CVE-2026-87294

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...

6.5 MediumFix available

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: Low
Integrity: Low
Availability: None

Exploit likelihood

0.26%Unchanged since Oct 21, 2026

What each source reports

CVE List Score used6.5

Record: CVE-2026-87294
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness: CWE-284
Updated: 2026-11-02

EUVDEUVD-2026-1063356.5

Record: EUVD-2026-106335
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated: 2026-11-02

GitHub AdvisoriesGHSA-f77q-p3hr-hvw86.5

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...

Record: GHSA-f77q-p3hr-hvw8
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness: CWE-284
Updated: 2026-11-02

NVD6.5

Record: CVE-2026-87294
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness: CWE-284
Updated: 2026-11-02

OSVALPINE-CVE-2026-872946.5

Record: ALPINE-CVE-2026-87294
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated: 2026-11-03

OSVBELL-CVE-2026-872946.5

Record: BELL-CVE-2026-87294
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated: 2026-11-10

Show 24 moreShow less

OSVDEBIAN-CVE-2026-872946.5

Record: DEBIAN-CVE-2026-87294
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated: 2026-11-02

OSVRLSA-2026:883476.8

Important: java-25-openjdk security update

The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Improve C2 loop transformations (CVE-2026-83378)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance Vector Processing (CVE-2026-87255)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance HTTP Server (CVE-2026-87291)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance HTTP Client (CVE-2026-91332)
JDK: Improve ciphertext handling (CVE-2026-91333)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance jmod handling (CVE-2026-91375)
JDK: Enhance JShell (CVE-2026-91379)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance HTTP client caching (CVE-2026-91394)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP server (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)
JDK: Enhance C2 comparisons (CVE-2026-91487)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record: RLSA-2026:88347
CVSS 3.1: 6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated: 2026-11-02

OSVRLSA-2026:883526.8

Important: java-17-openjdk security update for Rocky Linux 8

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance HTTP Client (CVE-2026-91332)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance jmod handling (CVE-2026-91375)
JDK: Enhance JShell (CVE-2026-91379)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance Image Processing (CVE-2026-91382)
JDK: Enhance HTTP client caching (CVE-2026-91394)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP server (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)
JDK: Enhance C2 comparisons (CVE-2026-91487)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record: RLSA-2026:88352
CVSS 3.1: 6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated: 2026-11-02

OSVUBUNTU-CVE-2026-872946.5

Record: UBUNTU-CVE-2026-87294
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated: 2026-11-11

OSVALSA-2026:88347No score

Important: java-25-openjdk security update

The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Improve C2 loop transformations (CVE-2026-83378)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance Vector Processing (CVE-2026-87255)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance HTTP Server (CVE-2026-87291)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance HTTP Client (CVE-2026-91332)
JDK: Improve ciphertext handling (CVE-2026-91333)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance jmod handling (CVE-2026-91375)
JDK: Enhance JShell (CVE-2026-91379)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance HTTP client caching (CVE-2026-91394)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP server (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)
JDK: Enhance C2 comparisons (CVE-2026-91487)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record: ALSA-2026:88347
Updated: 2026-11-02

OSVALSA-2026:88349No score

Important: java-21-openjdk security update for AlmaLinux 8 and 9

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Improve C2 loop transformations (CVE-2026-83378)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance HTTP Server (CVE-2026-87291)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance HTTP Client (CVE-2026-91332)
JDK: Improve ciphertext handling (CVE-2026-91333)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance jmod handling (CVE-2026-91375)
JDK: Enhance JShell (CVE-2026-91379)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance HTTP client caching (CVE-2026-91394)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP server (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)
JDK: Enhance C2 comparisons (CVE-2026-91487)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record: ALSA-2026:88349
Updated: 2026-11-02

OSVALSA-2026:88352No score

Important: java-17-openjdk security update for AlmaLinux 8

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance HTTP Client (CVE-2026-91332)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance jmod handling (CVE-2026-91375)
JDK: Enhance JShell (CVE-2026-91379)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance Image Processing (CVE-2026-91382)
JDK: Enhance HTTP client caching (CVE-2026-91394)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP server (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)
JDK: Enhance C2 comparisons (CVE-2026-91487)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record: ALSA-2026:88352
Updated: 2026-11-02

OSVALSA-2026:90500No score

Important: java-17-openjdk security update for AlmaLinux 9

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance HTTP Client (CVE-2026-91332)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance jmod handling (CVE-2026-91375)
JDK: Enhance JShell (CVE-2026-91379)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance Image Processing (CVE-2026-91382)
JDK: Enhance HTTP client caching (CVE-2026-91394)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP server (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)
JDK: Enhance C2 comparisons (CVE-2026-91487)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record: ALSA-2026:90500
Updated: 2026-11-02

OSVALSA-2026:90504No score

Important: java-21-openjdk security update for AlmaLinux 10

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Improve C2 loop transformations (CVE-2026-83378)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance HTTP Server (CVE-2026-87291)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance HTTP Client (CVE-2026-91332)
JDK: Improve ciphertext handling (CVE-2026-91333)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance jmod handling (CVE-2026-91375)
JDK: Enhance JShell (CVE-2026-91379)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance HTTP client caching (CVE-2026-91394)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP server (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)
JDK: Enhance C2 comparisons (CVE-2026-91487)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record: ALSA-2026:90504
Updated: 2026-11-02

OSVAZL-112156No score

CVE-2026-87294 affecting package python-tensorboard 2.16.2-6

Record: AZL-112156
Updated: 2026-11-05

OSVMGASA-2026-0572No score

Updated java-latest-openjdk, timezone, java-21-openjdk, java-17-openjdk packages fix security vulnerabilities

Enhance PKCS5 padding. (CVE-2026-83374) Enhance TLS certificate handling. (CVE-2026-83376) Improve C2 loop transformations. (CVE-2026-83378) Enhance LDAP logins. (CVE-2026-83380) Enhance SASL Authentication. (CVE-2026-83381) Enhance WebRowSets. (CVE-2026-83387) Enhance HTTP Client Response Handling. (CVE-2026-83395) Enhance XML Processing. (CVE-2026-83400) Enhance XPath Expressions. (CVE-2026-87290) Enhance HTTP Server. (CVE-2026-87291) Enhance Network Clients. (CVE-2026-87292) Enhance Certificate Name Checks. (CVE-2026-87294) Enhance Template Handling. (CVE-2026-87367) Enhance HTTP Client. (CVE-2026-91332) Improve ciphertext handling. (CVE-2026-91333) Enhance JPEG loading. (CVE-2026-91334) Enhance Image Handling. (CVE-2026-91335) Enhance TLS handshakes. (CVE-2026-91373) Enhance jstatd. (CVE-2026-91374) Enhance jmod handling. (CVE-2026-91375) Enhance JShell. (CVE-2026-91379) Enhance Preferences. (CVE-2026-91380) Enhance HTTP client caching. (CVE-2026-91394) Enhance diagnostic sessions. (CVE-2026-91397) Enhance SOCKS5 support. (CVE-2026-91398) Enhance MIDI file handling. (CVE-2026-91400) Enhance zipfs. (CVE-2026-91410) Enhance font rendering. (CVE-2026-91415) Enhance GIF loading. (CVE-2026-91418) Enhance HTTP server parsing. (CVE-2026-91451) Enhance HTTP server. (CVE-2026-91452) Improve HTTP headers. (CVE-2026-91453) Enhance TLS Extensions. (CVE-2026-91461) Enhance krb5 tokens. (CVE-2026-91462) Enhance krb5 client. (CVE-2026-91463) Enhance Kerberos validation. (CVE-2026-91464) Enhance C2 comparisons. (CVE-2026-91487) Enhance Certificate Constraint Checking. (CVE-2026-101516)

Record: MGASA-2026-0572
Updated: 2026-11-03

OSVopenSUSE-SU-2026:12294-1No score

java-17-openjdk-17.0.21.0-1.1 on GA media

These are all security issues fixed in the java-17-openjdk-17.0.21.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12294-1
Updated: 2026-11-02

OSVopenSUSE-SU-2026:12328-1No score

java-21-openjdk-21.0.13.0-1.1 on GA media

These are all security issues fixed in the java-21-openjdk-21.0.13.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12328-1
Updated: 2026-11-02

OSVopenSUSE-SU-2026:12329-1No score

java-25-openjdk-25.0.5.0-1.1 on GA media

These are all security issues fixed in the java-25-openjdk-25.0.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12329-1
Updated: 2026-11-02

OSVopenSUSE-SU-2026:12418-1No score

java-11-openjdk-11.0.33.0-1.1 on GA media

These are all security issues fixed in the java-11-openjdk-11.0.33.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12418-1
Updated: 2026-11-05

OSVopenSUSE-SU-2026:12436-1No score

java-25-openj9-25.0.5.0-1.1 on GA media

These are all security issues fixed in the java-25-openj9-25.0.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12436-1
Updated: 2026-11-06

OSVopenSUSE-SU-2026:12459-1No score

java-1_8_0-openj9-1.8.0.512-1.1 on GA media

These are all security issues fixed in the java-1_8_0-openj9-1.8.0.512-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12459-1
Updated: 2026-11-07

OSVopenSUSE-SU-2026:12513-1No score

java-1_8_0-openjdk-1.8.0.512-1.1 on GA media

These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.512-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12513-1
Updated: 2026-11-11

OSVUSN-9004-1No score

openjdk-25 vulnerabilities

It was discovered that the 2D component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to cause a denial of service or to read or modify sensitive data. (CVE-2026-91415)

It was discovered that the Networking component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-91398)

It was discovered that the 2D component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to cause a denial of service or to modify sensitive data. (CVE-2026-91382)

It was discovered that the JGSS component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to cause a denial of service or to modify sensitive data. (CVE-2026-91411)

It was discovered that the Networking component of OpenJDK 25 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service or to modify sensitive data. (CVE-2026-83395)

It was discovered that the Security component of OpenJDK 25 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-83381, CVE-2026-87294)

It was discovered that the JAXP component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-87290)

It was discovered that the JDBC component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83387)

It was discovered that the JGSS component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-91462)

It was discovered that the Security component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83374)

It was discovered that the Libraries component of OpenJDK 25 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-91410)

It was discovered that the Networking component of OpenJDK 25 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-87292, CVE-2026-91332, CVE-2026-91451, CVE-2026-91452)

It was discovered that the JSSE component of OpenJDK 25 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-91373)

It was discovered that the JAAS component of OpenJDK 25 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83380)

It was discovered that the JAXP component of OpenJDK 25 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-83400)

It was discovered that the JGSS component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-91463, CVE-2026-91464)

It was discovered that the Lightweight HTTP Server component of OpenJDK 25 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-91453)

It was discovered that the ImageIO component of OpenJDK 25 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-91418)

It was discovered that the Compiler component of OpenJDK 25 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91487)

It was discovered that the Serviceability component of OpenJDK 25 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91374) …

Record: USN-9004-1
Updated: 2026-11-11

OSVUSN-9005-1No score

openjdk-27 vulnerabilities

It was discovered that the 2D component of OpenJDK 27 did not correctly authenticate users. A remote attacker could possibly use this issue to cause a denial of service or to read or modify sensitive data. (CVE-2026-91415)

It was discovered that the Networking component of OpenJDK 27 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-91398)

It was discovered that the Networking component of OpenJDK 27 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service or to modify sensitive data. (CVE-2026-83395)

It was discovered that the Security component of OpenJDK 27 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-83381, CVE-2026-87294)

It was discovered that the JAXP component of OpenJDK 27 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-87290)

It was discovered that the JDBC component of OpenJDK 27 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83387)

It was discovered that the JGSS component of OpenJDK 27 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-91462)

It was discovered that the Security component of OpenJDK 27 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83374)

It was discovered that the Libraries component of OpenJDK 27 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-91410)

It was discovered that the Networking component of OpenJDK 27 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-87292, CVE-2026-91332, CVE-2026-91451, CVE-2026-91452)

It was discovered that the JSSE component of OpenJDK 27 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-91373)

It was discovered that the JAAS component of OpenJDK 27 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83380)

It was discovered that the JAXP component of OpenJDK 27 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-83400)

It was discovered that the JGSS component of OpenJDK 27 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-91463, CVE-2026-91464)

It was discovered that the Lightweight HTTP Server component of OpenJDK 27 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-91453)

It was discovered that the ImageIO component of OpenJDK 27 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-91418)

It was discovered that the Compiler component of OpenJDK 27 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91487)

It was discovered that the Serviceability component of OpenJDK 27 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91374)

It was discovered that the Libraries component of OpenJDK 27 did not correctly authenticate users. A local attacker could possibly use this issue to modify sensitive data. (CVE-2026-91375)

It was discovered that the JDK tools component of OpenJDK 27 did not correctly authenticate users. A local attacker could possibly use this issue to modify sensitive data. (CVE-2026-91379)

It was discovered that the Utility component of OpenJDK…

Record: USN-9005-1
Updated: 2026-11-12

OSVUSN-9009-1No score

openjdk-8 vulnerabilities

It was discovered that the Security component of OpenJDK 8 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83374)

It was discovered that the JSSE component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83376, CVE-2026-91461)

It was discovered that the JAAS component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83380)

It was discovered that the Security component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-83381, CVE-2026-87294)

It was discovered that the JDBC component of OpenJDK 8 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83387)

It was discovered that the Networking component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service or to modify sensitive data. (CVE-2026-83395)

It was discovered that the JAXP component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-83400)

It was discovered that the JAXP component of OpenJDK 8 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-87290)

It was discovered that the Networking component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-87292, CVE-2026-91451, CVE-2026-91452)

It was discovered that the RMI component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-87293)

It was discovered that the JAXP component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-87367)

It was discovered that the ImageIO component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-91334)

It was discovered that the AWT component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-91335)

It was discovered that the JSSE component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-91373)

It was discovered that the Serviceability component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91374)

It was discovered that the Utility component of OpenJDK 8 did not correctly authorize users. A local attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91380)

It was discovered that the 2D component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-91381)

It was discovered that the 2D component of OpenJDK 8 did not correctly authenticate users. A remote attacker could possibly use this issue to cause a denial of service or to modify sensitive data. (CVE-2026-91382)

It was discovered that the Utility component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service or to modify sensitive data. (CVE-2026-91395, CVE-2026-91396)

It was discovered that the Serviceability component of OpenJDK 8 did not correctly authorize users. A local attacker could possibly use this issue to cause a denial of service or to modify sensitive data. (CVE-2026-91397)

It was discovered that the Networking component of OpenJDK 8 did not…

Record: USN-9009-1
Updated: 2026-11-10

OSVUSN-9010-1No score

openjdk-lts vulnerabilities

It was discovered that the Security component of OpenJDK 11 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83374)

It was discovered that the JSSE component of OpenJDK 11 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83376, CVE-2026-91461)

It was discovered that the JAAS component of OpenJDK 11 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83380)

It was discovered that the Security component of OpenJDK 11 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-83381, CVE-2026-87294)

It was discovered that the JDBC component of OpenJDK 11 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83387)

It was discovered that the Networking component of OpenJDK 11 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service or to modify sensitive data. (CVE-2026-83395)

It was discovered that the JAXP component of OpenJDK 11 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-83400)

It was discovered that the JAXP component of OpenJDK 11 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-87290)

It was discovered that the Networking component of OpenJDK 11 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-87292, CVE-2026-91332, CVE-2026-91451, CVE-2026-91452)

It was discovered that the JAXP component of OpenJDK 11 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-87367)

It was discovered that the ImageIO component of OpenJDK 11 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-91334)

It was discovered that the AWT component of OpenJDK 11 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-91335)

It was discovered that the JSSE component of OpenJDK 11 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-91373)

It was discovered that the Serviceability component of OpenJDK 11 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91374)

It was discovered that the Libraries component of OpenJDK 11 did not correctly authenticate users. A local attacker could possibly use this issue to modify sensitive data. (CVE-2026-91375)

It was discovered that the JDK tools component of OpenJDK 11 did not correctly authenticate users. A local attacker could possibly use this issue to modify sensitive data. (CVE-2026-91379)

It was discovered that the Utility component of OpenJDK 11 did not correctly authorize users. A local attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91380)

It was discovered that the 2D component of OpenJDK 11 did not correctly authenticate users. A remote attacker could possibly use this issue to cause a denial of service or to modify sensitive data. (CVE-2026-91382)

It was discovered that the Networking component of OpenJDK 11 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-91394)

It was discovered that the Utility component of OpenJDK 11 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service or to modify sensitive data. (CVE-2026-91395, CVE-2026-91396)

It was discovered that the Serviceability component of…

Record: USN-9010-1
Updated: 2026-11-10

OSVUSN-9014-1No score

openjdk-17 vulnerabilities

It was discovered that the Security component of OpenJDK 17 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83374)

It was discovered that the JSSE component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83376)

It was discovered that the JAAS component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83380)

It was discovered that the Security component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-83381)

It was discovered that the JDBC component of OpenJDK 17 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83387)

It was discovered that the Networking component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service or modify sensitive data. (CVE-2026-83395)

It was discovered that the JAXP component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-83400)

It was discovered that the JAXP component of OpenJDK 17 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-87290)

It was discovered that the Networking component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-87292)

It was discovered that the Security component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-87294)

It was discovered that the JAXP component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-87367)

It was discovered that the Networking component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-91332)

It was discovered that the ImageIO component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-91334)

It was discovered that the AWT component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-91335)

It was discovered that the JSSE component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-91373)

It was discovered that the Serviceability component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91374)

It was discovered that the Libraries component of OpenJDK 17 did not correctly authenticate users. A local attacker could possibly use this issue to modify sensitive data. (CVE-2026-91375)

It was discovered that the JDK tools component of OpenJDK 17 did not correctly authenticate users. A local attacker could possibly use this issue to modify sensitive data. (CVE-2026-91379)

It was discovered that the Utility component of OpenJDK 17 did not correctly authorize users. A local attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91380)

It was discovered that the 2D component of OpenJDK 17 did not correctly authenticate users. A remote attacker could possibly use this issue to cause a denial of service or modify sensitive data. (CVE-2026-91382)

It was discovered that the Networking component of OpenJDK 17 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data.…

Record: USN-9014-1
Updated: 2026-11-12

OSVUSN-9015-1No score

openjdk-21 vulnerabilities

It was discovered that the Security component of OpenJDK 21 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83374)

It was discovered that the JSSE component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83376)

It was discovered that the Compiler component of OpenJDK 21 did not correctly authorize users. An unauthenticated remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-83378)

It was discovered that the JAAS component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83380)

It was discovered that the Security component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-83381)

It was discovered that the JDBC component of OpenJDK 21 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83387)

It was discovered that the Networking component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service or modify sensitive data. (CVE-2026-83395)

It was discovered that the JAXP component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-83400)

It was discovered that the JAXP component of OpenJDK 21 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-87290)

It was discovered that the Networking component of OpenJDK 21 did not correctly authorize users. An unauthenticated remote attacker could possibly use this issue to read sensitive data. (CVE-2026-87291)

It was discovered that the Networking component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-87292)

It was discovered that the Security component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-87294)

It was discovered that the JAXP component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-87367)

It was discovered that the Networking component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-91332)

It was discovered that the Security component of OpenJDK 21 did not correctly authorize users. An unauthenticated remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91333)

It was discovered that the ImageIO component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-91334)

It was discovered that the AWT component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-91335)

It was discovered that the JSSE component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-91373)

It was discovered that the Serviceability component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91374)

It was discovered that the Libraries component of OpenJDK 21 did not correctly authenticate users. A local attacker could possibly use this issue to modify sensitive data. (CVE-2026-91375)

It was discovered that the JDK tools component of OpenJDK 21 did not correctly authenticate users. A local attacker could possibly use this issue to…

Record: USN-9015-1
Updated: 2026-11-12

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`openjdk17` Alpine:v3.23	before 17.0.21.0.3_p1-r0	17.0.21.0.3_p1-r0
`openjdk17` Alpine:v3.24	before 17.0.21.0.3_p1-r0	17.0.21.0.3_p1-r0
`openjdk25` Alpine:v3.23	before 25.0.5.0.3_p1-r0	25.0.5.0.3_p1-r0
`openjdk25` Alpine:v3.24	before 25.0.5.0.3_p1-r0	25.0.5.0.3_p1-r0
`java-25-openjdk` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-crypto-adapter` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-crypto-adapter-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-crypto-adapter-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-demo` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-demo-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`java-25-openjdk-demo-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-devel` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-devel-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-devel-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-headless` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-headless-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-headless-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-javadoc` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-javadoc-zip` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-jmods` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-jmods-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-jmods-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-src` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-src-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-src-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-static-libs` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-static-libs-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-static-libs-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-crypto-adapter` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-crypto-adapter-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-crypto-adapter-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-demo` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-demo-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-demo-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-devel` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-devel-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-devel-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-headless` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-headless-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-headless-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-javadoc` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-javadoc-zip` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-jmods` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-jmods-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-jmods-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-src` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-src-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-src-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-static-libs` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-static-libs-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-static-libs-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-21-openjdk` AlmaLinux:8 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.1.el8	1:21.0.13.0.9-1.1.el8
`java-21-openjdk` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-demo` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-demo-fastdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-demo-slowdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-devel` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-devel-fastdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-devel-slowdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-fastdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-headless` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-headless-fastdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-headless-slowdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-javadoc` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-javadoc-zip` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-jmods` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-jmods-fastdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-jmods-slowdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-slowdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-src` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-src-fastdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-src-slowdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-static-libs` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-static-libs-fastdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-21-openjdk-static-libs-slowdebug` AlmaLinux:9 From an advisory covering 40 CVEs	before 1:21.0.13.0.9-1.2.el9.alma.1	1:21.0.13.0.9-1.2.el9.alma.1
`java-17-openjdk` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-demo` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-demo-fastdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-demo-slowdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-devel` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-devel-fastdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-devel-slowdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-fastdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-headless` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-headless-fastdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-headless-slowdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-javadoc` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-javadoc-zip` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-jmods` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`java-17-openjdk-jmods-fastdebug` AlmaLinux:8 From an advisory covering 38 CVEs	before 1:17.0.21.0.9-2.1.el8	1:17.0.21.0.9-2.1.el8
`python-tensorboard` Azure Linux:3	through 2.16.2-6	None known
`openjdk-nik-23-17` Alpaquita:23	23.0.4-r1 up to 23.0.14-r0	23.0.14-r0
`openjdk-nik-23-21` Alpaquita:23	23.1.3-r1 up to 23.1.13-r0	23.1.13-r0
`openjdk-nik-25-25` Alpaquita:23	25.0.0-r0 up to 25.0.5.0.3-r0	25.0.5.0.3-r0
`openjdk11` Alpaquita:23	11.0.19_p7-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-container-jre` Alpaquita:23	11.0.19_p7-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-lite` Alpaquita:23	11.0.19_p7-r1 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-perf` Alpaquita:23	11.0.20.1_p1-r0 up to 11.0.33.0.3_p8-r0	11.0.33.0.3_p8-r0
`openjdk17` Alpaquita:23	17.0.7_p7-r1 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-container-jre` Alpaquita:23	17.0.7_p7-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-crac` Alpaquita:23	17.0.13_p13-r0 up to 17.0.21.0.3_p6-r0	17.0.21.0.3_p6-r0
`openjdk17-lite` Alpaquita:23	17.0.7_p7-r1 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk21` Alpaquita:23	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-container-jre` Alpaquita:23	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-crac` Alpaquita:23	21.0.5_p12-r0 up to 21.0.13.0.3_p6-r0	21.0.13.0.3_p6-r0
`openjdk21-lite` Alpaquita:23	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk25` Alpaquita:23	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-container-jre` Alpaquita:23	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-lite` Alpaquita:23	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk27` Alpaquita:23	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-container-jre` Alpaquita:23	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-lite` Alpaquita:23	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk8` Alpaquita:23	8u372_p7-r0 up to 8.513_p9-r0	8.513_p9-r0
`openjdk8-perf` Alpaquita:23	8u392_p9-r1 up to 8.513_p10-r0	8.513_p10-r0
`openjdk-nik-23-17` Alpaquita:25	23.0.8-r0 up to 23.0.14-r0	23.0.14-r0
`openjdk-nik-23-21` Alpaquita:25	23.1.7-r0 up to 23.1.13-r0	23.1.13-r0
`openjdk-nik-25-25` Alpaquita:25	25.0.0-r0 up to 25.0.5.0.3-r0	25.0.5.0.3-r0
`openjdk11` Alpaquita:25	11.0.27_p9-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-container-jre` Alpaquita:25	11.0.27_p9-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-lite` Alpaquita:25	11.0.27_p9-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-perf` Alpaquita:25	11.0.29_p11-r0 up to 11.0.33.0.3_p8-r0	11.0.33.0.3_p8-r0
`openjdk17` Alpaquita:25	17.0.15_p10-r1 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-container-jre` Alpaquita:25	17.0.15_p10-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-crac` Alpaquita:25	17.0.15_p13-r1 up to 17.0.21.0.3_p6-r0	17.0.21.0.3_p6-r0
`openjdk17-lite` Alpaquita:25	17.0.15_p10-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk21` Alpaquita:25	21.0.7_p9-r1 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-container-jre` Alpaquita:25	21.0.7_p9-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-crac` Alpaquita:25	21.0.7_p12-r1 up to 21.0.13.0.3_p6-r0	21.0.13.0.3_p6-r0
`openjdk21-lite` Alpaquita:25	21.0.7_p9-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk25` Alpaquita:25	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-container-jre` Alpaquita:25	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-lite` Alpaquita:25	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk27` Alpaquita:25	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-container-jre` Alpaquita:25	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-lite` Alpaquita:25	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk8` Alpaquita:25	8.452_p11-r0 up to 8.513_p9-r0	8.513_p9-r0
`openjdk8-perf` Alpaquita:25	8.472_p10-r0 up to 8.513_p10-r0	8.513_p10-r0
`openjdk-nik-23-17` Alpaquita:stream	23.0.4-r1 up to 23.0.14-r0	23.0.14-r0
`openjdk-nik-23-21` Alpaquita:stream	23.1.3-r1 up to 23.1.13-r0	23.1.13-r0
`openjdk-nik-25-25` Alpaquita:stream	25.0.0-r0 up to 25.0.5.0.3-r0	25.0.5.0.3-r0
`openjdk11` Alpaquita:stream	11.0.19_p7-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-container-jre` Alpaquita:stream	11.0.19_p7-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-lite` Alpaquita:stream	11.0.19_p7-r1 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk17` Alpaquita:stream	17.0.7_p7-r1 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-container-jre` Alpaquita:stream	17.0.7_p7-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-crac` Alpaquita:stream	17.0.10_p13-r0 up to 17.0.21.0.3_p6-r0	17.0.21.0.3_p6-r0
`openjdk17-lite` Alpaquita:stream	17.0.7_p7-r1 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk21` Alpaquita:stream	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-container-jre` Alpaquita:stream	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-crac` Alpaquita:stream	21.0.2_p15-r0 up to 21.0.13.0.3_p6-r0	21.0.13.0.3_p6-r0
`openjdk21-lite` Alpaquita:stream	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk25` Alpaquita:stream	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-container-jre` Alpaquita:stream	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-lite` Alpaquita:stream	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk27` Alpaquita:stream	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-container-jre` Alpaquita:stream	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-lite` Alpaquita:stream	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk8` Alpaquita:stream	8u372_p7-r1 up to 8.513_p9-r0	8.513_p9-r0
`openjdk-nik-23-17` BellSoft Hardened Containers:23	23.0.4-r1 up to 23.0.14-r0	23.0.14-r0
`openjdk-nik-23-21` BellSoft Hardened Containers:23	23.1.3-r1 up to 23.1.13-r0	23.1.13-r0
`openjdk-nik-25-25` BellSoft Hardened Containers:23	25.0.0-r0 up to 25.0.5.0.3-r0	25.0.5.0.3-r0
`openjdk11-container-jre` BellSoft Hardened Containers:23	11.0.19_p7-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-lite` BellSoft Hardened Containers:23	11.0.19_p7-r1 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-perf` BellSoft Hardened Containers:23	11.0.20.1_p1-r0 up to 11.0.33.0.3_p8-r0	11.0.33.0.3_p8-r0
`openjdk17-container-jre` BellSoft Hardened Containers:23	17.0.7_p7-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-crac` BellSoft Hardened Containers:23	17.0.13_p13-r0 up to 17.0.21.0.3_p6-r0	17.0.21.0.3_p6-r0
`openjdk17-lite` BellSoft Hardened Containers:23	17.0.7_p7-r1 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk21-container-jre` BellSoft Hardened Containers:23	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-crac` BellSoft Hardened Containers:23	21.0.5_p12-r0 up to 21.0.13.0.3_p6-r0	21.0.13.0.3_p6-r0
`openjdk21-lite` BellSoft Hardened Containers:23	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk25-container-jre` BellSoft Hardened Containers:23	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-lite` BellSoft Hardened Containers:23	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk27-container-jre` BellSoft Hardened Containers:23	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-lite` BellSoft Hardened Containers:23	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk8` BellSoft Hardened Containers:23	8u372_p7-r0 up to 8.513_p9-r0	8.513_p9-r0
`openjdk8-perf` BellSoft Hardened Containers:23	8u392_p9-r1 up to 8.513_p10-r0	8.513_p10-r0
`openjdk-nik-23-17` BellSoft Hardened Containers:25	23.0.8-r0 up to 23.0.14-r0	23.0.14-r0
`openjdk-nik-23-21` BellSoft Hardened Containers:25	23.1.7-r0 up to 23.1.13-r0	23.1.13-r0
`openjdk-nik-25-25` BellSoft Hardened Containers:25	25.0.0-r0 up to 25.0.5.0.3-r0	25.0.5.0.3-r0
`openjdk11-container-jre` BellSoft Hardened Containers:25	11.0.27_p9-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-lite` BellSoft Hardened Containers:25	11.0.27_p9-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-perf` BellSoft Hardened Containers:25	11.0.29_p11-r0 up to 11.0.33.0.3_p8-r0	11.0.33.0.3_p8-r0
`openjdk17-container-jre` BellSoft Hardened Containers:25	17.0.15_p10-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-crac` BellSoft Hardened Containers:25	17.0.15_p13-r1 up to 17.0.21.0.3_p6-r0	17.0.21.0.3_p6-r0
`openjdk17-lite` BellSoft Hardened Containers:25	17.0.15_p10-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk21-container-jre` BellSoft Hardened Containers:25	21.0.7_p9-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-crac` BellSoft Hardened Containers:25	21.0.7_p12-r1 up to 21.0.13.0.3_p6-r0	21.0.13.0.3_p6-r0
`openjdk21-lite` BellSoft Hardened Containers:25	21.0.7_p9-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk25-container-jre` BellSoft Hardened Containers:25	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-lite` BellSoft Hardened Containers:25	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk27-container-jre` BellSoft Hardened Containers:25	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-lite` BellSoft Hardened Containers:25	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk8` BellSoft Hardened Containers:25	8.452_p11-r0 up to 8.513_p9-r0	8.513_p9-r0
`openjdk8-perf` BellSoft Hardened Containers:25	8.472_p10-r0 up to 8.513_p10-r0	8.513_p10-r0
`openjdk-nik-23-17` BellSoft Hardened Containers:stream	23.0.4-r1 up to 23.0.14-r0	23.0.14-r0
`openjdk-nik-23-21` BellSoft Hardened Containers:stream	23.1.3-r1 up to 23.1.13-r0	23.1.13-r0
`openjdk-nik-25-25` BellSoft Hardened Containers:stream	25.0.0-r0 up to 25.0.5.0.3-r0	25.0.5.0.3-r0
`openjdk11-container-jre` BellSoft Hardened Containers:stream	11.0.19_p7-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-lite` BellSoft Hardened Containers:stream	11.0.19_p7-r1 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk17-container-jre` BellSoft Hardened Containers:stream	17.0.7_p7-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-crac` BellSoft Hardened Containers:stream	17.0.10_p13-r0 up to 17.0.21.0.3_p6-r0	17.0.21.0.3_p6-r0
`openjdk17-lite` BellSoft Hardened Containers:stream	17.0.7_p7-r1 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk21-container-jre` BellSoft Hardened Containers:stream	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-crac` BellSoft Hardened Containers:stream	21.0.2_p15-r0 up to 21.0.13.0.3_p6-r0	21.0.13.0.3_p6-r0
`openjdk21-lite` BellSoft Hardened Containers:stream	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk25-container-jre` BellSoft Hardened Containers:stream	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-lite` BellSoft Hardened Containers:stream	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk27-container-jre` BellSoft Hardened Containers:stream	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-lite` BellSoft Hardened Containers:stream	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk8` BellSoft Hardened Containers:stream	8u372_p7-r1 up to 8.513_p9-r0	8.513_p9-r0
`openjdk-17` Debian:12	before 17.0.21+9-1~deb12u1, plus listed versions 17.0.10+7-117.0.10+7-1~deb11u117.0.10+7-1~deb12u117.0.10+7-217.0.10+7-3 Show 45 moreShow less 17.0.10~6ea-117.0.11+9-117.0.11+9-1~deb11u117.0.11+9-1~deb12u117.0.11~6ea-117.0.11~7ea-117.0.12+7-117.0.12+7-217.0.12+7-2~deb11u117.0.12+7-2~deb12u117.0.12~6ea-117.0.13+11-117.0.13+11-1~deb11u117.0.13+11-1~deb12u117.0.13+11-217.0.13+11-2~deb12u117.0.13~6ea-117.0.14+7-117.0.14+7-1~deb11u117.0.14+7-1~deb12u117.0.14~6ea-117.0.15+6-117.0.15+6-1~deb11u117.0.15+6-1~deb12u117.0.15~4ea-117.0.15~5ea-117.0.16+8-117.0.16+8-1~deb11u117.0.16+8-1~deb12u117.0.16~5ea-117.0.17+10-117.0.17+10-1~deb11u117.0.17+10-1~deb12u117.0.17~5ea-117.0.17~8ea-117.0.18+8-117.0.18+8-1~deb11u117.0.18+8-1~deb12u117.0.18~7ea-117.0.19+10-117.0.19+10-1~deb11u117.0.19+10-1~deb12u117.0.19+10-1~deb12u217.0.19~6ea-117.0.19~9ea-1	17.0.21+9-1~deb12u1
`openjdk-21` Debian:13	before 21.0.13+9-1~deb13u2, plus listed versions 21.0.10+7-121.0.10+7-1~deb13u121.0.10~4ea-121.0.10~6ea-121.0.11+10-1 Show 22 moreShow less 21.0.11+10-1~deb13u121.0.11+10-1~deb13u221.0.11~5ea-121.0.11~6ea-121.0.11~8ea-121.0.11~9ea-121.0.11~9ea-221.0.12+8-121.0.12+8-1~deb13u121.0.12+8-221.0.12.1+1-121.0.12.1+1-1~deb13u121.0.12~5ea-121.0.12~7ea-121.0.13+9-1~deb13u121.0.13~6ea-121.0.13~8ea-121.0.8+9-121.0.9+10-121.0.9+10-1~deb13u121.0.9~5ea-121.0.9~8ea-1	21.0.13+9-1~deb13u2
`openjdk-21` Debian:14	before 21.0.13+9-1, plus listed versions 21.0.10+7-121.0.10+7-1~deb13u121.0.10~4ea-121.0.10~6ea-121.0.11+10-1 Show 23 moreShow less 21.0.11+10-1~deb13u121.0.11+10-1~deb13u221.0.11~5ea-121.0.11~6ea-121.0.11~8ea-121.0.11~9ea-121.0.11~9ea-221.0.12+8-121.0.12+8-1~deb13u121.0.12+8-221.0.12.1+1-121.0.12.1+1-1~deb13u121.0.12~5ea-121.0.12~7ea-121.0.13+9-1~deb13u121.0.13+9-1~deb13u221.0.13~6ea-121.0.13~8ea-121.0.8+9-121.0.9+10-121.0.9+10-1~deb13u121.0.9~5ea-121.0.9~8ea-1	21.0.13+9-1
`openjdk-25` Debian:13	before 25.0.5+8-1~deb13u1, plus listed versions 25+36-125.0.1+8-125.0.1+8-1~deb13u125.0.1+8-225.0.1+8-3 Show 24 moreShow less 25.0.2+10-125.0.2+10-1~deb13u225.0.3+9-125.0.3+9-225.0.3+9-2~deb13u125.0.3~5ea-125.0.3~5ea-225.0.3~7ea-125.0.3~7ea-225.0.3~8ea-125.0.3~8ea-225.0.4+7-125.0.4+7-1~deb13u125.0.4+7-225.0.4.1+1-125.0.4.1+1-1~deb13u125.0.4~4ea-125.0.4~6ea-125.0.5~6ea-125.0.5~7ea-125.0.5~7ea-225~32ea-125~34ea-125~36ea-1	25.0.5+8-1~deb13u1
`openjdk-25` Debian:14	before 25.0.5+8-1, plus listed versions 25+36-125.0.1+8-125.0.1+8-1~deb13u125.0.1+8-225.0.1+8-3 Show 25 moreShow less 25.0.2+10-125.0.2+10-1~deb13u225.0.3+9-125.0.3+9-225.0.3+9-2~deb13u125.0.3~5ea-125.0.3~5ea-225.0.3~7ea-125.0.3~7ea-225.0.3~8ea-125.0.3~8ea-225.0.4+7-125.0.4+7-1~deb13u125.0.4+7-225.0.4.1+1-125.0.4.1+1-1~deb13u125.0.4~4ea-125.0.4~6ea-125.0.5+8-1~deb13u125.0.5~6ea-125.0.5~7ea-125.0.5~7ea-225~32ea-125~34ea-125~36ea-1	25.0.5+8-1
`openjdk-27` Debian:14	All versions, plus listed versions 27+35-127+35-227.0.1+9-127.0.1.0.2+1-127~10ea-1 Show 14 moreShow less 27~13ea-127~13ea-227~17ea-127~17ea-227~18ea-127~18ea-2~exp127~18ea-2~exp227~19ea-127~23ea-127~24ea-127~24ea-227~30ea-127~33ea-127~34ea-1	None known
`java-21-openjdk` Mageia:10 From an advisory covering 38 CVEs	before 21.0.13.0.9-1.mga10	21.0.13.0.9-1.mga10
`java-17-openjdk` Mageia:10 From an advisory covering 38 CVEs	before 17.0.21.0.9-1.mga10	17.0.21.0.9-1.mga10
`java-latest-openjdk` Mageia:10 From an advisory covering 38 CVEs	before 25.0.5.0.8-1.rolling.1.mga10	25.0.5.0.8-1.rolling.1.mga10
`timezone` Mageia:10 From an advisory covering 38 CVEs	before 2026e-1.mga10	2026e-1.mga10
`java-25-openjdk` Rocky Linux:9 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el9_8	1:25.0.5.0.8-1.0.el9_8
`java-17-openjdk` Rocky Linux:8 From an advisory covering 36 CVEs	before 1:17.0.21.0.9-2.1.el8_10	1:17.0.21.0.9-2.1.el8_10
`openjdk-8` Ubuntu:Pro:16.04:LTS	before 8u512-b09~us1-0ubuntu1~16.04.1, plus listed versions 8u66-b01-58u72-b05-1ubuntu18u72-b05-58u72-b05-68u72-b15-1 Show 45 moreShow less 8u72-b15-2ubuntu18u72-b15-2ubuntu38u72-b15-3ubuntu18u77-b03-1ubuntu28u77-b03-3ubuntu18u77-b03-3ubuntu28u77-b03-3ubuntu38u91-b14-0ubuntu4~16.04.18u91-b14-3ubuntu1~16.04.18u111-b14-2ubuntu0.16.04.28u121-b13-0ubuntu1.16.04.28u131-b11-0ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.38u151-b12-0ubuntu0.16.04.28u162-b12-0ubuntu0.16.04.28u171-b11-0ubuntu0.16.04.18u181-b13-0ubuntu0.16.04.18u181-b13-1ubuntu0.16.04.18u191-b12-0ubuntu0.16.04.18u191-b12-2ubuntu0.16.04.18u212-b03-0ubuntu1.16.04.18u222-b10-1ubuntu1~16.04.18u232-b09-0ubuntu1~16.04.18u242-b08-0ubuntu3~16.048u252-b09-1~16.048u265-b01-0ubuntu2~16.048u272-b10-0ubuntu1~16.048u275-b01-0ubuntu1~16.048u282-b08-0ubuntu1~16.048u292-b10-0ubuntu1~16.04.18u312-b07-0ubuntu1~16.048u342-b07-0ubuntu1~16.048u352-ga-1~16.048u362-ga-0ubuntu1~16.04.18u372-ga~us1-0ubuntu1~16.048u382-ga-1~16.04.18u392-ga-1~16.048u432-ga~us1-0ubuntu2~16.04.48u442-b06~us1-0ubuntu1~16.048u452-ga~us1-0ubuntu1~16.04.18u462-ga~us1-0ubuntu2~16.04.28u472-ga-1~16.048u482-ga~us1-0ubuntu1~16.048u492-ga~us2-0ubuntu1~16.04.1	8u512-b09~us1-0ubuntu1~16.04.1
`openjdk-9` Ubuntu:16.04:LTS	All versions, plus listed versions 9~b88-19~b101-2ubuntu29~b102-19~b113-0ubuntu19~b114-0ubuntu1	None known
`openjdk-lts` Ubuntu:Pro:18.04:LTS	before 11.0.33+9-1ubuntu1~18.04.1, plus listed versions 9.0.4+12-2ubuntu49.0.4+12-4ubuntu110~46-4ubuntu110~46-5ubuntu110.0.1+10-1ubuntu2 Show 38 moreShow less 10.0.1+10-3ubuntu110.0.2+13-1ubuntu0.18.04.110.0.2+13-1ubuntu0.18.04.210.0.2+13-1ubuntu0.18.04.310.0.2+13-1ubuntu0.18.04.411.0.2+9-3ubuntu1~18.04.311.0.3+7-1ubuntu2~18.04.111.0.4+11-1ubuntu2~18.04.311.0.5+10-0ubuntu1.1~18.0411.0.6+10-1ubuntu1~18.04.111.0.7+10-2ubuntu2~18.0411.0.8+10-0ubuntu1~18.04.111.0.9+11-0ubuntu1~18.04.111.0.9.1+1-0ubuntu1~18.0411.0.10+9-0ubuntu1~18.0411.0.11+9-0ubuntu2~18.0411.0.13+8-0ubuntu1~18.0411.0.14+9-0ubuntu2~18.0411.0.14.1+1-0ubuntu1~18.0411.0.15+10-0ubuntu0.18.04.111.0.16+8-0ubuntu1~18.0411.0.17+8-1ubuntu2~18.0411.0.18+10-0ubuntu1~18.04.111.0.19+7~us1-0ubuntu1~18.04.111.0.20+8-1ubuntu1~18.0411.0.20.1+1-0ubuntu1~18.0411.0.21+9-0ubuntu1~18.0411.0.22+7-0ubuntu2~18.04.111.0.23+9-1ubuntu1~18.04.111.0.25+9-1ubuntu1~18.0411.0.26+4-1ubuntu1~18.0411.0.27+6~us1-0ubuntu1~18.0411.0.28+6-1ubuntu1~18.04.111.0.29+7-1ubuntu1~18.0411.0.30+7-1ubuntu1~18.0411.0.31+11-1ubuntu1~18.04.211.0.32+9-1ubuntu1~18.0411.0.32.1+1-1ubuntu1~18.04	11.0.33+9-1ubuntu1~18.04.1
`openjdk-17` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 17+35-1~18.0417.0.1+12-1~18.0417.0.2+8-1~18.0417.0.3+7-0ubuntu0.18.04.117.0.4+8-1~18.04 Show 18 moreShow less 17.0.5+8-2ubuntu1~18.0417.0.6+10-0ubuntu1~18.04.117.0.7+7~us1-0ubuntu1~18.0417.0.8+7-1~18.0417.0.8.1+1~us1-0ubuntu1~18.0417.0.9+9-1~18.0417.0.10+7-1~18.04.117.0.11+9-1~18.04.117.0.13+11-2ubuntu1~18.04.217.0.14+7-1~18.0417.0.15+6~us1-0ubuntu1~18.0417.0.16+8~us1-0ubuntu1~18.04.117.0.17+10-1~18.0417.0.18+8-1~18.0417.0.19+10-1~18.04.217.0.20+8-1~18.0417.0.20.1+1-1~18.0417.0.21.0.3+1-1~18.04.1	None known
`openjdk-8` Ubuntu:Pro:18.04:LTS	before 8u512-b09~us1-0ubuntu1~18.04.1, plus listed versions 8u144-b01-28u151-b12-18u162-b12-18u171-b11-0ubuntu0.18.04.18u181-b13-0ubuntu0.18.04.1 Show 32 moreShow less 8u181-b13-1ubuntu0.18.04.18u191-b12-0ubuntu0.18.04.18u191-b12-2ubuntu0.18.04.18u212-b03-0ubuntu1.18.04.18u222-b10-1ubuntu1~18.04.18u232-b09-0ubuntu1~18.04.18u242-b08-0ubuntu3~18.048u252-b09-1~18.048u265-b01-0ubuntu2~18.048u272-b10-0ubuntu1~18.048u275-b01-0ubuntu1~18.048u282-b08-0ubuntu1~18.048u292-b10-0ubuntu1~18.048u312-b07-0ubuntu1~18.048u342-b07-0ubuntu1~18.048u352-ga-1~18.048u362-ga-0ubuntu1~18.04.18u372-ga~us1-0ubuntu1~18.048u382-ga-1~18.04.18u392-ga-1~18.048u402-ga-2ubuntu1~18.048u412-ga-1~18.04.18u422-b05-1~18.048u432-ga~us1-0ubuntu2~18.048u442-b06~us1-0ubuntu1~18.048u452-ga~us1-0ubuntu1~18.048u462-ga~us1-0ubuntu2~18.04.28u472-ga-1~18.048u482-ga~us1-0ubuntu1~18.048u492-ga~us2-0ubuntu1~18.04.18u502-ga~us1-0ubuntu1~18.048u504-ga-1ubuntu1~18.04.3	8u512-b09~us1-0ubuntu1~18.04.1
`openjdk-lts` Ubuntu:Pro:20.04:LTS	before 11.0.33+9-1ubuntu1~20.04.1, plus listed versions 11.0.5+10-0ubuntu111.0.5+10-2ubuntu111.0.6+10-1ubuntu111.0.6+10-2ubuntu211.0.7+9-1ubuntu1 Show 30 moreShow less 11.0.7+10-2ubuntu111.0.7+10-3ubuntu111.0.8+10-0ubuntu1~20.0411.0.9+11-0ubuntu1~20.0411.0.9.1+1-0ubuntu1~20.0411.0.10+9-0ubuntu1~20.0411.0.11+9-0ubuntu2~20.0411.0.13+8-0ubuntu1~20.0411.0.14+9-0ubuntu2~20.0411.0.14.1+1-0ubuntu1~20.0411.0.15+10-0ubuntu0.20.04.111.0.16+8-0ubuntu1~20.0411.0.17+8-1ubuntu2~20.0411.0.18+10-0ubuntu1~20.04.111.0.19+7~us1-0ubuntu1~20.04.111.0.20+8-1ubuntu1~20.0411.0.20.1+1-0ubuntu1~20.0411.0.21+9-0ubuntu1~20.0411.0.22+7-0ubuntu2~20.04.111.0.23+9-1ubuntu1~20.04.211.0.24+8-1ubuntu3~20.0411.0.25+9-1ubuntu1~20.0411.0.26+4-1ubuntu1~20.0411.0.27+6~us1-0ubuntu1~20.0411.0.28+6-1ubuntu1~20.04.111.0.29+7-1ubuntu1~20.0411.0.30+7-1ubuntu1~20.0411.0.31+11-1ubuntu1~20.04.211.0.32+9-1ubuntu1~20.0411.0.32.1+1-1ubuntu1~20.04	11.0.33+9-1ubuntu1~20.04.1
`openjdk-13` Ubuntu:20.04:LTS	All versions, plus listed versions 13+33-113.0.1+9-213.0.2+8-113.0.2+8-213.0.3+3-1ubuntu213.0.4+8-1~20.0413.0.7+5-0ubuntu1~20.04	None known
`openjdk-16` Ubuntu:20.04:LTS	All versions, plus listed versions 16.0.1+9-1~20.04	None known
`openjdk-17` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 17+35-1~20.0417.0.1+12-1~20.0417.0.2+8-1~20.0417.0.3+7-0ubuntu0.20.04.117.0.4+8-1~20.04 Show 19 moreShow less 17.0.5+8-2ubuntu1~20.0417.0.6+10-0ubuntu1~20.04.117.0.7+7~us1-0ubuntu1~20.0417.0.8+7-1~20.04.217.0.8.1+1~us1-0ubuntu1~20.0417.0.9+9-1~20.0417.0.10+7-1~20.04.117.0.11+9-1~20.04.217.0.12+7-1ubuntu2~20.0417.0.13+11-2ubuntu1~20.0417.0.14+7-1~20.0417.0.15+6~us1-0ubuntu1~20.0417.0.16+8~us1-0ubuntu1~20.04.617.0.17+10-1~20.0417.0.18+8-1~20.0417.0.19+10-1~20.04.217.0.20+8-1~20.0417.0.20.1+1-1~20.0417.0.21.0.3+1-1~20.04.1	None known
`openjdk-21` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 21.0.1+12-2~20.04.121.0.2+13-1~20.04.121.0.3+9-1ubuntu1~20.04.121.0.4+7-1ubuntu2~20.0421.0.5+11-1ubuntu1~20.04 Show 9 moreShow less 21.0.6+7-1~20.04.121.0.7+6~us1-0ubuntu1~20.0421.0.8+9~us1-0ubuntu1~20.04.121.0.9+10-1~20.0421.0.10+7-1~20.0421.0.11+10-1~20.04.221.0.12+8-1~20.0421.0.12.1+1-1~20.04.421.0.13.0.3+1-1~20.04.1	None known
`openjdk-8` Ubuntu:Pro:20.04:LTS	before 8u512-b09~us1-0ubuntu1~20.04.1, plus listed versions 8u232-b09-0ubuntu18u232-b09-18u242-b04-18u242-b08-0ubuntu38u252-b07-1 Show 25 moreShow less 8u252-b09-1ubuntu18u265-b01-0ubuntu2~20.048u272-b10-0ubuntu1~20.048u275-b01-0ubuntu1~20.048u282-b08-0ubuntu1~20.048u292-b10-0ubuntu1~20.048u312-b07-0ubuntu1~20.048u342-b07-0ubuntu1~20.048u352-ga-1~20.048u362-ga-0ubuntu1~20.04.18u372-ga~us1-0ubuntu1~20.048u382-ga-1~20.04.18u392-ga-1~20.048u402-ga-2ubuntu1~20.048u412-ga-1~20.04.18u422-b05-1~20.048u432-ga~us1-0ubuntu2~20.048u442-b06~us1-0ubuntu1~20.048u452-ga~us1-0ubuntu1~20.048u462-ga~us1-0ubuntu2~20.04.28u472-ga-1~20.048u482-ga~us1-0ubuntu1~20.048u492-ga~us2-0ubuntu1~20.04.18u502-ga~us1-0ubuntu1~20.048u504-ga-1ubuntu1~20.04.3	8u512-b09~us1-0ubuntu1~20.04.1
`openjdk-17` Ubuntu:22.04:LTS	before 17.0.21.0.3+1-1~22.04.1, plus listed versions 17+35-117.0.1+12-117.0.2+8-117.0.3+7-0ubuntu0.22.04.117.0.4+8-1~22.04 Show 18 moreShow less 17.0.5+8-2ubuntu1~22.0417.0.6+10-0ubuntu1~22.0417.0.7+7~us1-0ubuntu1~22.04.217.0.8+7-1~22.0417.0.8.1+1~us1-0ubuntu1~22.0417.0.9+9-1~22.0417.0.10+7-1~22.04.117.0.11+9-1~22.04.117.0.12+7-1ubuntu2~22.0417.0.13+11-2ubuntu1~22.0417.0.14+7-1~22.04.117.0.15+6~us1-0ubuntu1~22.0417.0.16+8~us1-0ubuntu1~22.04.117.0.17+10-1~22.0417.0.18+8-1~22.04.117.0.19+10-1~22.04.217.0.20+8-1~22.0417.0.20.1+1-1~22.04	17.0.21.0.3+1-1~22.04.1
`openjdk-18` Ubuntu:22.04:LTS	All versions, plus listed versions 18~15ea-418~20ea-118~32ea-118~36ea-118.0.2+9-2~22.04	None known
`openjdk-21` Ubuntu:22.04:LTS	before 21.0.13.0.3+1-1~22.04.1, plus listed versions 21.0.1+12-2~22.0421.0.2+13-1~22.04.121.0.3+9-1ubuntu1~22.04.121.0.4+7-1ubuntu2~22.0421.0.5+11-1ubuntu1~22.04 Show 8 moreShow less 21.0.6+7-1~22.04.121.0.7+6~us1-0ubuntu1~22.0421.0.8+9~us1-0ubuntu1~22.04.121.0.9+10-1~22.0421.0.10+7-1~22.0421.0.11+10-1~22.04.221.0.12+8-1~22.0421.0.12.1+1-1~22.04.4	21.0.13.0.3+1-1~22.04.1
`openjdk-25` Ubuntu:22.04:LTS	before 25.0.5.0.3+1-1~22.04.1, plus listed versions 25+36-1~22.04.225.0.1+8-1~22.0425.0.2+10-1~22.0425.0.3+9-2~22.04.225.0.4+7-1~22.0425.0.4.1+1-1~22.04.4	25.0.5.0.3+1-1~22.04.1
`openjdk-8` Ubuntu:22.04:LTS	before 8u512-b09~us1-0ubuntu1~22.04.1, plus listed versions 8u302-b08-0ubuntu28u312-b07-0ubuntu18u342-b07-0ubuntu1~22.048u352-ga-1~22.048u362-ga-0ubuntu1~22.04 Show 15 moreShow less 8u372-ga~us1-0ubuntu1~22.048u382-ga-1~22.04.18u392-ga-1~22.048u402-ga-2ubuntu1~22.048u412-ga-1~22.04.18u422-b05-1~22.048u432-ga~us1-0ubuntu2~22.048u442-b06~us1-0ubuntu1~22.048u452-ga~us1-0ubuntu1~22.048u462-ga~us1-0ubuntu2~22.04.28u472-ga-1~22.048u482-ga~us1-0ubuntu1~22.048u492-ga~us2-0ubuntu1~22.04.18u502-ga~us1-0ubuntu1~22.048u504-ga-1ubuntu1~22.04.3	8u512-b09~us1-0ubuntu1~22.04.1
`openjdk-lts` Ubuntu:22.04:LTS	before 11.0.33+9-1ubuntu1~22.04.1, plus listed versions 11.0.12+7-0ubuntu311.0.13+8-0ubuntu111.0.14+9-0ubuntu211.0.14.1+1-0ubuntu111.0.15+10-0ubuntu0.22.04.1 Show 19 moreShow less 11.0.16+8-0ubuntu1~22.0411.0.17+8-1ubuntu2~22.0411.0.18+10-0ubuntu1~22.0411.0.19+7~us1-0ubuntu1~22.04.111.0.20+8-1ubuntu1~22.0411.0.20.1+1-0ubuntu1~22.0411.0.21+9-0ubuntu1~22.0411.0.22+7-0ubuntu2~22.04.111.0.23+9-1ubuntu1~22.04.111.0.24+8-1ubuntu3~22.0411.0.25+9-1ubuntu1~22.0411.0.26+4-1ubuntu1~22.0411.0.27+6~us1-0ubuntu1~22.0411.0.28+6-1ubuntu1~22.04.111.0.29+7-1ubuntu1~22.0411.0.30+7-1ubuntu1~22.0411.0.31+11-1ubuntu1~22.04.211.0.32+9-1ubuntu1~22.0411.0.32.1+1-1ubuntu1~22.04	11.0.33+9-1ubuntu1~22.04.1
`openjdk-17` Ubuntu:24.04:LTS	before 17.0.21.0.3+1-1~24.04.1, plus listed versions 17.0.9~6ea-117.0.9+9-117.0.9+9-217.0.10~6ea-117.0.10+7-1 Show 13 moreShow less 17.0.11~7ea-117.0.11~7ea-1build117.0.11+9-117.0.12+7-1ubuntu2~24.0417.0.13+11-2ubuntu1~24.0417.0.14+7-1~24.0417.0.15+6~us1-0ubuntu1~24.0417.0.16+8~us1-0ubuntu1~24.04.117.0.17+10-1~24.0417.0.18+8-1~24.04.117.0.19+10-1~24.04.217.0.20+8-1~24.0417.0.20.1+1-1~24.04	17.0.21.0.3+1-1~24.04.1
`openjdk-21` Ubuntu:24.04:LTS	before 21.0.13.0.3+1-1~24.04.1, plus listed versions 21+35-121.0.1+12-221.0.1+12-321.0.2+13-121.0.2+13-2 Show 15 moreShow less 21.0.3~7ea-121.0.3~7ea-1build121.0.3~7ea-1build221.0.3+9-121.0.3+9-1ubuntu121.0.4+7-1ubuntu2~24.0421.0.5+11-1ubuntu1~24.0421.0.6+7-1~24.04.121.0.7+6~us1-0ubuntu1~24.0421.0.8+9~us1-0ubuntu1~24.04.121.0.9+10-1~24.0421.0.10+7-1~24.0421.0.11+10-1~24.04.221.0.12+8-1~24.0421.0.12.1+1-1~24.04.4	21.0.13.0.3+1-1~24.04.1
`openjdk-25` Ubuntu:24.04:LTS	before 25.0.5.0.3+1-1~24.04.1, plus listed versions 25+36-1~24.04.225.0.1+8-1~24.0425.0.2+10-1~24.0425.0.3+9-2~24.04.225.0.4+7-1~24.0425.0.4.1+1-1~24.04.4	25.0.5.0.3+1-1~24.04.1
`openjdk-8` Ubuntu:24.04:LTS	before 8u512-b09~us1-0ubuntu1~24.04.1, plus listed versions 8u382-ga-1ubuntu18u392-ga-18u402-ga-18u402-ga-28u402-ga-2ubuntu1 Show 14 moreShow less 8u402-ga-2ubuntu68u402-ga-2ubuntu78u402-ga-8build18u412-ga-1~24.04.28u422-b05-1~24.048u432-ga~us1-0ubuntu2~24.048u442-b06~us1-0ubuntu1~24.048u452-ga~us1-0ubuntu1~24.048u462-ga~us1-0ubuntu2~24.04.28u472-ga-1~24.048u482-ga~us1-0ubuntu1~24.048u492-ga~us2-0ubuntu1~24.04.18u502-ga~us1-0ubuntu1~24.048u504-ga-1ubuntu1~24.04.3	8u512-b09~us1-0ubuntu1~24.04.1
`openjdk-lts` Ubuntu:24.04:LTS	before 11.0.33+9-1ubuntu1~24.04.1, plus listed versions 11.0.20+8-1ubuntu111.0.21+9-0ubuntu111.0.22+7-0ubuntu211.0.23~7ea-1ubuntu111.0.23~7ea-1ubuntu2 Show 11 moreShow less 11.0.23+9-1ubuntu111.0.24+8-1ubuntu3~24.04.111.0.25+9-1ubuntu1~24.0411.0.26+4-1ubuntu1~24.0411.0.27+6~us1-0ubuntu1~24.0411.0.28+6-1ubuntu1~24.04.111.0.29+7-1ubuntu1~24.0411.0.30+7-1ubuntu1~24.0411.0.31+11-1ubuntu1~24.04.211.0.32+9-1ubuntu1~24.0411.0.32.1+1-1ubuntu1~24.04	11.0.33+9-1ubuntu1~24.04.1
`openjdk-17` Ubuntu:26.10	before 17.0.21.0.3+1-1~26.10.1, plus listed versions 17.0.18+8-117.0.19+10-117.0.20~5ea-117.0.20+8-117.0.20.1+1-117.0.21~6ea-1	17.0.21.0.3+1-1~26.10.1
`openjdk-17-crac` Ubuntu:26.10	All versions, plus listed versions 17.0.18+8-0ubuntu117.0.19+10-0ubuntu117.0.20+8-0ubuntu1	None known
`openjdk-21` Ubuntu:26.10	before 21.0.13.0.3+1-1~26.10.1, plus listed versions 21.0.11~8ea-121.0.11+10-121.0.12~5ea-121.0.12+8-121.0.12.1+1-1	21.0.13.0.3+1-1~26.10.1
`openjdk-21-crac` Ubuntu:26.10	All versions, plus listed versions 21.0.10+7-0ubuntu121.0.11+10-0ubuntu121.0.12+8-0ubuntu1	None known
`openjdk-25` Ubuntu:26.10	before 25.0.5.0.3+1-1~26.10.1, plus listed versions 25.0.3~7ea-225.0.3+9-225.0.4~4ea-125.0.4+7-125.0.4.1+1-1	25.0.5.0.3+1-1~26.10.1
`openjdk-27` Ubuntu:26.10	before 27.0.1.0.3+1-1~26.10.1, plus listed versions 27~19ea-127~34ea-127+35-1	27.0.1.0.3+1-1~26.10.1
`openjdk-8` Ubuntu:26.10	before 8u512-b09~us1-0ubuntu1~26.10.1, plus listed versions 8u482-ga~us1-0ubuntu18u492-ga~us2-0ubuntu28u502-ga~us1-0ubuntu18u504-ga-1ubuntu1	8u512-b09~us1-0ubuntu1~26.10.1
`openjdk-lts` Ubuntu:26.10	before 11.0.33+9-1ubuntu1~26.10.1, plus listed versions 11.0.30+7-1ubuntu111.0.31+11-1ubuntu211.0.32+9-1ubuntu111.0.32.1+1-1ubuntu111.0.32.1+1-1ubuntu2	11.0.33+9-1ubuntu1~26.10.1
`openjdk-17` Ubuntu:26.04:LTS	before 17.0.21.0.3+1-1~26.04.1, plus listed versions 17.0.17~8ea-117.0.17+10-117.0.18~7ea-117.0.18+8-117.0.19+10-1~26.04.217.0.20+8-1~26.0417.0.20.1+1-1~26.04	17.0.21.0.3+1-1~26.04.1
`openjdk-17-crac` Ubuntu:26.04:LTS	All versions, plus listed versions 17.0.16+8-0ubuntu117.0.17+10-0ubuntu117.0.18+8-0ubuntu117.0.19+10-0ubuntu1~26.04.117.0.20+8-0ubuntu1~26.04	None known
`openjdk-21` Ubuntu:26.04:LTS	before 21.0.13.0.3+1-1~26.04.1, plus listed versions 21.0.9~8ea-121.0.9+10-121.0.10~4ea-121.0.10~6ea-121.0.10+7-1 Show 5 moreShow less 21.0.11~5ea-121.0.11~8ea-121.0.11+10-1~26.04.221.0.12+8-1~26.0421.0.12.1+1-1~26.04.4	21.0.13.0.3+1-1~26.04.1
`openjdk-21-crac` Ubuntu:26.04:LTS	All versions, plus listed versions 21.0.8+9-0ubuntu121.0.9+10-0ubuntu121.0.10+7-0ubuntu121.0.11+10-0ubuntu1~26.04.121.0.12+8-0ubuntu1~26.04	None known
`openjdk-25` Ubuntu:26.04:LTS	before 25.0.5.0.3+1-1~26.04.1, plus listed versions 25+36-125.0.1+8-125.0.1+8-225.0.1+8-325.0.2+10-1 Show 5 moreShow less 25.0.3~5ea-225.0.3~7ea-225.0.3+9-2~26.04.225.0.4+7-1~26.0425.0.4.1+1-1~26.04.4	25.0.5.0.3+1-1~26.04.1
`openjdk-8` Ubuntu:26.04:LTS	before 8u512-b09~us1-0ubuntu1~26.04.1, plus listed versions 8u462-ga-18u472-ga~us1-0ubuntu18u472-ga-18u482-ga~us1-0ubuntu18u492-ga~us2-0ubuntu1~26.04.18u502-ga~us1-0ubuntu1~26.048u504-ga-1ubuntu1~26.04.3	8u512-b09~us1-0ubuntu1~26.04.1
`openjdk-lts` Ubuntu:26.04:LTS	before 11.0.33+9-1ubuntu1~26.04.1, plus listed versions 11.0.28+6-1ubuntu111.0.29+7-1ubuntu111.0.30+7-1ubuntu111.0.31+11-1ubuntu1~26.04.211.0.32+9-1ubuntu1~26.0411.0.32.1+1-1ubuntu1~26.04	11.0.33+9-1ubuntu1~26.04.1
`openjdk-25` Ubuntu:22.04:LTS From an advisory covering 41 CVEs	before 25.0.5.0.3+1-1~22.04.1, plus listed versions 25+36-1~22.04.225.0.1+8-1~22.0425.0.2+10-1~22.0425.0.3+9-2~22.04.225.0.4+7-1~22.0425.0.4.1+1-1~22.04.4	25.0.5.0.3+1-1~22.04.1
`openjdk-25` Ubuntu:24.04:LTS From an advisory covering 41 CVEs	before 25.0.5.0.3+1-1~24.04.1, plus listed versions 25+36-1~24.04.225.0.1+8-1~24.0425.0.2+10-1~24.0425.0.3+9-2~24.04.225.0.4+7-1~24.0425.0.4.1+1-1~24.04.4	25.0.5.0.3+1-1~24.04.1
`openjdk-25` Ubuntu:26.10 From an advisory covering 41 CVEs	before 25.0.5.0.3+1-1~26.10.1, plus listed versions 25.0.3~7ea-225.0.3+9-225.0.4~4ea-125.0.4+7-125.0.4.1+1-1	25.0.5.0.3+1-1~26.10.1
`openjdk-25` Ubuntu:26.04:LTS From an advisory covering 41 CVEs	before 25.0.5.0.3+1-1~26.04.1, plus listed versions 25+36-125.0.1+8-125.0.1+8-225.0.1+8-325.0.2+10-1 Show 5 moreShow less 25.0.3~5ea-225.0.3~7ea-225.0.3+9-2~26.04.225.0.4+7-1~26.0425.0.4.1+1-1~26.04.4	25.0.5.0.3+1-1~26.04.1
`openjdk-27` Ubuntu:26.10 From an advisory covering 40 CVEs	before 27.0.1.0.3+1-1~26.10.1, plus listed versions 27~19ea-127~34ea-127+35-1	27.0.1.0.3+1-1~26.10.1
`openjdk-8` Ubuntu:Pro:16.04:LTS From an advisory covering 37 CVEs	before 8u512-b09~us1-0ubuntu1~16.04.1, plus listed versions 8u66-b01-58u72-b05-1ubuntu18u72-b05-58u72-b05-68u72-b15-1 Show 45 moreShow less 8u72-b15-2ubuntu18u72-b15-2ubuntu38u72-b15-3ubuntu18u77-b03-1ubuntu28u77-b03-3ubuntu18u77-b03-3ubuntu28u77-b03-3ubuntu38u91-b14-0ubuntu4~16.04.18u91-b14-3ubuntu1~16.04.18u111-b14-2ubuntu0.16.04.28u121-b13-0ubuntu1.16.04.28u131-b11-0ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.38u151-b12-0ubuntu0.16.04.28u162-b12-0ubuntu0.16.04.28u171-b11-0ubuntu0.16.04.18u181-b13-0ubuntu0.16.04.18u181-b13-1ubuntu0.16.04.18u191-b12-0ubuntu0.16.04.18u191-b12-2ubuntu0.16.04.18u212-b03-0ubuntu1.16.04.18u222-b10-1ubuntu1~16.04.18u232-b09-0ubuntu1~16.04.18u242-b08-0ubuntu3~16.048u252-b09-1~16.048u265-b01-0ubuntu2~16.048u272-b10-0ubuntu1~16.048u275-b01-0ubuntu1~16.048u282-b08-0ubuntu1~16.048u292-b10-0ubuntu1~16.04.18u312-b07-0ubuntu1~16.048u342-b07-0ubuntu1~16.048u352-ga-1~16.048u362-ga-0ubuntu1~16.04.18u372-ga~us1-0ubuntu1~16.048u382-ga-1~16.04.18u392-ga-1~16.048u432-ga~us1-0ubuntu2~16.04.48u442-b06~us1-0ubuntu1~16.048u452-ga~us1-0ubuntu1~16.04.18u462-ga~us1-0ubuntu2~16.04.28u472-ga-1~16.048u482-ga~us1-0ubuntu1~16.048u492-ga~us2-0ubuntu1~16.04.1	8u512-b09~us1-0ubuntu1~16.04.1
`openjdk-8` Ubuntu:Pro:18.04:LTS From an advisory covering 37 CVEs	before 8u512-b09~us1-0ubuntu1~18.04.1, plus listed versions 8u144-b01-28u151-b12-18u162-b12-18u171-b11-0ubuntu0.18.04.18u181-b13-0ubuntu0.18.04.1 Show 32 moreShow less 8u181-b13-1ubuntu0.18.04.18u191-b12-0ubuntu0.18.04.18u191-b12-2ubuntu0.18.04.18u212-b03-0ubuntu1.18.04.18u222-b10-1ubuntu1~18.04.18u232-b09-0ubuntu1~18.04.18u242-b08-0ubuntu3~18.048u252-b09-1~18.048u265-b01-0ubuntu2~18.048u272-b10-0ubuntu1~18.048u275-b01-0ubuntu1~18.048u282-b08-0ubuntu1~18.048u292-b10-0ubuntu1~18.048u312-b07-0ubuntu1~18.048u342-b07-0ubuntu1~18.048u352-ga-1~18.048u362-ga-0ubuntu1~18.04.18u372-ga~us1-0ubuntu1~18.048u382-ga-1~18.04.18u392-ga-1~18.048u402-ga-2ubuntu1~18.048u412-ga-1~18.04.18u422-b05-1~18.048u432-ga~us1-0ubuntu2~18.048u442-b06~us1-0ubuntu1~18.048u452-ga~us1-0ubuntu1~18.048u462-ga~us1-0ubuntu2~18.04.28u472-ga-1~18.048u482-ga~us1-0ubuntu1~18.048u492-ga~us2-0ubuntu1~18.04.18u502-ga~us1-0ubuntu1~18.048u504-ga-1ubuntu1~18.04.3	8u512-b09~us1-0ubuntu1~18.04.1
`openjdk-8` Ubuntu:Pro:20.04:LTS From an advisory covering 37 CVEs	before 8u512-b09~us1-0ubuntu1~20.04.1, plus listed versions 8u232-b09-0ubuntu18u232-b09-18u242-b04-18u242-b08-0ubuntu38u252-b07-1 Show 25 moreShow less 8u252-b09-1ubuntu18u265-b01-0ubuntu2~20.048u272-b10-0ubuntu1~20.048u275-b01-0ubuntu1~20.048u282-b08-0ubuntu1~20.048u292-b10-0ubuntu1~20.048u312-b07-0ubuntu1~20.048u342-b07-0ubuntu1~20.048u352-ga-1~20.048u362-ga-0ubuntu1~20.04.18u372-ga~us1-0ubuntu1~20.048u382-ga-1~20.04.18u392-ga-1~20.048u402-ga-2ubuntu1~20.048u412-ga-1~20.04.18u422-b05-1~20.048u432-ga~us1-0ubuntu2~20.048u442-b06~us1-0ubuntu1~20.048u452-ga~us1-0ubuntu1~20.048u462-ga~us1-0ubuntu2~20.04.28u472-ga-1~20.048u482-ga~us1-0ubuntu1~20.048u492-ga~us2-0ubuntu1~20.04.18u502-ga~us1-0ubuntu1~20.048u504-ga-1ubuntu1~20.04.3	8u512-b09~us1-0ubuntu1~20.04.1
`openjdk-8` Ubuntu:22.04:LTS From an advisory covering 37 CVEs	before 8u512-b09~us1-0ubuntu1~22.04.1, plus listed versions 8u302-b08-0ubuntu28u312-b07-0ubuntu18u342-b07-0ubuntu1~22.048u352-ga-1~22.048u362-ga-0ubuntu1~22.04 Show 15 moreShow less 8u372-ga~us1-0ubuntu1~22.048u382-ga-1~22.04.18u392-ga-1~22.048u402-ga-2ubuntu1~22.048u412-ga-1~22.04.18u422-b05-1~22.048u432-ga~us1-0ubuntu2~22.048u442-b06~us1-0ubuntu1~22.048u452-ga~us1-0ubuntu1~22.048u462-ga~us1-0ubuntu2~22.04.28u472-ga-1~22.048u482-ga~us1-0ubuntu1~22.048u492-ga~us2-0ubuntu1~22.04.18u502-ga~us1-0ubuntu1~22.048u504-ga-1ubuntu1~22.04.3	8u512-b09~us1-0ubuntu1~22.04.1
`openjdk-8` Ubuntu:24.04:LTS From an advisory covering 37 CVEs	before 8u512-b09~us1-0ubuntu1~24.04.1, plus listed versions 8u382-ga-1ubuntu18u392-ga-18u402-ga-18u402-ga-28u402-ga-2ubuntu1 Show 14 moreShow less 8u402-ga-2ubuntu68u402-ga-2ubuntu78u402-ga-8build18u412-ga-1~24.04.28u422-b05-1~24.048u432-ga~us1-0ubuntu2~24.048u442-b06~us1-0ubuntu1~24.048u452-ga~us1-0ubuntu1~24.048u462-ga~us1-0ubuntu2~24.04.28u472-ga-1~24.048u482-ga~us1-0ubuntu1~24.048u492-ga~us2-0ubuntu1~24.04.18u502-ga~us1-0ubuntu1~24.048u504-ga-1ubuntu1~24.04.3	8u512-b09~us1-0ubuntu1~24.04.1
`openjdk-8` Ubuntu:26.10 From an advisory covering 37 CVEs	before 8u512-b09~us1-0ubuntu1~26.10.1, plus listed versions 8u482-ga~us1-0ubuntu18u492-ga~us2-0ubuntu28u502-ga~us1-0ubuntu18u504-ga-1ubuntu1	8u512-b09~us1-0ubuntu1~26.10.1
`openjdk-8` Ubuntu:26.04:LTS From an advisory covering 37 CVEs	before 8u512-b09~us1-0ubuntu1~26.04.1, plus listed versions 8u462-ga-18u472-ga~us1-0ubuntu18u472-ga-18u482-ga~us1-0ubuntu18u492-ga~us2-0ubuntu1~26.04.18u502-ga~us1-0ubuntu1~26.048u504-ga-1ubuntu1~26.04.3	8u512-b09~us1-0ubuntu1~26.04.1
`openjdk-lts` Ubuntu:Pro:18.04:LTS From an advisory covering 39 CVEs	before 11.0.33+9-1ubuntu1~18.04.1, plus listed versions 9.0.4+12-2ubuntu49.0.4+12-4ubuntu110~46-4ubuntu110~46-5ubuntu110.0.1+10-1ubuntu2 Show 38 moreShow less 10.0.1+10-3ubuntu110.0.2+13-1ubuntu0.18.04.110.0.2+13-1ubuntu0.18.04.210.0.2+13-1ubuntu0.18.04.310.0.2+13-1ubuntu0.18.04.411.0.2+9-3ubuntu1~18.04.311.0.3+7-1ubuntu2~18.04.111.0.4+11-1ubuntu2~18.04.311.0.5+10-0ubuntu1.1~18.0411.0.6+10-1ubuntu1~18.04.111.0.7+10-2ubuntu2~18.0411.0.8+10-0ubuntu1~18.04.111.0.9+11-0ubuntu1~18.04.111.0.9.1+1-0ubuntu1~18.0411.0.10+9-0ubuntu1~18.0411.0.11+9-0ubuntu2~18.0411.0.13+8-0ubuntu1~18.0411.0.14+9-0ubuntu2~18.0411.0.14.1+1-0ubuntu1~18.0411.0.15+10-0ubuntu0.18.04.111.0.16+8-0ubuntu1~18.0411.0.17+8-1ubuntu2~18.0411.0.18+10-0ubuntu1~18.04.111.0.19+7~us1-0ubuntu1~18.04.111.0.20+8-1ubuntu1~18.0411.0.20.1+1-0ubuntu1~18.0411.0.21+9-0ubuntu1~18.0411.0.22+7-0ubuntu2~18.04.111.0.23+9-1ubuntu1~18.04.111.0.25+9-1ubuntu1~18.0411.0.26+4-1ubuntu1~18.0411.0.27+6~us1-0ubuntu1~18.0411.0.28+6-1ubuntu1~18.04.111.0.29+7-1ubuntu1~18.0411.0.30+7-1ubuntu1~18.0411.0.31+11-1ubuntu1~18.04.211.0.32+9-1ubuntu1~18.0411.0.32.1+1-1ubuntu1~18.04	11.0.33+9-1ubuntu1~18.04.1
`openjdk-lts` Ubuntu:Pro:20.04:LTS From an advisory covering 39 CVEs	before 11.0.33+9-1ubuntu1~20.04.1, plus listed versions 11.0.5+10-0ubuntu111.0.5+10-2ubuntu111.0.6+10-1ubuntu111.0.6+10-2ubuntu211.0.7+9-1ubuntu1 Show 30 moreShow less 11.0.7+10-2ubuntu111.0.7+10-3ubuntu111.0.8+10-0ubuntu1~20.0411.0.9+11-0ubuntu1~20.0411.0.9.1+1-0ubuntu1~20.0411.0.10+9-0ubuntu1~20.0411.0.11+9-0ubuntu2~20.0411.0.13+8-0ubuntu1~20.0411.0.14+9-0ubuntu2~20.0411.0.14.1+1-0ubuntu1~20.0411.0.15+10-0ubuntu0.20.04.111.0.16+8-0ubuntu1~20.0411.0.17+8-1ubuntu2~20.0411.0.18+10-0ubuntu1~20.04.111.0.19+7~us1-0ubuntu1~20.04.111.0.20+8-1ubuntu1~20.0411.0.20.1+1-0ubuntu1~20.0411.0.21+9-0ubuntu1~20.0411.0.22+7-0ubuntu2~20.04.111.0.23+9-1ubuntu1~20.04.211.0.24+8-1ubuntu3~20.0411.0.25+9-1ubuntu1~20.0411.0.26+4-1ubuntu1~20.0411.0.27+6~us1-0ubuntu1~20.0411.0.28+6-1ubuntu1~20.04.111.0.29+7-1ubuntu1~20.0411.0.30+7-1ubuntu1~20.0411.0.31+11-1ubuntu1~20.04.211.0.32+9-1ubuntu1~20.0411.0.32.1+1-1ubuntu1~20.04	11.0.33+9-1ubuntu1~20.04.1
`openjdk-lts` Ubuntu:22.04:LTS From an advisory covering 39 CVEs	before 11.0.33+9-1ubuntu1~22.04.1, plus listed versions 11.0.12+7-0ubuntu311.0.13+8-0ubuntu111.0.14+9-0ubuntu211.0.14.1+1-0ubuntu111.0.15+10-0ubuntu0.22.04.1 Show 19 moreShow less 11.0.16+8-0ubuntu1~22.0411.0.17+8-1ubuntu2~22.0411.0.18+10-0ubuntu1~22.0411.0.19+7~us1-0ubuntu1~22.04.111.0.20+8-1ubuntu1~22.0411.0.20.1+1-0ubuntu1~22.0411.0.21+9-0ubuntu1~22.0411.0.22+7-0ubuntu2~22.04.111.0.23+9-1ubuntu1~22.04.111.0.24+8-1ubuntu3~22.0411.0.25+9-1ubuntu1~22.0411.0.26+4-1ubuntu1~22.0411.0.27+6~us1-0ubuntu1~22.0411.0.28+6-1ubuntu1~22.04.111.0.29+7-1ubuntu1~22.0411.0.30+7-1ubuntu1~22.0411.0.31+11-1ubuntu1~22.04.211.0.32+9-1ubuntu1~22.0411.0.32.1+1-1ubuntu1~22.04	11.0.33+9-1ubuntu1~22.04.1
`openjdk-lts` Ubuntu:24.04:LTS From an advisory covering 39 CVEs	before 11.0.33+9-1ubuntu1~24.04.1, plus listed versions 11.0.20+8-1ubuntu111.0.21+9-0ubuntu111.0.22+7-0ubuntu211.0.23~7ea-1ubuntu111.0.23~7ea-1ubuntu2 Show 11 moreShow less 11.0.23+9-1ubuntu111.0.24+8-1ubuntu3~24.04.111.0.25+9-1ubuntu1~24.0411.0.26+4-1ubuntu1~24.0411.0.27+6~us1-0ubuntu1~24.0411.0.28+6-1ubuntu1~24.04.111.0.29+7-1ubuntu1~24.0411.0.30+7-1ubuntu1~24.0411.0.31+11-1ubuntu1~24.04.211.0.32+9-1ubuntu1~24.0411.0.32.1+1-1ubuntu1~24.04	11.0.33+9-1ubuntu1~24.04.1
`openjdk-lts` Ubuntu:26.10 From an advisory covering 39 CVEs	before 11.0.33+9-1ubuntu1~26.10.1, plus listed versions 11.0.30+7-1ubuntu111.0.31+11-1ubuntu211.0.32+9-1ubuntu111.0.32.1+1-1ubuntu111.0.32.1+1-1ubuntu2	11.0.33+9-1ubuntu1~26.10.1
`openjdk-lts` Ubuntu:26.04:LTS From an advisory covering 39 CVEs	before 11.0.33+9-1ubuntu1~26.04.1, plus listed versions 11.0.28+6-1ubuntu111.0.29+7-1ubuntu111.0.30+7-1ubuntu111.0.31+11-1ubuntu1~26.04.211.0.32+9-1ubuntu1~26.0411.0.32.1+1-1ubuntu1~26.04	11.0.33+9-1ubuntu1~26.04.1
`openjdk-17` Ubuntu:Pro:18.04:LTS From an advisory covering 37 CVEs	before 17.0.21.0.3+1-1~18.04.1, plus listed versions 17+35-1~18.0417.0.1+12-1~18.0417.0.2+8-1~18.0417.0.3+7-0ubuntu0.18.04.117.0.4+8-1~18.04 Show 17 moreShow less 17.0.5+8-2ubuntu1~18.0417.0.6+10-0ubuntu1~18.04.117.0.7+7~us1-0ubuntu1~18.0417.0.8+7-1~18.0417.0.8.1+1~us1-0ubuntu1~18.0417.0.9+9-1~18.0417.0.10+7-1~18.04.117.0.11+9-1~18.04.117.0.13+11-2ubuntu1~18.04.217.0.14+7-1~18.0417.0.15+6~us1-0ubuntu1~18.0417.0.16+8~us1-0ubuntu1~18.04.117.0.17+10-1~18.0417.0.18+8-1~18.0417.0.19+10-1~18.04.217.0.20+8-1~18.0417.0.20.1+1-1~18.04	17.0.21.0.3+1-1~18.04.1
`openjdk-17` Ubuntu:Pro:20.04:LTS From an advisory covering 37 CVEs	before 17.0.21.0.3+1-1~20.04.1, plus listed versions 17+35-1~20.0417.0.1+12-1~20.0417.0.2+8-1~20.0417.0.3+7-0ubuntu0.20.04.117.0.4+8-1~20.04 Show 18 moreShow less 17.0.5+8-2ubuntu1~20.0417.0.6+10-0ubuntu1~20.04.117.0.7+7~us1-0ubuntu1~20.0417.0.8+7-1~20.04.217.0.8.1+1~us1-0ubuntu1~20.0417.0.9+9-1~20.0417.0.10+7-1~20.04.117.0.11+9-1~20.04.217.0.12+7-1ubuntu2~20.0417.0.13+11-2ubuntu1~20.0417.0.14+7-1~20.0417.0.15+6~us1-0ubuntu1~20.0417.0.16+8~us1-0ubuntu1~20.04.617.0.17+10-1~20.0417.0.18+8-1~20.0417.0.19+10-1~20.04.217.0.20+8-1~20.0417.0.20.1+1-1~20.04	17.0.21.0.3+1-1~20.04.1
`openjdk-17` Ubuntu:22.04:LTS From an advisory covering 37 CVEs	before 17.0.21.0.3+1-1~22.04.1, plus listed versions 17+35-117.0.1+12-117.0.2+8-117.0.3+7-0ubuntu0.22.04.117.0.4+8-1~22.04 Show 18 moreShow less 17.0.5+8-2ubuntu1~22.0417.0.6+10-0ubuntu1~22.0417.0.7+7~us1-0ubuntu1~22.04.217.0.8+7-1~22.0417.0.8.1+1~us1-0ubuntu1~22.0417.0.9+9-1~22.0417.0.10+7-1~22.04.117.0.11+9-1~22.04.117.0.12+7-1ubuntu2~22.0417.0.13+11-2ubuntu1~22.0417.0.14+7-1~22.04.117.0.15+6~us1-0ubuntu1~22.0417.0.16+8~us1-0ubuntu1~22.04.117.0.17+10-1~22.0417.0.18+8-1~22.04.117.0.19+10-1~22.04.217.0.20+8-1~22.0417.0.20.1+1-1~22.04	17.0.21.0.3+1-1~22.04.1
`openjdk-17` Ubuntu:24.04:LTS From an advisory covering 37 CVEs	before 17.0.21.0.3+1-1~24.04.1, plus listed versions 17.0.9~6ea-117.0.9+9-117.0.9+9-217.0.10~6ea-117.0.10+7-1 Show 13 moreShow less 17.0.11~7ea-117.0.11~7ea-1build117.0.11+9-117.0.12+7-1ubuntu2~24.0417.0.13+11-2ubuntu1~24.0417.0.14+7-1~24.0417.0.15+6~us1-0ubuntu1~24.0417.0.16+8~us1-0ubuntu1~24.04.117.0.17+10-1~24.0417.0.18+8-1~24.04.117.0.19+10-1~24.04.217.0.20+8-1~24.0417.0.20.1+1-1~24.04	17.0.21.0.3+1-1~24.04.1
`openjdk-17` Ubuntu:26.10 From an advisory covering 37 CVEs	before 17.0.21.0.3+1-1~26.10.1, plus listed versions 17.0.18+8-117.0.19+10-117.0.20~5ea-117.0.20+8-117.0.20.1+1-117.0.21~6ea-1	17.0.21.0.3+1-1~26.10.1
`openjdk-17` Ubuntu:26.04:LTS From an advisory covering 37 CVEs	before 17.0.21.0.3+1-1~26.04.1, plus listed versions 17.0.17~8ea-117.0.17+10-117.0.18~7ea-117.0.18+8-117.0.19+10-1~26.04.217.0.20+8-1~26.0417.0.20.1+1-1~26.04	17.0.21.0.3+1-1~26.04.1
`openjdk-21` Ubuntu:Pro:20.04:LTS From an advisory covering 39 CVEs	before 21.0.13.0.3+1-1~20.04.1, plus listed versions 21.0.1+12-2~20.04.121.0.2+13-1~20.04.121.0.3+9-1ubuntu1~20.04.121.0.4+7-1ubuntu2~20.0421.0.5+11-1ubuntu1~20.04 Show 8 moreShow less 21.0.6+7-1~20.04.121.0.7+6~us1-0ubuntu1~20.0421.0.8+9~us1-0ubuntu1~20.04.121.0.9+10-1~20.0421.0.10+7-1~20.0421.0.11+10-1~20.04.221.0.12+8-1~20.0421.0.12.1+1-1~20.04.4	21.0.13.0.3+1-1~20.04.1
`openjdk-21` Ubuntu:22.04:LTS From an advisory covering 39 CVEs	before 21.0.13.0.3+1-1~22.04.1, plus listed versions 21.0.1+12-2~22.0421.0.2+13-1~22.04.121.0.3+9-1ubuntu1~22.04.121.0.4+7-1ubuntu2~22.0421.0.5+11-1ubuntu1~22.04 Show 8 moreShow less 21.0.6+7-1~22.04.121.0.7+6~us1-0ubuntu1~22.0421.0.8+9~us1-0ubuntu1~22.04.121.0.9+10-1~22.0421.0.10+7-1~22.0421.0.11+10-1~22.04.221.0.12+8-1~22.0421.0.12.1+1-1~22.04.4	21.0.13.0.3+1-1~22.04.1
`openjdk-21` Ubuntu:24.04:LTS From an advisory covering 39 CVEs	before 21.0.13.0.3+1-1~24.04.1, plus listed versions 21+35-121.0.1+12-221.0.1+12-321.0.2+13-121.0.2+13-2 Show 15 moreShow less 21.0.3~7ea-121.0.3~7ea-1build121.0.3~7ea-1build221.0.3+9-121.0.3+9-1ubuntu121.0.4+7-1ubuntu2~24.0421.0.5+11-1ubuntu1~24.0421.0.6+7-1~24.04.121.0.7+6~us1-0ubuntu1~24.0421.0.8+9~us1-0ubuntu1~24.04.121.0.9+10-1~24.0421.0.10+7-1~24.0421.0.11+10-1~24.04.221.0.12+8-1~24.0421.0.12.1+1-1~24.04.4	21.0.13.0.3+1-1~24.04.1
`openjdk-21` Ubuntu:26.10 From an advisory covering 39 CVEs	before 21.0.13.0.3+1-1~26.10.1, plus listed versions 21.0.11~8ea-121.0.11+10-121.0.12~5ea-121.0.12+8-121.0.12.1+1-1	21.0.13.0.3+1-1~26.10.1
`openjdk-21` Ubuntu:26.04:LTS From an advisory covering 39 CVEs	before 21.0.13.0.3+1-1~26.04.1, plus listed versions 21.0.9~8ea-121.0.9+10-121.0.10~4ea-121.0.10~6ea-121.0.10+7-1 Show 5 moreShow less 21.0.11~5ea-121.0.11~8ea-121.0.11+10-1~26.04.221.0.12+8-1~26.0421.0.12.1+1-1~26.04.4	21.0.13.0.3+1-1~26.04.1
`java-17-openjdk` openSUSE:Tumbleweed From an advisory covering 35 CVEs	before 17.0.21.0-1.1	17.0.21.0-1.1
`java-21-openjdk` openSUSE:Tumbleweed From an advisory covering 38 CVEs	before 21.0.13.0-1.1	21.0.13.0-1.1
`java-25-openjdk` openSUSE:Tumbleweed From an advisory covering 39 CVEs	before 25.0.5.0-1.1	25.0.5.0-1.1
`java-11-openjdk` openSUSE:Tumbleweed From an advisory covering 38 CVEs	before 11.0.33.0-1.1	11.0.33.0-1.1
`java-25-openj9` openSUSE:Tumbleweed From an advisory covering 20 CVEs	before 25.0.5.0-1.1	25.0.5.0-1.1
`java-1_8_0-openj9` openSUSE:Tumbleweed From an advisory covering 18 CVEs	before 1.8.0.512-1.1	1.8.0.512-1.1
`java-1_8_0-openjdk` openSUSE:Tumbleweed From an advisory covering 36 CVEs	before 1.8.0.512-1.1	1.8.0.512-1.1

History

History
Recorded	Changed	Sources
Nov 12, 2026	affected, aliases, references	OSV
Nov 11, 2026	affected, aliases, references	OSV
Nov 11, 2026	affected, aliases, references	OSV
Nov 10, 2026	affected	OSV
Nov 10, 2026	affected, aliases, references	OSV
Nov 9, 2026	affected	OSV
Nov 9, 2026	affected	OSV
Nov 7, 2026	affected, aliases	OSV
Nov 6, 2026	affected, aliases	OSV
Nov 6, 2026	affected

Show 5 moreShow less

History
Recorded	Changed	Sources
Nov 5, 2026	affected, aliases, references	OSV
Nov 5, 2026	facts	OSV
Nov 3, 2026	affected, aliases, references	OSV
Nov 3, 2026	affected, aliases, references	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-87294 is a medium vulnerability (CVSS 6.5) in Oracle Corporation Graalvm Enterprise Edition, published October 20, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.26%, the 18th percentile. Fixed in openjdk17 17.0.21.0.3_p1-r0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 54 package rows, 34 versions, 43 references and the rest of 6 source descriptions. The JSON record has them.