:25	21.0.7_p12-r1 up to 21.0.13.0.3_p6-r0	21.0.13.0.3_p6-r0
`openjdk21-lite` BellSoft Hardened Containers:25	21.0.7_p9-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk25-container-jre` BellSoft Hardened Containers:25	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-lite` BellSoft Hardened Containers:25	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk27-container-jre` BellSoft Hardened Containers:25	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-lite` BellSoft Hardened Containers:25	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk8` BellSoft Hardened Containers:25	8.452_p11-r0 up to 8.513_p9-r0	8.513_p9-r0
`openjdk8-perf` BellSoft Hardened Containers:25	8.472_p10-r0 up to 8.513_p10-r0	8.513_p10-r0
`openjdk11-container-jre` BellSoft Hardened Containers:stream	11.0.19_p7-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-lite` BellSoft Hardened Containers:stream	11.0.19_p7-r1 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk17-container-jre` BellSoft Hardened Containers:stream	17.0.7_p7-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-crac` BellSoft Hardened Containers:stream	17.0.10_p13-r0 up to 17.0.21.0.3_p6-r0	17.0.21.0.3_p6-r0
`openjdk17-lite` BellSoft Hardened Containers:stream	17.0.7_p7-r1 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk21-container-jre` BellSoft Hardened Containers:stream	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-crac` BellSoft Hardened Containers:stream	21.0.2_p15-r0 up to 21.0.13.0.3_p6-r0	21.0.13.0.3_p6-r0
`openjdk21-lite` BellSoft Hardened Containers:stream	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk25-container-jre` BellSoft Hardened Containers:stream	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-lite` BellSoft Hardened Containers:stream	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk27-container-jre` BellSoft Hardened Containers:stream	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-lite` BellSoft Hardened Containers:stream	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk8` BellSoft Hardened Containers:stream	8u372_p7-r1 up to 8.513_p9-r0	8.513_p9-r0
`openjdk-17` Debian:12	before 17.0.21+9-1~deb12u1, plus listed versions 17.0.10+7-117.0.10+7-1~deb11u117.0.10+7-1~deb12u117.0.10+7-217.0.10+7-3 Show 45 moreShow less 17.0.10~6ea-117.0.11+9-117.0.11+9-1~deb11u117.0.11+9-1~deb12u117.0.11~6ea-117.0.11~7ea-117.0.12+7-117.0.12+7-217.0.12+7-2~deb11u117.0.12+7-2~deb12u117.0.12~6ea-117.0.13+11-117.0.13+11-1~deb11u117.0.13+11-1~deb12u117.0.13+11-217.0.13+11-2~deb12u117.0.13~6ea-117.0.14+7-117.0.14+7-1~deb11u117.0.14+7-1~deb12u117.0.14~6ea-117.0.15+6-117.0.15+6-1~deb11u117.0.15+6-1~deb12u117.0.15~4ea-117.0.15~5ea-117.0.16+8-117.0.16+8-1~deb11u117.0.16+8-1~deb12u117.0.16~5ea-117.0.17+10-117.0.17+10-1~deb11u117.0.17+10-1~deb12u117.0.17~5ea-117.0.17~8ea-117.0.18+8-117.0.18+8-1~deb11u117.0.18+8-1~deb12u117.0.18~7ea-117.0.19+10-117.0.19+10-1~deb11u117.0.19+10-1~deb12u117.0.19+10-1~deb12u217.0.19~6ea-117.0.19~9ea-1	17.0.21+9-1~deb12u1
`openjdk-21` Debian:13	before 21.0.13+9-1~deb13u2, plus listed versions 21.0.10+7-121.0.10+7-1~deb13u121.0.10~4ea-121.0.10~6ea-121.0.11+10-1 Show 22 moreShow less 21.0.11+10-1~deb13u121.0.11+10-1~deb13u221.0.11~5ea-121.0.11~6ea-121.0.11~8ea-121.0.11~9ea-121.0.11~9ea-221.0.12+8-121.0.12+8-1~deb13u121.0.12+8-221.0.12.1+1-121.0.12.1+1-1~deb13u121.0.12~5ea-121.0.12~7ea-121.0.13+9-1~deb13u121.0.13~6ea-121.0.13~8ea-121.0.8+9-121.0.9+10-121.0.9+10-1~deb13u121.0.9~5ea-121.0.9~8ea-1	21.0.13+9-1~deb13u2
`openjdk-21` Debian:14	before 21.0.13+9-1, plus listed versions 21.0.10+7-121.0.10+7-1~deb13u121.0.10~4ea-121.0.10~6ea-121.0.11+10-1 Show 23 moreShow less 21.0.11+10-1~deb13u121.0.11+10-1~deb13u221.0.11~5ea-121.0.11~6ea-121.0.11~8ea-121.0.11~9ea-121.0.11~9ea-221.0.12+8-121.0.12+8-1~deb13u121.0.12+8-221.0.12.1+1-121.0.12.1+1-1~deb13u121.0.12~5ea-121.0.12~7ea-121.0.13+9-1~deb13u121.0.13+9-1~deb13u221.0.13~6ea-121.0.13~8ea-121.0.8+9-121.0.9+10-121.0.9+10-1~deb13u121.0.9~5ea-121.0.9~8ea-1	21.0.13+9-1
`openjdk-25` Debian:13	before 25.0.5+8-1~deb13u1, plus listed versions 25+36-125.0.1+8-125.0.1+8-1~deb13u125.0.1+8-225.0.1+8-3 Show 24 moreShow less 25.0.2+10-125.0.2+10-1~deb13u225.0.3+9-125.0.3+9-225.0.3+9-2~deb13u125.0.3~5ea-125.0.3~5ea-225.0.3~7ea-125.0.3~7ea-225.0.3~8ea-125.0.3~8ea-225.0.4+7-125.0.4+7-1~deb13u125.0.4+7-225.0.4.1+1-125.0.4.1+1-1~deb13u125.0.4~4ea-125.0.4~6ea-125.0.5~6ea-125.0.5~7ea-125.0.5~7ea-225~32ea-125~34ea-125~36ea-1	25.0.5+8-1~deb13u1
`openjdk-25` Debian:14	before 25.0.5+8-1, plus listed versions 25+36-125.0.1+8-125.0.1+8-1~deb13u125.0.1+8-225.0.1+8-3 Show 25 moreShow less 25.0.2+10-125.0.2+10-1~deb13u225.0.3+9-125.0.3+9-225.0.3+9-2~deb13u125.0.3~5ea-125.0.3~5ea-225.0.3~7ea-125.0.3~7ea-225.0.3~8ea-125.0.3~8ea-225.0.4+7-125.0.4+7-1~deb13u125.0.4+7-225.0.4.1+1-125.0.4.1+1-1~deb13u125.0.4~4ea-125.0.4~6ea-125.0.5+8-1~deb13u125.0.5~6ea-125.0.5~7ea-125.0.5~7ea-225~32ea-125~34ea-125~36ea-1	25.0.5+8-1
`openjdk-27` Debian:14	All versions, plus listed versions 27+35-127+35-227.0.1+9-127.0.1.0.2+1-127~10ea-1 Show 14 moreShow less 27~13ea-127~13ea-227~17ea-127~17ea-227~18ea-127~18ea-2~exp127~18ea-2~exp227~19ea-127~23ea-127~24ea-127~24ea-227~30ea-127~33ea-127~34ea-1	None known
`java-21-openjdk` Mageia:10 From an advisory covering 38 CVEs	before 21.0.13.0.9-1.mga10	21.0.13.0.9-1.mga10
`java-17-openjdk` Mageia:10 From an advisory covering 38 CVEs	before 17.0.21.0.9-1.mga10	17.0.21.0.9-1.mga10
`java-latest-openjdk` Mageia:10 From an advisory covering 38 CVEs	before 25.0.5.0.8-1.rolling.1.mga10	25.0.5.0.8-1.rolling.1.mga10
`timezone` Mageia:10 From an advisory covering 38 CVEs	before 2026e-1.mga10	2026e-1.mga10
`java-25-openjdk` Rocky Linux:9 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el9_8	1:25.0.5.0.8-1.0.el9_8
`java-17-openjdk` Rocky Linux:8 From an advisory covering 36 CVEs	before 1:17.0.21.0.9-2.1.el8_10	1:17.0.21.0.9-2.1.el8_10
`openjdk-8` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 8u66-b01-58u72-b05-1ubuntu18u72-b05-58u72-b05-68u72-b15-1 Show 45 moreShow less 8u72-b15-2ubuntu18u72-b15-2ubuntu38u72-b15-3ubuntu18u77-b03-1ubuntu28u77-b03-3ubuntu18u77-b03-3ubuntu28u77-b03-3ubuntu38u91-b14-0ubuntu4~16.04.18u91-b14-3ubuntu1~16.04.18u111-b14-2ubuntu0.16.04.28u121-b13-0ubuntu1.16.04.28u131-b11-0ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.38u151-b12-0ubuntu0.16.04.28u162-b12-0ubuntu0.16.04.28u171-b11-0ubuntu0.16.04.18u181-b13-0ubuntu0.16.04.18u181-b13-1ubuntu0.16.04.18u191-b12-0ubuntu0.16.04.18u191-b12-2ubuntu0.16.04.18u212-b03-0ubuntu1.16.04.18u222-b10-1ubuntu1~16.04.18u232-b09-0ubuntu1~16.04.18u242-b08-0ubuntu3~16.048u252-b09-1~16.048u265-b01-0ubuntu2~16.048u272-b10-0ubuntu1~16.048u275-b01-0ubuntu1~16.048u282-b08-0ubuntu1~16.048u292-b10-0ubuntu1~16.04.18u312-b07-0ubuntu1~16.048u342-b07-0ubuntu1~16.048u352-ga-1~16.048u362-ga-0ubuntu1~16.04.18u372-ga~us1-0ubuntu1~16.048u382-ga-1~16.04.18u392-ga-1~16.048u432-ga~us1-0ubuntu2~16.04.48u442-b06~us1-0ubuntu1~16.048u452-ga~us1-0ubuntu1~16.04.18u462-ga~us1-0ubuntu2~16.04.28u472-ga-1~16.048u482-ga~us1-0ubuntu1~16.048u492-ga~us2-0ubuntu1~16.04.1	None known
`openjdk-9` Ubuntu:16.04:LTS	All versions, plus listed versions 9~b88-19~b101-2ubuntu29~b102-19~b113-0ubuntu19~b114-0ubuntu1	None known
`openjdk-lts` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 9.0.4+12-2ubuntu49.0.4+12-4ubuntu110~46-4ubuntu110~46-5ubuntu110.0.1+10-1ubuntu2 Show 38 moreShow less 10.0.1+10-3ubuntu110.0.2+13-1ubuntu0.18.04.110.0.2+13-1ubuntu0.18.04.210.0.2+13-1ubuntu0.18.04.310.0.2+13-1ubuntu0.18.04.411.0.2+9-3ubuntu1~18.04.311.0.3+7-1ubuntu2~18.04.111.0.4+11-1ubuntu2~18.04.311.0.5+10-0ubuntu1.1~18.0411.0.6+10-1ubuntu1~18.04.111.0.7+10-2ubuntu2~18.0411.0.8+10-0ubuntu1~18.04.111.0.9+11-0ubuntu1~18.04.111.0.9.1+1-0ubuntu1~18.0411.0.10+9-0ubuntu1~18.0411.0.11+9-0ubuntu2~18.0411.0.13+8-0ubuntu1~18.0411.0.14+9-0ubuntu2~18.0411.0.14.1+1-0ubuntu1~18.0411.0.15+10-0ubuntu0.18.04.111.0.16+8-0ubuntu1~18.0411.0.17+8-1ubuntu2~18.0411.0.18+10-0ubuntu1~18.04.111.0.19+7~us1-0ubuntu1~18.04.111.0.20+8-1ubuntu1~18.0411.0.20.1+1-0ubuntu1~18.0411.0.21+9-0ubuntu1~18.0411.0.22+7-0ubuntu2~18.04.111.0.23+9-1ubuntu1~18.04.111.0.25+9-1ubuntu1~18.0411.0.26+4-1ubuntu1~18.0411.0.27+6~us1-0ubuntu1~18.0411.0.28+6-1ubuntu1~18.04.111.0.29+7-1ubuntu1~18.0411.0.30+7-1ubuntu1~18.0411.0.31+11-1ubuntu1~18.04.211.0.32+9-1ubuntu1~18.0411.0.32.1+1-1ubuntu1~18.04	None known
`openjdk-17` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 17+35-1~18.0417.0.1+12-1~18.0417.0.2+8-1~18.0417.0.3+7-0ubuntu0.18.04.117.0.4+8-1~18.04 Show 17 moreShow less 17.0.5+8-2ubuntu1~18.0417.0.6+10-0ubuntu1~18.04.117.0.7+7~us1-0ubuntu1~18.0417.0.8+7-1~18.0417.0.8.1+1~us1-0ubuntu1~18.0417.0.9+9-1~18.0417.0.10+7-1~18.04.117.0.11+9-1~18.04.117.0.13+11-2ubuntu1~18.04.217.0.14+7-1~18.0417.0.15+6~us1-0ubuntu1~18.0417.0.16+8~us1-0ubuntu1~18.04.117.0.17+10-1~18.0417.0.18+8-1~18.0417.0.19+10-1~18.04.217.0.20+8-1~18.0417.0.20.1+1-1~18.04	None known
`openjdk-8` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 8u144-b01-28u151-b12-18u162-b12-18u171-b11-0ubuntu0.18.04.18u181-b13-0ubuntu0.18.04.1 Show 32 moreShow less 8u181-b13-1ubuntu0.18.04.18u191-b12-0ubuntu0.18.04.18u191-b12-2ubuntu0.18.04.18u212-b03-0ubuntu1.18.04.18u222-b10-1ubuntu1~18.04.18u232-b09-0ubuntu1~18.04.18u242-b08-0ubuntu3~18.048u252-b09-1~18.048u265-b01-0ubuntu2~18.048u272-b10-0ubuntu1~18.048u275-b01-0ubuntu1~18.048u282-b08-0ubuntu1~18.048u292-b10-0ubuntu1~18.048u312-b07-0ubuntu1~18.048u342-b07-0ubuntu1~18.048u352-ga-1~18.048u362-ga-0ubuntu1~18.04.18u372-ga~us1-0ubuntu1~18.048u382-ga-1~18.04.18u392-ga-1~18.048u402-ga-2ubuntu1~18.048u412-ga-1~18.04.18u422-b05-1~18.048u432-ga~us1-0ubuntu2~18.048u442-b06~us1-0ubuntu1~18.048u452-ga~us1-0ubuntu1~18.048u462-ga~us1-0ubuntu2~18.04.28u472-ga-1~18.048u482-ga~us1-0ubuntu1~18.048u492-ga~us2-0ubuntu1~18.04.18u502-ga~us1-0ubuntu1~18.048u504-ga-1ubuntu1~18.04.3	None known
`openjdk-lts` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 11.0.5+10-0ubuntu111.0.5+10-2ubuntu111.0.6+10-1ubuntu111.0.6+10-2ubuntu211.0.7+9-1ubuntu1 Show 30 moreShow less 11.0.7+10-2ubuntu111.0.7+10-3ubuntu111.0.8+10-0ubuntu1~20.0411.0.9+11-0ubuntu1~20.0411.0.9.1+1-0ubuntu1~20.0411.0.10+9-0ubuntu1~20.0411.0.11+9-0ubuntu2~20.0411.0.13+8-0ubuntu1~20.0411.0.14+9-0ubuntu2~20.0411.0.14.1+1-0ubuntu1~20.0411.0.15+10-0ubuntu0.20.04.111.0.16+8-0ubuntu1~20.0411.0.17+8-1ubuntu2~20.0411.0.18+10-0ubuntu1~20.04.111.0.19+7~us1-0ubuntu1~20.04.111.0.20+8-1ubuntu1~20.0411.0.20.1+1-0ubuntu1~20.0411.0.21+9-0ubuntu1~20.0411.0.22+7-0ubuntu2~20.04.111.0.23+9-1ubuntu1~20.04.211.0.24+8-1ubuntu3~20.0411.0.25+9-1ubuntu1~20.0411.0.26+4-1ubuntu1~20.0411.0.27+6~us1-0ubuntu1~20.0411.0.28+6-1ubuntu1~20.04.111.0.29+7-1ubuntu1~20.0411.0.30+7-1ubuntu1~20.0411.0.31+11-1ubuntu1~20.04.211.0.32+9-1ubuntu1~20.0411.0.32.1+1-1ubuntu1~20.04	None known
`openjdk-13` Ubuntu:20.04:LTS	All versions, plus listed versions 13+33-113.0.1+9-213.0.2+8-113.0.2+8-213.0.3+3-1ubuntu213.0.4+8-1~20.0413.0.7+5-0ubuntu1~20.04	None known
`openjdk-16` Ubuntu:20.04:LTS	All versions, plus listed versions 16.0.1+9-1~20.04	None known
`openjdk-17` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 17+35-1~20.0417.0.1+12-1~20.0417.0.2+8-1~20.0417.0.3+7-0ubuntu0.20.04.117.0.4+8-1~20.04 Show 18 moreShow less 17.0.5+8-2ubuntu1~20.0417.0.6+10-0ubuntu1~20.04.117.0.7+7~us1-0ubuntu1~20.0417.0.8+7-1~20.04.217.0.8.1+1~us1-0ubuntu1~20.0417.0.9+9-1~20.0417.0.10+7-1~20.04.117.0.11+9-1~20.04.217.0.12+7-1ubuntu2~20.0417.0.13+11-2ubuntu1~20.0417.0.14+7-1~20.0417.0.15+6~us1-0ubuntu1~20.0417.0.16+8~us1-0ubuntu1~20.04.617.0.17+10-1~20.0417.0.18+8-1~20.0417.0.19+10-1~20.04.217.0.20+8-1~20.0417.0.20.1+1-1~20.04	None known
`openjdk-21` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 21.0.1+12-2~20.04.121.0.2+13-1~20.04.121.0.3+9-1ubuntu1~20.04.121.0.4+7-1ubuntu2~20.0421.0.5+11-1ubuntu1~20.04 Show 8 moreShow less 21.0.6+7-1~20.04.121.0.7+6~us1-0ubuntu1~20.0421.0.8+9~us1-0ubuntu1~20.04.121.0.9+10-1~20.0421.0.10+7-1~20.0421.0.11+10-1~20.04.221.0.12+8-1~20.0421.0.12.1+1-1~20.04.4	None known
`openjdk-8` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 8u232-b09-0ubuntu18u232-b09-18u242-b04-18u242-b08-0ubuntu38u252-b07-1 Show 25 moreShow less 8u252-b09-1ubuntu18u265-b01-0ubuntu2~20.048u272-b10-0ubuntu1~20.048u275-b01-0ubuntu1~20.048u282-b08-0ubuntu1~20.048u292-b10-0ubuntu1~20.048u312-b07-0ubuntu1~20.048u342-b07-0ubuntu1~20.048u352-ga-1~20.048u362-ga-0ubuntu1~20.04.18u372-ga~us1-0ubuntu1~20.048u382-ga-1~20.04.18u392-ga-1~20.048u402-ga-2ubuntu1~20.048u412-ga-1~20.04.18u422-b05-1~20.048u432-ga~us1-0ubuntu2~20.048u442-b06~us1-0ubuntu1~20.048u452-ga~us1-0ubuntu1~20.048u462-ga~us1-0ubuntu2~20.04.28u472-ga-1~20.048u482-ga~us1-0ubuntu1~20.048u492-ga~us2-0ubuntu1~20.04.18u502-ga~us1-0ubuntu1~20.048u504-ga-1ubuntu1~20.04.3	None known
`openjdk-17` Ubuntu:22.04:LTS	All versions, plus listed versions 17+35-117.0.1+12-117.0.2+8-117.0.3+7-0ubuntu0.22.04.117.0.4+8-1~22.04 Show 18 moreShow less 17.0.5+8-2ubuntu1~22.0417.0.6+10-0ubuntu1~22.0417.0.7+7~us1-0ubuntu1~22.04.217.0.8+7-1~22.0417.0.8.1+1~us1-0ubuntu1~22.0417.0.9+9-1~22.0417.0.10+7-1~22.04.117.0.11+9-1~22.04.117.0.12+7-1ubuntu2~22.0417.0.13+11-2ubuntu1~22.0417.0.14+7-1~22.04.117.0.15+6~us1-0ubuntu1~22.0417.0.16+8~us1-0ubuntu1~22.04.117.0.17+10-1~22.0417.0.18+8-1~22.04.117.0.19+10-1~22.04.217.0.20+8-1~22.0417.0.20.1+1-1~22.04	None known
`openjdk-18` Ubuntu:22.04:LTS	All versions, plus listed versions 18~15ea-418~20ea-118~32ea-118~36ea-118.0.2+9-2~22.04	None known
`openjdk-21` Ubuntu:22.04:LTS	All versions, plus listed versions 21.0.1+12-2~22.0421.0.2+13-1~22.04.121.0.3+9-1ubuntu1~22.04.121.0.4+7-1ubuntu2~22.0421.0.5+11-1ubuntu1~22.04 Show 8 moreShow less 21.0.6+7-1~22.04.121.0.7+6~us1-0ubuntu1~22.0421.0.8+9~us1-0ubuntu1~22.04.121.0.9+10-1~22.0421.0.10+7-1~22.0421.0.11+10-1~22.04.221.0.12+8-1~22.0421.0.12.1+1-1~22.04.4	None known
`openjdk-25` Ubuntu:22.04:LTS	All versions, plus listed versions 25+36-1~22.04.225.0.1+8-1~22.0425.0.2+10-1~22.0425.0.3+9-2~22.04.225.0.4+7-1~22.0425.0.4.1+1-1~22.04.4	None known
`openjdk-8` Ubuntu:22.04:LTS	All versions, plus listed versions 8u302-b08-0ubuntu28u312-b07-0ubuntu18u342-b07-0ubuntu1~22.048u352-ga-1~22.048u362-ga-0ubuntu1~22.04 Show 15 moreShow less 8u372-ga~us1-0ubuntu1~22.048u382-ga-1~22.04.18u392-ga-1~22.048u402-ga-2ubuntu1~22.048u412-ga-1~22.04.18u422-b05-1~22.048u432-ga~us1-0ubuntu2~22.048u442-b06~us1-0ubuntu1~22.048u452-ga~us1-0ubuntu1~22.048u462-ga~us1-0ubuntu2~22.04.28u472-ga-1~22.048u482-ga~us1-0ubuntu1~22.048u492-ga~us2-0ubuntu1~22.04.18u502-ga~us1-0ubuntu1~22.048u504-ga-1ubuntu1~22.04.3	None known
`openjdk-lts` Ubuntu:22.04:LTS	All versions, plus listed versions 11.0.12+7-0ubuntu311.0.13+8-0ubuntu111.0.14+9-0ubuntu211.0.14.1+1-0ubuntu111.0.15+10-0ubuntu0.22.04.1 Show 19 moreShow less 11.0.16+8-0ubuntu1~22.0411.0.17+8-1ubuntu2~22.0411.0.18+10-0ubuntu1~22.0411.0.19+7~us1-0ubuntu1~22.04.111.0.20+8-1ubuntu1~22.0411.0.20.1+1-0ubuntu1~22.0411.0.21+9-0ubuntu1~22.0411.0.22+7-0ubuntu2~22.04.111.0.23+9-1ubuntu1~22.04.111.0.24+8-1ubuntu3~22.0411.0.25+9-1ubuntu1~22.0411.0.26+4-1ubuntu1~22.0411.0.27+6~us1-0ubuntu1~22.0411.0.28+6-1ubuntu1~22.04.111.0.29+7-1ubuntu1~22.0411.0.30+7-1ubuntu1~22.0411.0.31+11-1ubuntu1~22.04.211.0.32+9-1ubuntu1~22.0411.0.32.1+1-1ubuntu1~22.04	None known
`openjdk-17` Ubuntu:24.04:LTS	All versions, plus listed versions 17.0.9~6ea-117.0.9+9-117.0.9+9-217.0.10~6ea-117.0.10+7-1 Show 13 moreShow less 17.0.11~7ea-117.0.11~7ea-1build117.0.11+9-117.0.12+7-1ubuntu2~24.0417.0.13+11-2ubuntu1~24.0417.0.14+7-1~24.0417.0.15+6~us1-0ubuntu1~24.0417.0.16+8~us1-0ubuntu1~24.04.117.0.17+10-1~24.0417.0.18+8-1~24.04.117.0.19+10-1~24.04.217.0.20+8-1~24.0417.0.20.1+1-1~24.04	None known
`openjdk-21` Ubuntu:24.04:LTS	All versions, plus listed versions 21+35-121.0.1+12-221.0.1+12-321.0.2+13-121.0.2+13-2 Show 15 moreShow less 21.0.3~7ea-121.0.3~7ea-1build121.0.3~7ea-1build221.0.3+9-121.0.3+9-1ubuntu121.0.4+7-1ubuntu2~24.0421.0.5+11-1ubuntu1~24.0421.0.6+7-1~24.04.121.0.7+6~us1-0ubuntu1~24.0421.0.8+9~us1-0ubuntu1~24.04.121.0.9+10-1~24.0421.0.10+7-1~24.0421.0.11+10-1~24.04.221.0.12+8-1~24.0421.0.12.1+1-1~24.04.4	None known
`openjdk-25` Ubuntu:24.04:LTS	All versions, plus listed versions 25+36-1~24.04.225.0.1+8-1~24.0425.0.2+10-1~24.0425.0.3+9-2~24.04.225.0.4+7-1~24.0425.0.4.1+1-1~24.04.4	None known
`openjdk-8` Ubuntu:24.04:LTS	All versions, plus listed versions 8u382-ga-1ubuntu18u392-ga-18u402-ga-18u402-ga-28u402-ga-2ubuntu1 Show 14 moreShow less 8u402-ga-2ubuntu68u402-ga-2ubuntu78u402-ga-8build18u412-ga-1~24.04.28u422-b05-1~24.048u432-ga~us1-0ubuntu2~24.048u442-b06~us1-0ubuntu1~24.048u452-ga~us1-0ubuntu1~24.048u462-ga~us1-0ubuntu2~24.04.28u472-ga-1~24.048u482-ga~us1-0ubuntu1~24.048u492-ga~us2-0ubuntu1~24.04.18u502-ga~us1-0ubuntu1~24.048u504-ga-1ubuntu1~24.04.3	None known
`openjdk-lts` Ubuntu:Pro:24.04:LTS	All versions, plus listed versions 11.0.20+8-1ubuntu111.0.21+9-0ubuntu111.0.22+7-0ubuntu211.0.23~7ea-1ubuntu111.0.23~7ea-1ubuntu2 Show 11 moreShow less 11.0.23+9-1ubuntu111.0.24+8-1ubuntu3~24.04.111.0.25+9-1ubuntu1~24.0411.0.26+4-1ubuntu1~24.0411.0.27+6~us1-0ubuntu1~24.0411.0.28+6-1ubuntu1~24.04.111.0.29+7-1ubuntu1~24.0411.0.30+7-1ubuntu1~24.0411.0.31+11-1ubuntu1~24.04.211.0.32+9-1ubuntu1~24.0411.0.32.1+1-1ubuntu1~24.04	None known
`openjdk-17` Ubuntu:26.10	All versions, plus listed versions 17.0.18+8-117.0.19+10-117.0.20~5ea-117.0.20+8-117.0.20.1+1-117.0.21~6ea-1	None known
`openjdk-17-crac` Ubuntu:26.10	All versions, plus listed versions 17.0.18+8-0ubuntu117.0.19+10-0ubuntu117.0.20+8-0ubuntu1	None known
`openjdk-21` Ubuntu:26.10	All versions, plus listed versions 21.0.11~8ea-121.0.11+10-121.0.12~5ea-121.0.12+8-121.0.12.1+1-1	None known
`openjdk-21-crac` Ubuntu:26.10	All versions, plus listed versions 21.0.10+7-0ubuntu121.0.11+10-0ubuntu121.0.12+8-0ubuntu1	None known
`openjdk-25` Ubuntu:26.10	All versions, plus listed versions 25.0.3~7ea-225.0.3+9-225.0.4~4ea-125.0.4+7-125.0.4.1+1-1	None known
`openjdk-27` Ubuntu:26.10	All versions, plus listed versions 27~19ea-127~34ea-127+35-1	None known
`openjdk-8` Ubuntu:26.10	All versions, plus listed versions 8u482-ga~us1-0ubuntu18u492-ga~us2-0ubuntu28u502-ga~us1-0ubuntu18u504-ga-1ubuntu1	None known
`openjdk-lts` Ubuntu:26.10	All versions, plus listed versions 11.0.30+7-1ubuntu111.0.31+11-1ubuntu211.0.32+9-1ubuntu111.0.32.1+1-1ubuntu111.0.32.1+1-1ubuntu2	None known
`openjdk-17` Ubuntu:26.04:LTS	All versions, plus listed versions 17.0.17~8ea-117.0.17+10-117.0.18~7ea-117.0.18+8-117.0.19+10-1~26.04.217.0.20+8-1~26.0417.0.20.1+1-1~26.04	None known
`openjdk-17-crac` Ubuntu:26.04:LTS	All versions, plus listed versions 17.0.16+8-0ubuntu117.0.17+10-0ubuntu117.0.18+8-0ubuntu117.0.19+10-0ubuntu1~26.04.117.0.20+8-0ubuntu1~26.04	None known
`openjdk-21` Ubuntu:26.04:LTS	All versions, plus listed versions 21.0.9~8ea-121.0.9+10-121.0.10~4ea-121.0.10~6ea-121.0.10+7-1 Show 5 moreShow less 21.0.11~5ea-121.0.11~8ea-121.0.11+10-1~26.04.221.0.12+8-1~26.0421.0.12.1+1-1~26.04.4	None known
`openjdk-21-crac` Ubuntu:26.04:LTS	All versions, plus listed versions 21.0.8+9-0ubuntu121.0.9+10-0ubuntu121.0.10+7-0ubuntu121.0.11+10-0ubuntu1~26.04.121.0.12+8-0ubuntu1~26.04	None known
`openjdk-25` Ubuntu:26.04:LTS	All versions, plus listed versions 25+36-125.0.1+8-125.0.1+8-225.0.1+8-325.0.2+10-1 Show 5 moreShow less 25.0.3~5ea-225.0.3~7ea-225.0.3+9-2~26.04.225.0.4+7-1~26.0425.0.4.1+1-1~26.04.4	None known
`openjdk-8` Ubuntu:26.04:LTS	All versions, plus listed versions 8u462-ga-18u472-ga~us1-0ubuntu18u472-ga-18u482-ga~us1-0ubuntu18u492-ga~us2-0ubuntu1~26.04.18u502-ga~us1-0ubuntu1~26.048u504-ga-1ubuntu1~26.04.3	None known
`openjdk-lts` Ubuntu:26.04:LTS	All versions, plus listed versions 11.0.28+6-1ubuntu111.0.29+7-1ubuntu111.0.30+7-1ubuntu111.0.31+11-1ubuntu1~26.04.211.0.32+9-1ubuntu1~26.0411.0.32.1+1-1ubuntu1~26.04	None known
`java-17-openjdk` openSUSE:Tumbleweed From an advisory covering 35 CVEs	before 17.0.21.0-1.1	17.0.21.0-1.1
`java-21-openjdk` openSUSE:Tumbleweed From an advisory covering 38 CVEs	before 21.0.13.0-1.1	21.0.13.0-1.1
`java-25-openjdk` openSUSE:Tumbleweed From an advisory covering 39 CVEs	before 25.0.5.0-1.1	25.0.5.0-1.1
`java-11-openjdk` openSUSE:Tumbleweed From an advisory covering 38 CVEs	before 11.0.33.0-1.1	11.0.33.0-1.1
`java-25-openj9` openSUSE:Tumbleweed From an advisory covering 20 CVEs	before 25.0.5.0-1.1	25.0.5.0-1.1
`java-1_8_0-openj9` openSUSE:Tumbleweed From an advisory covering 18 CVEs	before 1.8.0.512-1.1	1.8.0.512-1.1

History

History
Recorded	Changed	Sources
Nov 7, 2026	affected, aliases	OSV
Nov 6, 2026	affected, aliases	OSV
Nov 6, 2026	affected
Nov 5, 2026	affected, aliases, references	OSV
Nov 5, 2026	facts	OSV
Nov 3, 2026	affected, aliases, references	OSV
Nov 3, 2026	affected, aliases, references	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-87294 is a medium vulnerability (CVSS 6.5) in Oracle Corporation Graalvm Enterprise Edition, published October 20, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.26%, the 18th percentile. Fixed in openjdk17 17.0.21.0.3_p1-r0.

References

Show 181 moreShow less

This page doesn't list everything

Left out here: 6 package rows and 32 versions. The JSON record has them.