CVE-2026-101516

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...

6.5 MediumFix available

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: Low
Integrity: Low
Availability: None

Exploit likelihood

0.27%Unchanged since Oct 21, 2026

What each source reports

CVE List Score used6.5

Record: CVE-2026-101516
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness: CWE-284
Updated: 2026-11-06

EUVDEUVD-2026-1059296.5

Record: EUVD-2026-105929
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated: 2026-11-06

GitHub AdvisoriesGHSA-4p83-qqhw-ff666.5

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...

Record: GHSA-4p83-qqhw-ff66
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness: CWE-284
Updated: 2026-11-06

NVD6.5

Record: CVE-2026-101516
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness: CWE-284
Updated: 2026-11-06

OSVALPINE-CVE-2026-1015166.5

Record: ALPINE-CVE-2026-101516
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated: 2026-11-03

OSVBELL-CVE-2026-1015166.5

Record: BELL-CVE-2026-101516
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated: 2026-11-10

Show 21 moreShow less

OSVDEBIAN-CVE-2026-1015166.5

Record: DEBIAN-CVE-2026-101516
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated: 2026-11-07

OSVRLSA-2026:883476.8

Important: java-25-openjdk security update

The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Improve C2 loop transformations (CVE-2026-83378)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance Vector Processing (CVE-2026-87255)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance HTTP Server (CVE-2026-87291)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance HTTP Client (CVE-2026-91332)
JDK: Improve ciphertext handling (CVE-2026-91333)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance jmod handling (CVE-2026-91375)
JDK: Enhance JShell (CVE-2026-91379)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance HTTP client caching (CVE-2026-91394)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP server (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)
JDK: Enhance C2 comparisons (CVE-2026-91487)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record: RLSA-2026:88347
CVSS 3.1: 6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated: 2026-11-02

OSVRLSA-2026:883526.8

Important: java-17-openjdk security update for Rocky Linux 8

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance HTTP Client (CVE-2026-91332)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance jmod handling (CVE-2026-91375)
JDK: Enhance JShell (CVE-2026-91379)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance Image Processing (CVE-2026-91382)
JDK: Enhance HTTP client caching (CVE-2026-91394)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP server (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)
JDK: Enhance C2 comparisons (CVE-2026-91487)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record: RLSA-2026:88352
CVSS 3.1: 6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated: 2026-11-02

OSVUBUNTU-CVE-2026-1015166.5

Record: UBUNTU-CVE-2026-101516
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated: 2026-11-11

OSVALSA-2026:88347No score

Important: java-25-openjdk security update

The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Improve C2 loop transformations (CVE-2026-83378)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance Vector Processing (CVE-2026-87255)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance HTTP Server (CVE-2026-87291)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance HTTP Client (CVE-2026-91332)
JDK: Improve ciphertext handling (CVE-2026-91333)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance jmod handling (CVE-2026-91375)
JDK: Enhance JShell (CVE-2026-91379)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance HTTP client caching (CVE-2026-91394)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP server (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)
JDK: Enhance C2 comparisons (CVE-2026-91487)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record: ALSA-2026:88347
Updated: 2026-11-02

OSVALSA-2026:88349No score

Important: java-21-openjdk security update for AlmaLinux 8 and 9

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Improve C2 loop transformations (CVE-2026-83378)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance HTTP Server (CVE-2026-87291)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance HTTP Client (CVE-2026-91332)
JDK: Improve ciphertext handling (CVE-2026-91333)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance jmod handling (CVE-2026-91375)
JDK: Enhance JShell (CVE-2026-91379)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance HTTP client caching (CVE-2026-91394)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP server (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)
JDK: Enhance C2 comparisons (CVE-2026-91487)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record: ALSA-2026:88349
Updated: 2026-11-02

OSVALSA-2026:88352No score

Important: java-17-openjdk security update for AlmaLinux 8

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance HTTP Client (CVE-2026-91332)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance jmod handling (CVE-2026-91375)
JDK: Enhance JShell (CVE-2026-91379)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance Image Processing (CVE-2026-91382)
JDK: Enhance HTTP client caching (CVE-2026-91394)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP server (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)
JDK: Enhance C2 comparisons (CVE-2026-91487)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record: ALSA-2026:88352
Updated: 2026-11-02

OSVALSA-2026:90500No score

Important: java-17-openjdk security update for AlmaLinux 9

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance HTTP Client (CVE-2026-91332)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance jmod handling (CVE-2026-91375)
JDK: Enhance JShell (CVE-2026-91379)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance Image Processing (CVE-2026-91382)
JDK: Enhance HTTP client caching (CVE-2026-91394)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP server (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)
JDK: Enhance C2 comparisons (CVE-2026-91487)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record: ALSA-2026:90500
Updated: 2026-11-02

OSVALSA-2026:90504No score

Important: java-21-openjdk security update for AlmaLinux 10

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Improve C2 loop transformations (CVE-2026-83378)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance HTTP Server (CVE-2026-87291)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance HTTP Client (CVE-2026-91332)
JDK: Improve ciphertext handling (CVE-2026-91333)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance jmod handling (CVE-2026-91375)
JDK: Enhance JShell (CVE-2026-91379)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance HTTP client caching (CVE-2026-91394)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP server (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)
JDK: Enhance C2 comparisons (CVE-2026-91487)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record: ALSA-2026:90504
Updated: 2026-11-02

OSVMGASA-2026-0572No score

Updated java-latest-openjdk, timezone, java-21-openjdk, java-17-openjdk packages fix security vulnerabilities

Enhance PKCS5 padding. (CVE-2026-83374) Enhance TLS certificate handling. (CVE-2026-83376) Improve C2 loop transformations. (CVE-2026-83378) Enhance LDAP logins. (CVE-2026-83380) Enhance SASL Authentication. (CVE-2026-83381) Enhance WebRowSets. (CVE-2026-83387) Enhance HTTP Client Response Handling. (CVE-2026-83395) Enhance XML Processing. (CVE-2026-83400) Enhance XPath Expressions. (CVE-2026-87290) Enhance HTTP Server. (CVE-2026-87291) Enhance Network Clients. (CVE-2026-87292) Enhance Certificate Name Checks. (CVE-2026-87294) Enhance Template Handling. (CVE-2026-87367) Enhance HTTP Client. (CVE-2026-91332) Improve ciphertext handling. (CVE-2026-91333) Enhance JPEG loading. (CVE-2026-91334) Enhance Image Handling. (CVE-2026-91335) Enhance TLS handshakes. (CVE-2026-91373) Enhance jstatd. (CVE-2026-91374) Enhance jmod handling. (CVE-2026-91375) Enhance JShell. (CVE-2026-91379) Enhance Preferences. (CVE-2026-91380) Enhance HTTP client caching. (CVE-2026-91394) Enhance diagnostic sessions. (CVE-2026-91397) Enhance SOCKS5 support. (CVE-2026-91398) Enhance MIDI file handling. (CVE-2026-91400) Enhance zipfs. (CVE-2026-91410) Enhance font rendering. (CVE-2026-91415) Enhance GIF loading. (CVE-2026-91418) Enhance HTTP server parsing. (CVE-2026-91451) Enhance HTTP server. (CVE-2026-91452) Improve HTTP headers. (CVE-2026-91453) Enhance TLS Extensions. (CVE-2026-91461) Enhance krb5 tokens. (CVE-2026-91462) Enhance krb5 client. (CVE-2026-91463) Enhance Kerberos validation. (CVE-2026-91464) Enhance C2 comparisons. (CVE-2026-91487) Enhance Certificate Constraint Checking. (CVE-2026-101516)

Record: MGASA-2026-0572
Updated: 2026-11-03

OSVopenSUSE-SU-2026:12294-1No score

java-17-openjdk-17.0.21.0-1.1 on GA media

These are all security issues fixed in the java-17-openjdk-17.0.21.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12294-1
Updated: 2026-11-02

OSVopenSUSE-SU-2026:12328-1No score

java-21-openjdk-21.0.13.0-1.1 on GA media

These are all security issues fixed in the java-21-openjdk-21.0.13.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12328-1
Updated: 2026-11-02

OSVopenSUSE-SU-2026:12329-1No score

java-25-openjdk-25.0.5.0-1.1 on GA media

These are all security issues fixed in the java-25-openjdk-25.0.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12329-1
Updated: 2026-11-02

OSVopenSUSE-SU-2026:12418-1No score

java-11-openjdk-11.0.33.0-1.1 on GA media

These are all security issues fixed in the java-11-openjdk-11.0.33.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12418-1
Updated: 2026-11-05

OSVopenSUSE-SU-2026:12433-1No score

java-11-openj9-11.0.33.0-1.1 on GA media

These are all security issues fixed in the java-11-openj9-11.0.33.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12433-1
Updated: 2026-11-06

OSVopenSUSE-SU-2026:12434-1No score

java-17-openj9-17.0.21.0-1.1 on GA media

These are all security issues fixed in the java-17-openj9-17.0.21.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12434-1
Updated: 2026-11-06

OSVopenSUSE-SU-2026:12436-1No score

java-25-openj9-25.0.5.0-1.1 on GA media

These are all security issues fixed in the java-25-openj9-25.0.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12436-1
Updated: 2026-11-06

OSVopenSUSE-SU-2026:12459-1No score

java-1_8_0-openj9-1.8.0.512-1.1 on GA media

These are all security issues fixed in the java-1_8_0-openj9-1.8.0.512-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12459-1
Updated: 2026-11-07

OSVopenSUSE-SU-2026:12513-1No score

java-1_8_0-openjdk-1.8.0.512-1.1 on GA media

These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.512-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12513-1
Updated: 2026-11-11

OSVUSN-9014-1No score

openjdk-17 vulnerabilities

It was discovered that the Security component of OpenJDK 17 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83374)

It was discovered that the JSSE component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83376)

It was discovered that the JAAS component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83380)

It was discovered that the Security component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-83381)

It was discovered that the JDBC component of OpenJDK 17 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83387)

It was discovered that the Networking component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service or modify sensitive data. (CVE-2026-83395)

It was discovered that the JAXP component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-83400)

It was discovered that the JAXP component of OpenJDK 17 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-87290)

It was discovered that the Networking component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-87292)

It was discovered that the Security component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-87294)

It was discovered that the JAXP component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-87367)

It was discovered that the Networking component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-91332)

It was discovered that the ImageIO component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-91334)

It was discovered that the AWT component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-91335)

It was discovered that the JSSE component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-91373)

It was discovered that the Serviceability component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91374)

It was discovered that the Libraries component of OpenJDK 17 did not correctly authenticate users. A local attacker could possibly use this issue to modify sensitive data. (CVE-2026-91375)

It was discovered that the JDK tools component of OpenJDK 17 did not correctly authenticate users. A local attacker could possibly use this issue to modify sensitive data. (CVE-2026-91379)

It was discovered that the Utility component of OpenJDK 17 did not correctly authorize users. A local attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91380)

It was discovered that the 2D component of OpenJDK 17 did not correctly authenticate users. A remote attacker could possibly use this issue to cause a denial of service or modify sensitive data. (CVE-2026-91382)

It was discovered that the Networking component of OpenJDK 17 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data.…

Record: USN-9014-1
Updated: 2026-11-12

OSVUSN-9015-1No score

openjdk-21 vulnerabilities

It was discovered that the Security component of OpenJDK 21 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83374)

It was discovered that the JSSE component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83376)

It was discovered that the Compiler component of OpenJDK 21 did not correctly authorize users. An unauthenticated remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-83378)

It was discovered that the JAAS component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83380)

It was discovered that the Security component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-83381)

It was discovered that the JDBC component of OpenJDK 21 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83387)

It was discovered that the Networking component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service or modify sensitive data. (CVE-2026-83395)

It was discovered that the JAXP component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-83400)

It was discovered that the JAXP component of OpenJDK 21 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-87290)

It was discovered that the Networking component of OpenJDK 21 did not correctly authorize users. An unauthenticated remote attacker could possibly use this issue to read sensitive data. (CVE-2026-87291)

It was discovered that the Networking component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-87292)

It was discovered that the Security component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-87294)

It was discovered that the JAXP component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-87367)

It was discovered that the Networking component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-91332)

It was discovered that the Security component of OpenJDK 21 did not correctly authorize users. An unauthenticated remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91333)

It was discovered that the ImageIO component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-91334)

It was discovered that the AWT component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-91335)

It was discovered that the JSSE component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-91373)

It was discovered that the Serviceability component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91374)

It was discovered that the Libraries component of OpenJDK 21 did not correctly authenticate users. A local attacker could possibly use this issue to modify sensitive data. (CVE-2026-91375)

It was discovered that the JDK tools component of OpenJDK 21 did not correctly authenticate users. A local attacker could possibly use this issue to…

Record: USN-9015-1
Updated: 2026-11-12

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`openjdk25` Alpine:v3.23	before 25.0.5.0.3_p1-r0	25.0.5.0.3_p1-r0
`openjdk25` Alpine:v3.24	before 25.0.5.0.3_p1-r0	25.0.5.0.3_p1-r0
`java-25-openjdk` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-crypto-adapter` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-crypto-adapter-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-crypto-adapter-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-demo` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-demo-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-demo-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-devel` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`java-25-openjdk-devel-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-devel-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-headless` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-headless-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-headless-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-javadoc` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-javadoc-zip` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-jmods` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-jmods-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-jmods-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-src` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-src-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-src-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-static-libs` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-static-libs-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-static-libs-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-crypto-adapter` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-crypto-adapter-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-crypto-adapter-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-demo` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-demo-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-demo-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-devel` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-devel-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-devel-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-headless` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-headless-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-headless-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-javadoc` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-javadoc-zip` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-jmods` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-jmods-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-jmods-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-src` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-src-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-src-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-static-libs` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-static-libs-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-static-libs-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-21-openjdk` AlmaLinux:8 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.1.el8	1:21.0.13.0.9-1.1.el8
`java-21-openjdk` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-demo` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-demo-fastdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-demo-slowdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-devel` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-devel-fastdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-devel-slowdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-fastdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-headless` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-headless-fastdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-headless-slowdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-javadoc` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-javadoc-zip` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-jmods` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-jmods-fastdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-jmods-slowdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-slowdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-src` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-src-fastdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-src-slowdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-static-libs` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-static-libs-fastdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-static-libs-slowdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-17-openjdk` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-demo` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-demo-fastdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-demo-slowdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-devel` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-devel-fastdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-devel-slowdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-fastdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-headless` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-headless-fastdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-headless-slowdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-javadoc` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-javadoc-zip` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-jmods` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-jmods-fastdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-jmods-slowdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-slowdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-src` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-src-fastdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-src-slowdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-static-libs` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-static-libs-fastdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-static-libs-slowdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-demo` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-demo-fastdebug` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-demo-slowdebug` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-devel` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-devel-fastdebug` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-devel-slowdebug` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-fastdebug` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-headless` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-headless-fastdebug` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-headless-slowdebug` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-javadoc` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`java-17-openjdk-javadoc-zip` AlmaLinux:9 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.2.el9.alma.1	1:17.0.21.0.9-2.2.el9.alma.1
`openjdk-nik-23-17` Alpaquita:23	23.0.4-r1 up to 23.0.14-r0	23.0.14-r0
`openjdk-nik-23-21` Alpaquita:23	23.1.3-r1 up to 23.1.13-r0	23.1.13-r0
`openjdk-nik-25-25` Alpaquita:23	25.0.0-r0 up to 25.0.5.0.3-r0	25.0.5.0.3-r0
`openjdk11` Alpaquita:23	11.0.19_p7-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-container-jre` Alpaquita:23	11.0.19_p7-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-lite` Alpaquita:23	11.0.19_p7-r1 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-perf` Alpaquita:23	11.0.20.1_p1-r0 up to 11.0.33.0.3_p8-r0	11.0.33.0.3_p8-r0
`openjdk17` Alpaquita:23	17.0.7_p7-r1 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-container-jre` Alpaquita:23	17.0.7_p7-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-crac` Alpaquita:23	17.0.13_p13-r0 up to 17.0.21.0.3_p6-r0	17.0.21.0.3_p6-r0
`openjdk17-lite` Alpaquita:23	17.0.7_p7-r1 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk21` Alpaquita:23	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-container-jre` Alpaquita:23	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-crac` Alpaquita:23	21.0.5_p12-r0 up to 21.0.13.0.3_p6-r0	21.0.13.0.3_p6-r0
`openjdk21-lite` Alpaquita:23	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk25` Alpaquita:23	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-container-jre` Alpaquita:23	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-lite` Alpaquita:23	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk27` Alpaquita:23	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-container-jre` Alpaquita:23	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-lite` Alpaquita:23	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk8` Alpaquita:23	8u372_p7-r0 up to 8.513_p9-r0	8.513_p9-r0
`openjdk8-perf` Alpaquita:23	8u392_p9-r1 up to 8.513_p10-r0	8.513_p10-r0
`openjdk-nik-23-17` Alpaquita:25	23.0.8-r0 up to 23.0.14-r0	23.0.14-r0
`openjdk-nik-23-21` Alpaquita:25	23.1.7-r0 up to 23.1.13-r0	23.1.13-r0
`openjdk-nik-25-25` Alpaquita:25	25.0.0-r0 up to 25.0.5.0.3-r0	25.0.5.0.3-r0
`openjdk11` Alpaquita:25	11.0.27_p9-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-container-jre` Alpaquita:25	11.0.27_p9-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-lite` Alpaquita:25	11.0.27_p9-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-perf` Alpaquita:25	11.0.29_p11-r0 up to 11.0.33.0.3_p8-r0	11.0.33.0.3_p8-r0
`openjdk17` Alpaquita:25	17.0.15_p10-r1 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-container-jre` Alpaquita:25	17.0.15_p10-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-crac` Alpaquita:25	17.0.15_p13-r1 up to 17.0.21.0.3_p6-r0	17.0.21.0.3_p6-r0
`openjdk17-lite` Alpaquita:25	17.0.15_p10-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk21` Alpaquita:25	21.0.7_p9-r1 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-container-jre` Alpaquita:25	21.0.7_p9-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-crac` Alpaquita:25	21.0.7_p12-r1 up to 21.0.13.0.3_p6-r0	21.0.13.0.3_p6-r0
`openjdk21-lite` Alpaquita:25	21.0.7_p9-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk25` Alpaquita:25	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-container-jre` Alpaquita:25	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-lite` Alpaquita:25	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk27` Alpaquita:25	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-container-jre` Alpaquita:25	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-lite` Alpaquita:25	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk8` Alpaquita:25	8.452_p11-r0 up to 8.513_p9-r0	8.513_p9-r0
`openjdk8-perf` Alpaquita:25	8.472_p10-r0 up to 8.513_p10-r0	8.513_p10-r0
`openjdk-nik-23-17` Alpaquita:stream	23.0.4-r1 up to 23.0.14-r0	23.0.14-r0
`openjdk-nik-23-21` Alpaquita:stream	23.1.3-r1 up to 23.1.13-r0	23.1.13-r0
`openjdk-nik-25-25` Alpaquita:stream	25.0.0-r0 up to 25.0.5.0.3-r0	25.0.5.0.3-r0
`openjdk11` Alpaquita:stream	11.0.19_p7-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-container-jre` Alpaquita:stream	11.0.19_p7-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-lite` Alpaquita:stream	11.0.19_p7-r1 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk17` Alpaquita:stream	17.0.7_p7-r1 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-container-jre` Alpaquita:stream	17.0.7_p7-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-crac` Alpaquita:stream	17.0.10_p13-r0 up to 17.0.21.0.3_p6-r0	17.0.21.0.3_p6-r0
`openjdk17-lite` Alpaquita:stream	17.0.7_p7-r1 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk21` Alpaquita:stream	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-container-jre` Alpaquita:stream	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-crac` Alpaquita:stream	21.0.2_p15-r0 up to 21.0.13.0.3_p6-r0	21.0.13.0.3_p6-r0
`openjdk21-lite` Alpaquita:stream	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk25` Alpaquita:stream	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-container-jre` Alpaquita:stream	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-lite` Alpaquita:stream	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk27` Alpaquita:stream	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-container-jre` Alpaquita:stream	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-lite` Alpaquita:stream	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk8` Alpaquita:stream	8u372_p7-r1 up to 8.513_p9-r0	8.513_p9-r0
`openjdk-nik-23-17` BellSoft Hardened Containers:23	23.0.4-r1 up to 23.0.14-r0	23.0.14-r0
`openjdk-nik-23-21` BellSoft Hardened Containers:23	23.1.3-r1 up to 23.1.13-r0	23.1.13-r0
`openjdk-nik-25-25` BellSoft Hardened Containers:23	25.0.0-r0 up to 25.0.5.0.3-r0	25.0.5.0.3-r0
`openjdk11-container-jre` BellSoft Hardened Containers:23	11.0.19_p7-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-lite` BellSoft Hardened Containers:23	11.0.19_p7-r1 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-perf` BellSoft Hardened Containers:23	11.0.20.1_p1-r0 up to 11.0.33.0.3_p8-r0	11.0.33.0.3_p8-r0
`openjdk17-container-jre` BellSoft Hardened Containers:23	17.0.7_p7-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-crac` BellSoft Hardened Containers:23	17.0.13_p13-r0 up to 17.0.21.0.3_p6-r0	17.0.21.0.3_p6-r0
`openjdk17-lite` BellSoft Hardened Containers:23	17.0.7_p7-r1 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk21-container-jre` BellSoft Hardened Containers:23	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-crac` BellSoft Hardened Containers:23	21.0.5_p12-r0 up to 21.0.13.0.3_p6-r0	21.0.13.0.3_p6-r0
`openjdk21-lite` BellSoft Hardened Containers:23	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk25-container-jre` BellSoft Hardened Containers:23	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-lite` BellSoft Hardened Containers:23	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk27-container-jre` BellSoft Hardened Containers:23	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-lite` BellSoft Hardened Containers:23	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk8` BellSoft Hardened Containers:23	8u372_p7-r0 up to 8.513_p9-r0	8.513_p9-r0
`openjdk8-perf` BellSoft Hardened Containers:23	8u392_p9-r1 up to 8.513_p10-r0	8.513_p10-r0
`openjdk-nik-23-17` BellSoft Hardened Containers:25	23.0.8-r0 up to 23.0.14-r0	23.0.14-r0
`openjdk-nik-23-21` BellSoft Hardened Containers:25	23.1.7-r0 up to 23.1.13-r0	23.1.13-r0
`openjdk-nik-25-25` BellSoft Hardened Containers:25	25.0.0-r0 up to 25.0.5.0.3-r0	25.0.5.0.3-r0
`openjdk11-container-jre` BellSoft Hardened Containers:25	11.0.27_p9-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-lite` BellSoft Hardened Containers:25	11.0.27_p9-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-perf` BellSoft Hardened Containers:25	11.0.29_p11-r0 up to 11.0.33.0.3_p8-r0	11.0.33.0.3_p8-r0
`openjdk17-container-jre` BellSoft Hardened Containers:25	17.0.15_p10-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-crac` BellSoft Hardened Containers:25	17.0.15_p13-r1 up to 17.0.21.0.3_p6-r0	17.0.21.0.3_p6-r0
`openjdk17-lite` BellSoft Hardened Containers:25	17.0.15_p10-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk21-container-jre` BellSoft Hardened Containers:25	21.0.7_p9-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-crac` BellSoft Hardened Containers:25	21.0.7_p12-r1 up to 21.0.13.0.3_p6-r0	21.0.13.0.3_p6-r0
`openjdk21-lite` BellSoft Hardened Containers:25	21.0.7_p9-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk25-container-jre` BellSoft Hardened Containers:25	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-lite` BellSoft Hardened Containers:25	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk27-container-jre` BellSoft Hardened Containers:25	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-lite` BellSoft Hardened Containers:25	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk8` BellSoft Hardened Containers:25	8.452_p11-r0 up to 8.513_p9-r0	8.513_p9-r0
`openjdk8-perf` BellSoft Hardened Containers:25	8.472_p10-r0 up to 8.513_p10-r0	8.513_p10-r0
`openjdk-nik-23-17` BellSoft Hardened Containers:stream	23.0.4-r1 up to 23.0.14-r0	23.0.14-r0
`openjdk-nik-23-21` BellSoft Hardened Containers:stream	23.1.3-r1 up to 23.1.13-r0	23.1.13-r0
`openjdk-nik-25-25` BellSoft Hardened Containers:stream	25.0.0-r0 up to 25.0.5.0.3-r0	25.0.5.0.3-r0
`openjdk11-container-jre` BellSoft Hardened Containers:stream	11.0.19_p7-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-lite` BellSoft Hardened Containers:stream	11.0.19_p7-r1 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk17-container-jre` BellSoft Hardened Containers:stream	17.0.7_p7-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-crac` BellSoft Hardened Containers:stream	17.0.10_p13-r0 up to 17.0.21.0.3_p6-r0	17.0.21.0.3_p6-r0
`openjdk17-lite` BellSoft Hardened Containers:stream	17.0.7_p7-r1 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk21-container-jre` BellSoft Hardened Containers:stream	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-crac` BellSoft Hardened Containers:stream	21.0.2_p15-r0 up to 21.0.13.0.3_p6-r0	21.0.13.0.3_p6-r0
`openjdk21-lite` BellSoft Hardened Containers:stream	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk25-container-jre` BellSoft Hardened Containers:stream	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-lite` BellSoft Hardened Containers:stream	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk27-container-jre` BellSoft Hardened Containers:stream	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-lite` BellSoft Hardened Containers:stream	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk8` BellSoft Hardened Containers:stream	8u372_p7-r1 up to 8.513_p9-r0	8.513_p9-r0
`openjdk-17` Debian:12	All versions, plus listed versions 17.0.10+7-117.0.10+7-1~deb11u117.0.10+7-1~deb12u117.0.10+7-217.0.10+7-3 Show 45 moreShow less 17.0.10~6ea-117.0.11+9-117.0.11+9-1~deb11u117.0.11+9-1~deb12u117.0.11~6ea-117.0.11~7ea-117.0.12+7-117.0.12+7-217.0.12+7-2~deb11u117.0.12+7-2~deb12u117.0.12~6ea-117.0.13+11-117.0.13+11-1~deb11u117.0.13+11-1~deb12u117.0.13+11-217.0.13+11-2~deb12u117.0.13~6ea-117.0.14+7-117.0.14+7-1~deb11u117.0.14+7-1~deb12u117.0.14~6ea-117.0.15+6-117.0.15+6-1~deb11u117.0.15+6-1~deb12u117.0.15~4ea-117.0.15~5ea-117.0.16+8-117.0.16+8-1~deb11u117.0.16+8-1~deb12u117.0.16~5ea-117.0.17+10-117.0.17+10-1~deb11u117.0.17+10-1~deb12u117.0.17~5ea-117.0.17~8ea-117.0.18+8-117.0.18+8-1~deb11u117.0.18+8-1~deb12u117.0.18~7ea-117.0.19+10-117.0.19+10-1~deb11u117.0.19+10-1~deb12u117.0.19+10-1~deb12u217.0.19~6ea-117.0.19~9ea-1	None known
`openjdk-21` Debian:13	before 21.0.13+9-1~deb13u2, plus listed versions 21.0.10+7-121.0.10+7-1~deb13u121.0.10~4ea-121.0.10~6ea-121.0.11+10-1 Show 22 moreShow less 21.0.11+10-1~deb13u121.0.11+10-1~deb13u221.0.11~5ea-121.0.11~6ea-121.0.11~8ea-121.0.11~9ea-121.0.11~9ea-221.0.12+8-121.0.12+8-1~deb13u121.0.12+8-221.0.12.1+1-121.0.12.1+1-1~deb13u121.0.12~5ea-121.0.12~7ea-121.0.13+9-1~deb13u121.0.13~6ea-121.0.13~8ea-121.0.8+9-121.0.9+10-121.0.9+10-1~deb13u121.0.9~5ea-121.0.9~8ea-1	21.0.13+9-1~deb13u2
`openjdk-21` Debian:14	before 21.0.13+9-1, plus listed versions 21.0.10+7-121.0.10+7-1~deb13u121.0.10~4ea-121.0.10~6ea-121.0.11+10-1 Show 23 moreShow less 21.0.11+10-1~deb13u121.0.11+10-1~deb13u221.0.11~5ea-121.0.11~6ea-121.0.11~8ea-121.0.11~9ea-121.0.11~9ea-221.0.12+8-121.0.12+8-1~deb13u121.0.12+8-221.0.12.1+1-121.0.12.1+1-1~deb13u121.0.12~5ea-121.0.12~7ea-121.0.13+9-1~deb13u121.0.13+9-1~deb13u221.0.13~6ea-121.0.13~8ea-121.0.8+9-121.0.9+10-121.0.9+10-1~deb13u121.0.9~5ea-121.0.9~8ea-1	21.0.13+9-1
`openjdk-25` Debian:13	before 25.0.5+8-1~deb13u1, plus listed versions 25+36-125.0.1+8-125.0.1+8-1~deb13u125.0.1+8-225.0.1+8-3 Show 24 moreShow less 25.0.2+10-125.0.2+10-1~deb13u225.0.3+9-125.0.3+9-225.0.3+9-2~deb13u125.0.3~5ea-125.0.3~5ea-225.0.3~7ea-125.0.3~7ea-225.0.3~8ea-125.0.3~8ea-225.0.4+7-125.0.4+7-1~deb13u125.0.4+7-225.0.4.1+1-125.0.4.1+1-1~deb13u125.0.4~4ea-125.0.4~6ea-125.0.5~6ea-125.0.5~7ea-125.0.5~7ea-225~32ea-125~34ea-125~36ea-1	25.0.5+8-1~deb13u1
`openjdk-25` Debian:14	before 25.0.5+8-1, plus listed versions 25+36-125.0.1+8-125.0.1+8-1~deb13u125.0.1+8-225.0.1+8-3 Show 25 moreShow less 25.0.2+10-125.0.2+10-1~deb13u225.0.3+9-125.0.3+9-225.0.3+9-2~deb13u125.0.3~5ea-125.0.3~5ea-225.0.3~7ea-125.0.3~7ea-225.0.3~8ea-125.0.3~8ea-225.0.4+7-125.0.4+7-1~deb13u125.0.4+7-225.0.4.1+1-125.0.4.1+1-1~deb13u125.0.4~4ea-125.0.4~6ea-125.0.5+8-1~deb13u125.0.5~6ea-125.0.5~7ea-125.0.5~7ea-225~32ea-125~34ea-125~36ea-1	25.0.5+8-1
`java-21-openjdk` Mageia:10 From an advisory covering 38 CVEs	before 21.0.13.0.9-1.mga10	21.0.13.0.9-1.mga10
`java-17-openjdk` Mageia:10 From an advisory covering 38 CVEs	before 17.0.21.0.9-1.mga10	17.0.21.0.9-1.mga10
`java-latest-openjdk` Mageia:10 From an advisory covering 38 CVEs	before 25.0.5.0.8-1.rolling.1.mga10	25.0.5.0.8-1.rolling.1.mga10
`timezone` Mageia:10 From an advisory covering 38 CVEs	before 2026e-1.mga10	2026e-1.mga10
`java-25-openjdk` Rocky Linux:9 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el9_8	1:25.0.5.0.8-1.0.el9_8
`java-17-openjdk` Rocky Linux:8 From an advisory covering 36 CVEs	before 1:17.0.21.0.9-2.1.el8_10	1:17.0.21.0.9-2.1.el8_10
`openjdk-8` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 8u66-b01-58u72-b05-1ubuntu18u72-b05-58u72-b05-68u72-b15-1 Show 45 moreShow less 8u72-b15-2ubuntu18u72-b15-2ubuntu38u72-b15-3ubuntu18u77-b03-1ubuntu28u77-b03-3ubuntu18u77-b03-3ubuntu28u77-b03-3ubuntu38u91-b14-0ubuntu4~16.04.18u91-b14-3ubuntu1~16.04.18u111-b14-2ubuntu0.16.04.28u121-b13-0ubuntu1.16.04.28u131-b11-0ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.38u151-b12-0ubuntu0.16.04.28u162-b12-0ubuntu0.16.04.28u171-b11-0ubuntu0.16.04.18u181-b13-0ubuntu0.16.04.18u181-b13-1ubuntu0.16.04.18u191-b12-0ubuntu0.16.04.18u191-b12-2ubuntu0.16.04.18u212-b03-0ubuntu1.16.04.18u222-b10-1ubuntu1~16.04.18u232-b09-0ubuntu1~16.04.18u242-b08-0ubuntu3~16.048u252-b09-1~16.048u265-b01-0ubuntu2~16.048u272-b10-0ubuntu1~16.048u275-b01-0ubuntu1~16.048u282-b08-0ubuntu1~16.048u292-b10-0ubuntu1~16.04.18u312-b07-0ubuntu1~16.048u342-b07-0ubuntu1~16.048u352-ga-1~16.048u362-ga-0ubuntu1~16.04.18u372-ga~us1-0ubuntu1~16.048u382-ga-1~16.04.18u392-ga-1~16.048u432-ga~us1-0ubuntu2~16.04.48u442-b06~us1-0ubuntu1~16.048u452-ga~us1-0ubuntu1~16.04.18u462-ga~us1-0ubuntu2~16.04.28u472-ga-1~16.048u482-ga~us1-0ubuntu1~16.048u492-ga~us2-0ubuntu1~16.04.1	None known
`openjdk-9` Ubuntu:16.04:LTS	All versions, plus listed versions 9~b88-19~b101-2ubuntu29~b102-19~b113-0ubuntu19~b114-0ubuntu1	None known
`openjdk-lts` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 9.0.4+12-2ubuntu49.0.4+12-4ubuntu110~46-4ubuntu110~46-5ubuntu110.0.1+10-1ubuntu2 Show 39 moreShow less 10.0.1+10-3ubuntu110.0.2+13-1ubuntu0.18.04.110.0.2+13-1ubuntu0.18.04.210.0.2+13-1ubuntu0.18.04.310.0.2+13-1ubuntu0.18.04.411.0.2+9-3ubuntu1~18.04.311.0.3+7-1ubuntu2~18.04.111.0.4+11-1ubuntu2~18.04.311.0.5+10-0ubuntu1.1~18.0411.0.6+10-1ubuntu1~18.04.111.0.7+10-2ubuntu2~18.0411.0.8+10-0ubuntu1~18.04.111.0.9+11-0ubuntu1~18.04.111.0.9.1+1-0ubuntu1~18.0411.0.10+9-0ubuntu1~18.0411.0.11+9-0ubuntu2~18.0411.0.13+8-0ubuntu1~18.0411.0.14+9-0ubuntu2~18.0411.0.14.1+1-0ubuntu1~18.0411.0.15+10-0ubuntu0.18.04.111.0.16+8-0ubuntu1~18.0411.0.17+8-1ubuntu2~18.0411.0.18+10-0ubuntu1~18.04.111.0.19+7~us1-0ubuntu1~18.04.111.0.20+8-1ubuntu1~18.0411.0.20.1+1-0ubuntu1~18.0411.0.21+9-0ubuntu1~18.0411.0.22+7-0ubuntu2~18.04.111.0.23+9-1ubuntu1~18.04.111.0.25+9-1ubuntu1~18.0411.0.26+4-1ubuntu1~18.0411.0.27+6~us1-0ubuntu1~18.0411.0.28+6-1ubuntu1~18.04.111.0.29+7-1ubuntu1~18.0411.0.30+7-1ubuntu1~18.0411.0.31+11-1ubuntu1~18.04.211.0.32+9-1ubuntu1~18.0411.0.32.1+1-1ubuntu1~18.0411.0.33+9-1ubuntu1~18.04.1	None known
`openjdk-17` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 17+35-1~18.0417.0.1+12-1~18.0417.0.2+8-1~18.0417.0.3+7-0ubuntu0.18.04.117.0.4+8-1~18.04 Show 18 moreShow less 17.0.5+8-2ubuntu1~18.0417.0.6+10-0ubuntu1~18.04.117.0.7+7~us1-0ubuntu1~18.0417.0.8+7-1~18.0417.0.8.1+1~us1-0ubuntu1~18.0417.0.9+9-1~18.0417.0.10+7-1~18.04.117.0.11+9-1~18.04.117.0.13+11-2ubuntu1~18.04.217.0.14+7-1~18.0417.0.15+6~us1-0ubuntu1~18.0417.0.16+8~us1-0ubuntu1~18.04.117.0.17+10-1~18.0417.0.18+8-1~18.0417.0.19+10-1~18.04.217.0.20+8-1~18.0417.0.20.1+1-1~18.0417.0.21.0.3+1-1~18.04.1	None known
`openjdk-8` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 8u144-b01-28u151-b12-18u162-b12-18u171-b11-0ubuntu0.18.04.18u181-b13-0ubuntu0.18.04.1 Show 33 moreShow less 8u181-b13-1ubuntu0.18.04.18u191-b12-0ubuntu0.18.04.18u191-b12-2ubuntu0.18.04.18u212-b03-0ubuntu1.18.04.18u222-b10-1ubuntu1~18.04.18u232-b09-0ubuntu1~18.04.18u242-b08-0ubuntu3~18.048u252-b09-1~18.048u265-b01-0ubuntu2~18.048u272-b10-0ubuntu1~18.048u275-b01-0ubuntu1~18.048u282-b08-0ubuntu1~18.048u292-b10-0ubuntu1~18.048u312-b07-0ubuntu1~18.048u342-b07-0ubuntu1~18.048u352-ga-1~18.048u362-ga-0ubuntu1~18.04.18u372-ga~us1-0ubuntu1~18.048u382-ga-1~18.04.18u392-ga-1~18.048u402-ga-2ubuntu1~18.048u412-ga-1~18.04.18u422-b05-1~18.048u432-ga~us1-0ubuntu2~18.048u442-b06~us1-0ubuntu1~18.048u452-ga~us1-0ubuntu1~18.048u462-ga~us1-0ubuntu2~18.04.28u472-ga-1~18.048u482-ga~us1-0ubuntu1~18.048u492-ga~us2-0ubuntu1~18.04.18u502-ga~us1-0ubuntu1~18.048u504-ga-1ubuntu1~18.04.38u512-b09~us1-0ubuntu1~18.04.1	None known
`openjdk-lts` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 11.0.5+10-0ubuntu111.0.5+10-2ubuntu111.0.6+10-1ubuntu111.0.6+10-2ubuntu211.0.7+9-1ubuntu1 Show 31 moreShow less 11.0.7+10-2ubuntu111.0.7+10-3ubuntu111.0.8+10-0ubuntu1~20.0411.0.9+11-0ubuntu1~20.0411.0.9.1+1-0ubuntu1~20.0411.0.10+9-0ubuntu1~20.0411.0.11+9-0ubuntu2~20.0411.0.13+8-0ubuntu1~20.0411.0.14+9-0ubuntu2~20.0411.0.14.1+1-0ubuntu1~20.0411.0.15+10-0ubuntu0.20.04.111.0.16+8-0ubuntu1~20.0411.0.17+8-1ubuntu2~20.0411.0.18+10-0ubuntu1~20.04.111.0.19+7~us1-0ubuntu1~20.04.111.0.20+8-1ubuntu1~20.0411.0.20.1+1-0ubuntu1~20.0411.0.21+9-0ubuntu1~20.0411.0.22+7-0ubuntu2~20.04.111.0.23+9-1ubuntu1~20.04.211.0.24+8-1ubuntu3~20.0411.0.25+9-1ubuntu1~20.0411.0.26+4-1ubuntu1~20.0411.0.27+6~us1-0ubuntu1~20.0411.0.28+6-1ubuntu1~20.04.111.0.29+7-1ubuntu1~20.0411.0.30+7-1ubuntu1~20.0411.0.31+11-1ubuntu1~20.04.211.0.32+9-1ubuntu1~20.0411.0.32.1+1-1ubuntu1~20.0411.0.33+9-1ubuntu1~20.04.1	None known
`openjdk-13` Ubuntu:20.04:LTS	All versions, plus listed versions 13+33-113.0.1+9-213.0.2+8-113.0.2+8-213.0.3+3-1ubuntu213.0.4+8-1~20.0413.0.7+5-0ubuntu1~20.04	None known
`openjdk-16` Ubuntu:20.04:LTS	All versions, plus listed versions 16.0.1+9-1~20.04	None known
`openjdk-17` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 17+35-1~20.0417.0.1+12-1~20.0417.0.2+8-1~20.0417.0.3+7-0ubuntu0.20.04.117.0.4+8-1~20.04 Show 19 moreShow less 17.0.5+8-2ubuntu1~20.0417.0.6+10-0ubuntu1~20.04.117.0.7+7~us1-0ubuntu1~20.0417.0.8+7-1~20.04.217.0.8.1+1~us1-0ubuntu1~20.0417.0.9+9-1~20.0417.0.10+7-1~20.04.117.0.11+9-1~20.04.217.0.12+7-1ubuntu2~20.0417.0.13+11-2ubuntu1~20.0417.0.14+7-1~20.0417.0.15+6~us1-0ubuntu1~20.0417.0.16+8~us1-0ubuntu1~20.04.617.0.17+10-1~20.0417.0.18+8-1~20.0417.0.19+10-1~20.04.217.0.20+8-1~20.0417.0.20.1+1-1~20.0417.0.21.0.3+1-1~20.04.1	None known
`openjdk-21` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 21.0.1+12-2~20.04.121.0.2+13-1~20.04.121.0.3+9-1ubuntu1~20.04.121.0.4+7-1ubuntu2~20.0421.0.5+11-1ubuntu1~20.04 Show 9 moreShow less 21.0.6+7-1~20.04.121.0.7+6~us1-0ubuntu1~20.0421.0.8+9~us1-0ubuntu1~20.04.121.0.9+10-1~20.0421.0.10+7-1~20.0421.0.11+10-1~20.04.221.0.12+8-1~20.0421.0.12.1+1-1~20.04.421.0.13.0.3+1-1~20.04.1	None known
`openjdk-8` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 8u232-b09-0ubuntu18u232-b09-18u242-b04-18u242-b08-0ubuntu38u252-b07-1 Show 26 moreShow less 8u252-b09-1ubuntu18u265-b01-0ubuntu2~20.048u272-b10-0ubuntu1~20.048u275-b01-0ubuntu1~20.048u282-b08-0ubuntu1~20.048u292-b10-0ubuntu1~20.048u312-b07-0ubuntu1~20.048u342-b07-0ubuntu1~20.048u352-ga-1~20.048u362-ga-0ubuntu1~20.04.18u372-ga~us1-0ubuntu1~20.048u382-ga-1~20.04.18u392-ga-1~20.048u402-ga-2ubuntu1~20.048u412-ga-1~20.04.18u422-b05-1~20.048u432-ga~us1-0ubuntu2~20.048u442-b06~us1-0ubuntu1~20.048u452-ga~us1-0ubuntu1~20.048u462-ga~us1-0ubuntu2~20.04.28u472-ga-1~20.048u482-ga~us1-0ubuntu1~20.048u492-ga~us2-0ubuntu1~20.04.18u502-ga~us1-0ubuntu1~20.048u504-ga-1ubuntu1~20.04.38u512-b09~us1-0ubuntu1~20.04.1	None known
`openjdk-17` Ubuntu:22.04:LTS	before 17.0.21.0.3+1-1~22.04.1, plus listed versions 17+35-117.0.1+12-117.0.2+8-117.0.3+7-0ubuntu0.22.04.117.0.4+8-1~22.04 Show 18 moreShow less 17.0.5+8-2ubuntu1~22.0417.0.6+10-0ubuntu1~22.0417.0.7+7~us1-0ubuntu1~22.04.217.0.8+7-1~22.0417.0.8.1+1~us1-0ubuntu1~22.0417.0.9+9-1~22.0417.0.10+7-1~22.04.117.0.11+9-1~22.04.117.0.12+7-1ubuntu2~22.0417.0.13+11-2ubuntu1~22.0417.0.14+7-1~22.04.117.0.15+6~us1-0ubuntu1~22.0417.0.16+8~us1-0ubuntu1~22.04.117.0.17+10-1~22.0417.0.18+8-1~22.04.117.0.19+10-1~22.04.217.0.20+8-1~22.0417.0.20.1+1-1~22.04	17.0.21.0.3+1-1~22.04.1
`openjdk-18` Ubuntu:22.04:LTS	All versions, plus listed versions 18~15ea-418~20ea-118~32ea-118~36ea-118.0.2+9-2~22.04	None known
`openjdk-21` Ubuntu:22.04:LTS	before 21.0.13.0.3+1-1~22.04.1, plus listed versions 21.0.1+12-2~22.0421.0.2+13-1~22.04.121.0.3+9-1ubuntu1~22.04.121.0.4+7-1ubuntu2~22.0421.0.5+11-1ubuntu1~22.04 Show 8 moreShow less 21.0.6+7-1~22.04.121.0.7+6~us1-0ubuntu1~22.0421.0.8+9~us1-0ubuntu1~22.04.121.0.9+10-1~22.0421.0.10+7-1~22.0421.0.11+10-1~22.04.221.0.12+8-1~22.0421.0.12.1+1-1~22.04.4	21.0.13.0.3+1-1~22.04.1
`openjdk-25` Ubuntu:22.04:LTS	All versions, plus listed versions 25+36-1~22.04.225.0.1+8-1~22.0425.0.2+10-1~22.0425.0.3+9-2~22.04.225.0.4+7-1~22.0425.0.4.1+1-1~22.04.425.0.5.0.3+1-1~22.04.1	None known
`openjdk-8` Ubuntu:22.04:LTS	All versions, plus listed versions 8u302-b08-0ubuntu28u312-b07-0ubuntu18u342-b07-0ubuntu1~22.048u352-ga-1~22.048u362-ga-0ubuntu1~22.04 Show 16 moreShow less 8u372-ga~us1-0ubuntu1~22.048u382-ga-1~22.04.18u392-ga-1~22.048u402-ga-2ubuntu1~22.048u412-ga-1~22.04.18u422-b05-1~22.048u432-ga~us1-0ubuntu2~22.048u442-b06~us1-0ubuntu1~22.048u452-ga~us1-0ubuntu1~22.048u462-ga~us1-0ubuntu2~22.04.28u472-ga-1~22.048u482-ga~us1-0ubuntu1~22.048u492-ga~us2-0ubuntu1~22.04.18u502-ga~us1-0ubuntu1~22.048u504-ga-1ubuntu1~22.04.38u512-b09~us1-0ubuntu1~22.04.1	None known
`openjdk-lts` Ubuntu:22.04:LTS	All versions, plus listed versions 11.0.12+7-0ubuntu311.0.13+8-0ubuntu111.0.14+9-0ubuntu211.0.14.1+1-0ubuntu111.0.15+10-0ubuntu0.22.04.1 Show 20 moreShow less 11.0.16+8-0ubuntu1~22.0411.0.17+8-1ubuntu2~22.0411.0.18+10-0ubuntu1~22.0411.0.19+7~us1-0ubuntu1~22.04.111.0.20+8-1ubuntu1~22.0411.0.20.1+1-0ubuntu1~22.0411.0.21+9-0ubuntu1~22.0411.0.22+7-0ubuntu2~22.04.111.0.23+9-1ubuntu1~22.04.111.0.24+8-1ubuntu3~22.0411.0.25+9-1ubuntu1~22.0411.0.26+4-1ubuntu1~22.0411.0.27+6~us1-0ubuntu1~22.0411.0.28+6-1ubuntu1~22.04.111.0.29+7-1ubuntu1~22.0411.0.30+7-1ubuntu1~22.0411.0.31+11-1ubuntu1~22.04.211.0.32+9-1ubuntu1~22.0411.0.32.1+1-1ubuntu1~22.0411.0.33+9-1ubuntu1~22.04.1	None known
`openjdk-17` Ubuntu:24.04:LTS	before 17.0.21.0.3+1-1~24.04.1, plus listed versions 17.0.9~6ea-117.0.9+9-117.0.9+9-217.0.10~6ea-117.0.10+7-1 Show 13 moreShow less 17.0.11~7ea-117.0.11~7ea-1build117.0.11+9-117.0.12+7-1ubuntu2~24.0417.0.13+11-2ubuntu1~24.0417.0.14+7-1~24.0417.0.15+6~us1-0ubuntu1~24.0417.0.16+8~us1-0ubuntu1~24.04.117.0.17+10-1~24.0417.0.18+8-1~24.04.117.0.19+10-1~24.04.217.0.20+8-1~24.0417.0.20.1+1-1~24.04	17.0.21.0.3+1-1~24.04.1
`openjdk-21` Ubuntu:24.04:LTS	before 21.0.13.0.3+1-1~24.04.1, plus listed versions 21+35-121.0.1+12-221.0.1+12-321.0.2+13-121.0.2+13-2 Show 15 moreShow less 21.0.3~7ea-121.0.3~7ea-1build121.0.3~7ea-1build221.0.3+9-121.0.3+9-1ubuntu121.0.4+7-1ubuntu2~24.0421.0.5+11-1ubuntu1~24.0421.0.6+7-1~24.04.121.0.7+6~us1-0ubuntu1~24.0421.0.8+9~us1-0ubuntu1~24.04.121.0.9+10-1~24.0421.0.10+7-1~24.0421.0.11+10-1~24.04.221.0.12+8-1~24.0421.0.12.1+1-1~24.04.4	21.0.13.0.3+1-1~24.04.1
`openjdk-25` Ubuntu:24.04:LTS	All versions, plus listed versions 25+36-1~24.04.225.0.1+8-1~24.0425.0.2+10-1~24.0425.0.3+9-2~24.04.225.0.4+7-1~24.0425.0.4.1+1-1~24.04.425.0.5.0.3+1-1~24.04.1	None known
`openjdk-8` Ubuntu:24.04:LTS	All versions, plus listed versions 8u382-ga-1ubuntu18u392-ga-18u402-ga-18u402-ga-28u402-ga-2ubuntu1 Show 15 moreShow less 8u402-ga-2ubuntu68u402-ga-2ubuntu78u402-ga-8build18u412-ga-1~24.04.28u422-b05-1~24.048u432-ga~us1-0ubuntu2~24.048u442-b06~us1-0ubuntu1~24.048u452-ga~us1-0ubuntu1~24.048u462-ga~us1-0ubuntu2~24.04.28u472-ga-1~24.048u482-ga~us1-0ubuntu1~24.048u492-ga~us2-0ubuntu1~24.04.18u502-ga~us1-0ubuntu1~24.048u504-ga-1ubuntu1~24.04.38u512-b09~us1-0ubuntu1~24.04.1	None known
`openjdk-lts` Ubuntu:Pro:24.04:LTS	All versions, plus listed versions 11.0.20+8-1ubuntu111.0.21+9-0ubuntu111.0.22+7-0ubuntu211.0.23~7ea-1ubuntu111.0.23~7ea-1ubuntu2 Show 12 moreShow less 11.0.23+9-1ubuntu111.0.24+8-1ubuntu3~24.04.111.0.25+9-1ubuntu1~24.0411.0.26+4-1ubuntu1~24.0411.0.27+6~us1-0ubuntu1~24.0411.0.28+6-1ubuntu1~24.04.111.0.29+7-1ubuntu1~24.0411.0.30+7-1ubuntu1~24.0411.0.31+11-1ubuntu1~24.04.211.0.32+9-1ubuntu1~24.0411.0.32.1+1-1ubuntu1~24.0411.0.33+9-1ubuntu1~24.04.1	None known
`openjdk-17` Ubuntu:26.10	before 17.0.21.0.3+1-1~26.10.1, plus listed versions 17.0.18+8-117.0.19+10-117.0.20~5ea-117.0.20+8-117.0.20.1+1-117.0.21~6ea-1	17.0.21.0.3+1-1~26.10.1
`openjdk-17-crac` Ubuntu:26.10	All versions, plus listed versions 17.0.18+8-0ubuntu117.0.19+10-0ubuntu117.0.20+8-0ubuntu1	None known
`openjdk-21` Ubuntu:26.10	before 21.0.13.0.3+1-1~26.10.1, plus listed versions 21.0.11~8ea-121.0.11+10-121.0.12~5ea-121.0.12+8-121.0.12.1+1-1	21.0.13.0.3+1-1~26.10.1
`openjdk-21-crac` Ubuntu:26.10	All versions, plus listed versions 21.0.10+7-0ubuntu121.0.11+10-0ubuntu121.0.12+8-0ubuntu1	None known
`openjdk-25` Ubuntu:26.10	All versions, plus listed versions 25.0.3~7ea-225.0.3+9-225.0.4~4ea-125.0.4+7-125.0.4.1+1-125.0.5.0.3+1-1~26.10.1	None known
`openjdk-8` Ubuntu:26.10	All versions, plus listed versions 8u482-ga~us1-0ubuntu18u492-ga~us2-0ubuntu28u502-ga~us1-0ubuntu18u504-ga-1ubuntu18u512-b09~us1-0ubuntu1~26.10.1	None known
`openjdk-lts` Ubuntu:26.10	All versions, plus listed versions 11.0.30+7-1ubuntu111.0.31+11-1ubuntu211.0.32+9-1ubuntu111.0.32.1+1-1ubuntu111.0.32.1+1-1ubuntu211.0.33+9-1ubuntu1~26.10.1	None known
`openjdk-17` Ubuntu:26.04:LTS	before 17.0.21.0.3+1-1~26.04.1, plus listed versions 17.0.17~8ea-117.0.17+10-117.0.18~7ea-117.0.18+8-117.0.19+10-1~26.04.217.0.20+8-1~26.0417.0.20.1+1-1~26.04	17.0.21.0.3+1-1~26.04.1
`openjdk-17-crac` Ubuntu:26.04:LTS	All versions, plus listed versions 17.0.16+8-0ubuntu117.0.17+10-0ubuntu117.0.18+8-0ubuntu117.0.19+10-0ubuntu1~26.04.117.0.20+8-0ubuntu1~26.04	None known
`openjdk-21` Ubuntu:26.04:LTS	before 21.0.13.0.3+1-1~26.04.1, plus listed versions 21.0.9~8ea-121.0.9+10-121.0.10~4ea-121.0.10~6ea-121.0.10+7-1 Show 5 moreShow less 21.0.11~5ea-121.0.11~8ea-121.0.11+10-1~26.04.221.0.12+8-1~26.0421.0.12.1+1-1~26.04.4	21.0.13.0.3+1-1~26.04.1
`openjdk-21-crac` Ubuntu:26.04:LTS	All versions, plus listed versions 21.0.8+9-0ubuntu121.0.9+10-0ubuntu121.0.10+7-0ubuntu121.0.11+10-0ubuntu1~26.04.121.0.12+8-0ubuntu1~26.04	None known
`openjdk-25` Ubuntu:26.04:LTS	All versions, plus listed versions 25+36-125.0.1+8-125.0.1+8-225.0.1+8-325.0.2+10-1 Show 6 moreShow less 25.0.3~5ea-225.0.3~7ea-225.0.3+9-2~26.04.225.0.4+7-1~26.0425.0.4.1+1-1~26.04.425.0.5.0.3+1-1~26.04.1	None known
`openjdk-8` Ubuntu:26.04:LTS	All versions, plus listed versions 8u462-ga-18u472-ga~us1-0ubuntu18u472-ga-18u482-ga~us1-0ubuntu18u492-ga~us2-0ubuntu1~26.04.18u502-ga~us1-0ubuntu1~26.048u504-ga-1ubuntu1~26.04.38u512-b09~us1-0ubuntu1~26.04.1	None known
`openjdk-lts` Ubuntu:26.04:LTS	All versions, plus listed versions 11.0.28+6-1ubuntu111.0.29+7-1ubuntu111.0.30+7-1ubuntu111.0.31+11-1ubuntu1~26.04.211.0.32+9-1ubuntu1~26.0411.0.32.1+1-1ubuntu1~26.0411.0.33+9-1ubuntu1~26.04.1	None known
`openjdk-17` Ubuntu:Pro:18.04:LTS From an advisory covering 37 CVEs	before 17.0.21.0.3+1-1~18.04.1, plus listed versions 17+35-1~18.0417.0.1+12-1~18.0417.0.2+8-1~18.0417.0.3+7-0ubuntu0.18.04.117.0.4+8-1~18.04 Show 17 moreShow less 17.0.5+8-2ubuntu1~18.0417.0.6+10-0ubuntu1~18.04.117.0.7+7~us1-0ubuntu1~18.0417.0.8+7-1~18.0417.0.8.1+1~us1-0ubuntu1~18.0417.0.9+9-1~18.0417.0.10+7-1~18.04.117.0.11+9-1~18.04.117.0.13+11-2ubuntu1~18.04.217.0.14+7-1~18.0417.0.15+6~us1-0ubuntu1~18.0417.0.16+8~us1-0ubuntu1~18.04.117.0.17+10-1~18.0417.0.18+8-1~18.0417.0.19+10-1~18.04.217.0.20+8-1~18.0417.0.20.1+1-1~18.04	17.0.21.0.3+1-1~18.04.1
`openjdk-17` Ubuntu:Pro:20.04:LTS From an advisory covering 37 CVEs	before 17.0.21.0.3+1-1~20.04.1, plus listed versions 17+35-1~20.0417.0.1+12-1~20.0417.0.2+8-1~20.0417.0.3+7-0ubuntu0.20.04.117.0.4+8-1~20.04 Show 18 moreShow less 17.0.5+8-2ubuntu1~20.0417.0.6+10-0ubuntu1~20.04.117.0.7+7~us1-0ubuntu1~20.0417.0.8+7-1~20.04.217.0.8.1+1~us1-0ubuntu1~20.0417.0.9+9-1~20.0417.0.10+7-1~20.04.117.0.11+9-1~20.04.217.0.12+7-1ubuntu2~20.0417.0.13+11-2ubuntu1~20.0417.0.14+7-1~20.0417.0.15+6~us1-0ubuntu1~20.0417.0.16+8~us1-0ubuntu1~20.04.617.0.17+10-1~20.0417.0.18+8-1~20.0417.0.19+10-1~20.04.217.0.20+8-1~20.0417.0.20.1+1-1~20.04	17.0.21.0.3+1-1~20.04.1
`openjdk-17` Ubuntu:22.04:LTS From an advisory covering 37 CVEs	before 17.0.21.0.3+1-1~22.04.1, plus listed versions 17+35-117.0.1+12-117.0.2+8-117.0.3+7-0ubuntu0.22.04.117.0.4+8-1~22.04 Show 18 moreShow less 17.0.5+8-2ubuntu1~22.0417.0.6+10-0ubuntu1~22.0417.0.7+7~us1-0ubuntu1~22.04.217.0.8+7-1~22.0417.0.8.1+1~us1-0ubuntu1~22.0417.0.9+9-1~22.0417.0.10+7-1~22.04.117.0.11+9-1~22.04.117.0.12+7-1ubuntu2~22.0417.0.13+11-2ubuntu1~22.0417.0.14+7-1~22.04.117.0.15+6~us1-0ubuntu1~22.0417.0.16+8~us1-0ubuntu1~22.04.117.0.17+10-1~22.0417.0.18+8-1~22.04.117.0.19+10-1~22.04.217.0.20+8-1~22.0417.0.20.1+1-1~22.04	17.0.21.0.3+1-1~22.04.1
`openjdk-17` Ubuntu:24.04:LTS From an advisory covering 37 CVEs	before 17.0.21.0.3+1-1~24.04.1, plus listed versions 17.0.9~6ea-117.0.9+9-117.0.9+9-217.0.10~6ea-117.0.10+7-1 Show 13 moreShow less 17.0.11~7ea-117.0.11~7ea-1build117.0.11+9-117.0.12+7-1ubuntu2~24.0417.0.13+11-2ubuntu1~24.0417.0.14+7-1~24.0417.0.15+6~us1-0ubuntu1~24.0417.0.16+8~us1-0ubuntu1~24.04.117.0.17+10-1~24.0417.0.18+8-1~24.04.117.0.19+10-1~24.04.217.0.20+8-1~24.0417.0.20.1+1-1~24.04	17.0.21.0.3+1-1~24.04.1
`openjdk-17` Ubuntu:26.10 From an advisory covering 37 CVEs	before 17.0.21.0.3+1-1~26.10.1, plus listed versions 17.0.18+8-117.0.19+10-117.0.20~5ea-117.0.20+8-117.0.20.1+1-117.0.21~6ea-1	17.0.21.0.3+1-1~26.10.1
`openjdk-17` Ubuntu:26.04:LTS From an advisory covering 37 CVEs	before 17.0.21.0.3+1-1~26.04.1, plus listed versions 17.0.17~8ea-117.0.17+10-117.0.18~7ea-117.0.18+8-117.0.19+10-1~26.04.217.0.20+8-1~26.0417.0.20.1+1-1~26.04	17.0.21.0.3+1-1~26.04.1
`openjdk-21` Ubuntu:Pro:20.04:LTS From an advisory covering 39 CVEs	before 21.0.13.0.3+1-1~20.04.1, plus listed versions 21.0.1+12-2~20.04.121.0.2+13-1~20.04.121.0.3+9-1ubuntu1~20.04.121.0.4+7-1ubuntu2~20.0421.0.5+11-1ubuntu1~20.04 Show 8 moreShow less 21.0.6+7-1~20.04.121.0.7+6~us1-0ubuntu1~20.0421.0.8+9~us1-0ubuntu1~20.04.121.0.9+10-1~20.0421.0.10+7-1~20.0421.0.11+10-1~20.04.221.0.12+8-1~20.0421.0.12.1+1-1~20.04.4	21.0.13.0.3+1-1~20.04.1
`openjdk-21` Ubuntu:22.04:LTS From an advisory covering 39 CVEs	before 21.0.13.0.3+1-1~22.04.1, plus listed versions 21.0.1+12-2~22.0421.0.2+13-1~22.04.121.0.3+9-1ubuntu1~22.04.121.0.4+7-1ubuntu2~22.0421.0.5+11-1ubuntu1~22.04 Show 8 moreShow less 21.0.6+7-1~22.04.121.0.7+6~us1-0ubuntu1~22.0421.0.8+9~us1-0ubuntu1~22.04.121.0.9+10-1~22.0421.0.10+7-1~22.0421.0.11+10-1~22.04.221.0.12+8-1~22.0421.0.12.1+1-1~22.04.4	21.0.13.0.3+1-1~22.04.1
`openjdk-21` Ubuntu:24.04:LTS From an advisory covering 39 CVEs	before 21.0.13.0.3+1-1~24.04.1, plus listed versions 21+35-121.0.1+12-221.0.1+12-321.0.2+13-121.0.2+13-2 Show 15 moreShow less 21.0.3~7ea-121.0.3~7ea-1build121.0.3~7ea-1build221.0.3+9-121.0.3+9-1ubuntu121.0.4+7-1ubuntu2~24.0421.0.5+11-1ubuntu1~24.0421.0.6+7-1~24.04.121.0.7+6~us1-0ubuntu1~24.0421.0.8+9~us1-0ubuntu1~24.04.121.0.9+10-1~24.0421.0.10+7-1~24.0421.0.11+10-1~24.04.221.0.12+8-1~24.0421.0.12.1+1-1~24.04.4	21.0.13.0.3+1-1~24.04.1
`openjdk-21` Ubuntu:26.10 From an advisory covering 39 CVEs	before 21.0.13.0.3+1-1~26.10.1, plus listed versions 21.0.11~8ea-121.0.11+10-121.0.12~5ea-121.0.12+8-121.0.12.1+1-1	21.0.13.0.3+1-1~26.10.1
`openjdk-21` Ubuntu:26.04:LTS From an advisory covering 39 CVEs	before 21.0.13.0.3+1-1~26.04.1, plus listed versions 21.0.9~8ea-121.0.9+10-121.0.10~4ea-121.0.10~6ea-121.0.10+7-1 Show 5 moreShow less 21.0.11~5ea-121.0.11~8ea-121.0.11+10-1~26.04.221.0.12+8-1~26.0421.0.12.1+1-1~26.04.4	21.0.13.0.3+1-1~26.04.1
`java-17-openjdk` openSUSE:Tumbleweed From an advisory covering 35 CVEs	before 17.0.21.0-1.1	17.0.21.0-1.1
`java-21-openjdk` openSUSE:Tumbleweed From an advisory covering 38 CVEs	before 21.0.13.0-1.1	21.0.13.0-1.1
`java-25-openjdk` openSUSE:Tumbleweed From an advisory covering 39 CVEs	before 25.0.5.0-1.1	25.0.5.0-1.1
`java-11-openjdk` openSUSE:Tumbleweed From an advisory covering 38 CVEs	before 11.0.33.0-1.1	11.0.33.0-1.1
`java-11-openj9` openSUSE:Tumbleweed From an advisory covering 19 CVEs	before 11.0.33.0-1.1	11.0.33.0-1.1
`java-17-openj9` openSUSE:Tumbleweed From an advisory covering 18 CVEs	before 17.0.21.0-1.1	17.0.21.0-1.1
`java-25-openj9` openSUSE:Tumbleweed From an advisory covering 20 CVEs	before 25.0.5.0-1.1	25.0.5.0-1.1
`java-1_8_0-openj9` openSUSE:Tumbleweed From an advisory covering 18 CVEs	before 1.8.0.512-1.1	1.8.0.512-1.1
`java-1_8_0-openjdk` openSUSE:Tumbleweed From an advisory covering 36 CVEs	before 1.8.0.512-1.1	1.8.0.512-1.1

History

History
Recorded	Changed	Sources
Nov 12, 2026	affected	OSV
Nov 11, 2026	affected, aliases, references	OSV
Nov 11, 2026	affected, aliases, references	OSV
Nov 10, 2026	affected	OSV
Nov 10, 2026	affected	OSV
Nov 9, 2026	affected	OSV
Nov 9, 2026	affected	OSV
Nov 7, 2026	affected, aliases	OSV
Nov 7, 2026	affected	GitHub Advisories, NVD, OSV
Nov 6, 2026	cwes	CVE List, EUVD

Show 6 moreShow less

History
Recorded	Changed	Sources
Nov 6, 2026	affected, aliases	OSV
Nov 6, 2026	affected
Nov 5, 2026	affected, aliases, facts, references	OSV
Nov 3, 2026	affected, aliases, references	OSV
Nov 3, 2026	affected, aliases, references	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-101516 is a medium vulnerability (CVSS 6.5) in Oracle Corporation Graalvm Enterprise Edition, published October 20, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.27%, the 18th percentile. Fixed in openjdk25 25.0.5.0.3_p1-r0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 33 package rows, 36 versions, 31 references and the rest of 2 source descriptions. The JSON record has them.