CVE-2026-87367

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...

3.7 LowFix available

CVE-2026-87367 is a low vulnerability (CVSS 3.7) in Oracle Corporation Graalvm Enterprise Edition, published October 20, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.25%, the 16th percentile. Fixed in openjdk21 21.0.13.0.3_p1-r0.

What does this mean?

Severity: 3.7 LowCVSS 3.1, CVE List
Exploit chance: 0.25%EPSS, 16th percentile
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: 21.0.13.0.3_p1-r0openjdk21 +299 more

What does this mean?

Published: October 20, 2026
Modified: November 14, 2026
Weakness: CWE-200
Also known as: ALPINE-CVE-2026-87367ALSA-2026:88347ALSA-2026:88349ALSA-2026:88352ALSA-2026:90500ALSA-2026:90504ALSA-2026:95609AZL-112496
Show 37 moreShow less
BELL-CVE-2026-87367DEBIAN-CVE-2026-87367EUVD-2026-106408GHSA-m2mw-3v6r-66h4MGASA-2026-0572RHSA-2026:88347RHSA-2026:88349RHSA-2026:88352RHSA-2026:90500RHSA-2026:90504RHSA-2026:94069RHSA-2026:94111RHSA-2026:94403RHSA-2026:94520RHSA-2026:94625RHSA-2026:95598RHSA-2026:95609RHSA-2026:95613RHSA-2026:95833RLSA-2026:88347RLSA-2026:88352RLSA-2026:95609UBUNTU-CVE-2026-87367USN-9004-1USN-9005-1USN-9009-1USN-9010-1USN-9014-1USN-9015-1openSUSE-SU-2026:12294-1openSUSE-SU-2026:12328-1openSUSE-SU-2026:12329-1openSUSE-SU-2026:12418-1openSUSE-SU-2026:12433-1openSUSE-SU-2026:12434-1openSUSE-SU-2026:12435-1openSUSE-SU-2026:12513-1

Description

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: High
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: Low
Availability: None

Exploit likelihood

0.25%Unchanged since Oct 21, 2026

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`openjdk21` Alpine:v3.23	before 21.0.13.0.3_p1-r0	21.0.13.0.3_p1-r0
`openjdk21` Alpine:v3.24	before 21.0.13.0.3_p1-r0	21.0.13.0.3_p1-r0
`openjdk25` Alpine:v3.23	before 25.0.5.0.3_p1-r0	25.0.5.0.3_p1-r0
`openjdk25` Alpine:v3.24	before 25.0.5.0.3_p1-r0	25.0.5.0.3_p1-r0
`java-25-openjdk` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-crypto-adapter` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-crypto-adapter-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-crypto-adapter-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-demo` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-demo-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`java-25-openjdk-demo-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-devel` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-devel-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-devel-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-headless` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-headless-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-headless-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-javadoc` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-javadoc-zip` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-jmods` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-jmods-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-jmods-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-src` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-src-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-src-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-static-libs` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-static-libs-fastdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk-static-libs-slowdebug` AlmaLinux:10 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el10.alma.1	1:25.0.5.0.8-1.0.el10.alma.1
`java-25-openjdk` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-crypto-adapter` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-crypto-adapter-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-crypto-adapter-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-demo` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-demo-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-demo-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-devel` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-devel-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-devel-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-headless` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-headless-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-headless-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-javadoc` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-javadoc-zip` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-jmods` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-jmods-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-jmods-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-src` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-src-fastdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`java-25-openjdk-src-slowdebug` AlmaLinux:9 From an advisory covering 41 CVEs	before 1:25.0.5.0.8-1.0.el9.alma.1	1:25.0.5.0.8-1.0.el9.alma.1
`python-tensorboard` Azure Linux:3	through 2.16.2-6	None known
`openjdk-nik-23-17` Alpaquita:23	23.0.4-r1 up to 23.0.14-r0	23.0.14-r0
`openjdk-nik-23-21` Alpaquita:23	23.1.3-r1 up to 23.1.13-r0	23.1.13-r0
`openjdk-nik-25-25` Alpaquita:23	25.0.0-r0 up to 25.0.5.0.3-r0	25.0.5.0.3-r0
`openjdk11` Alpaquita:23	11.0.19_p7-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-container-jre` Alpaquita:23	11.0.19_p7-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-lite` Alpaquita:23	11.0.19_p7-r1 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-perf` Alpaquita:23	11.0.20.1_p1-r0 up to 11.0.33.0.3_p8-r0	11.0.33.0.3_p8-r0
`openjdk17` Alpaquita:23	17.0.7_p7-r1 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-container-jre` Alpaquita:23	17.0.7_p7-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-crac` Alpaquita:23	17.0.13_p13-r0 up to 17.0.21.0.3_p6-r0	17.0.21.0.3_p6-r0
`openjdk17-lite` Alpaquita:23	17.0.7_p7-r1 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk21` Alpaquita:23	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-container-jre` Alpaquita:23	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-crac` Alpaquita:23	21.0.5_p12-r0 up to 21.0.13.0.3_p6-r0	21.0.13.0.3_p6-r0
`openjdk21-lite` Alpaquita:23	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk25` Alpaquita:23	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-container-jre` Alpaquita:23	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-lite` Alpaquita:23	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk27` Alpaquita:23	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-container-jre` Alpaquita:23	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-lite` Alpaquita:23	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk8` Alpaquita:23	8u372_p7-r0 up to 8.513_p9-r0	8.513_p9-r0
`openjdk8-perf` Alpaquita:23	8u392_p9-r1 up to 8.513_p10-r0	8.513_p10-r0
`openjdk-nik-23-17` Alpaquita:25	23.0.8-r0 up to 23.0.14-r0	23.0.14-r0
`openjdk-nik-23-21` Alpaquita:25	23.1.7-r0 up to 23.1.13-r0	23.1.13-r0
`openjdk-nik-25-25` Alpaquita:25	25.0.0-r0 up to 25.0.5.0.3-r0	25.0.5.0.3-r0
`openjdk11` Alpaquita:25	11.0.27_p9-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-container-jre` Alpaquita:25	11.0.27_p9-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-lite` Alpaquita:25	11.0.27_p9-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-perf` Alpaquita:25	11.0.29_p11-r0 up to 11.0.33.0.3_p8-r0	11.0.33.0.3_p8-r0
`openjdk17` Alpaquita:25	17.0.15_p10-r1 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-container-jre` Alpaquita:25	17.0.15_p10-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-crac` Alpaquita:25	17.0.15_p13-r1 up to 17.0.21.0.3_p6-r0	17.0.21.0.3_p6-r0
`openjdk17-lite` Alpaquita:25	17.0.15_p10-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk21` Alpaquita:25	21.0.7_p9-r1 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-container-jre` Alpaquita:25	21.0.7_p9-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-crac` Alpaquita:25	21.0.7_p12-r1 up to 21.0.13.0.3_p6-r0	21.0.13.0.3_p6-r0
`openjdk21-lite` Alpaquita:25	21.0.7_p9-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk25` Alpaquita:25	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-container-jre` Alpaquita:25	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-lite` Alpaquita:25	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk27` Alpaquita:25	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-container-jre` Alpaquita:25	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-lite` Alpaquita:25	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk8` Alpaquita:25	8.452_p11-r0 up to 8.513_p9-r0	8.513_p9-r0
`openjdk8-perf` Alpaquita:25	8.472_p10-r0 up to 8.513_p10-r0	8.513_p10-r0
`openjdk-nik-23-17` Alpaquita:stream	23.0.4-r1 up to 23.0.14-r0	23.0.14-r0
`openjdk-nik-23-21` Alpaquita:stream	23.1.3-r1 up to 23.1.13-r0	23.1.13-r0
`openjdk-nik-25-25` Alpaquita:stream	25.0.0-r0 up to 25.0.5.0.3-r0	25.0.5.0.3-r0
`openjdk-nik-23-17` BellSoft Hardened Containers:23	23.0.4-r1 up to 23.0.14-r0	23.0.14-r0
`openjdk-nik-23-21` BellSoft Hardened Containers:23	23.1.3-r1 up to 23.1.13-r0	23.1.13-r0
`openjdk-nik-25-25` BellSoft Hardened Containers:23	25.0.0-r0 up to 25.0.5.0.3-r0	25.0.5.0.3-r0
`openjdk11-container-jre` BellSoft Hardened Containers:23	11.0.19_p7-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-lite` BellSoft Hardened Containers:23	11.0.19_p7-r1 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-perf` BellSoft Hardened Containers:23	11.0.20.1_p1-r0 up to 11.0.33.0.3_p8-r0	11.0.33.0.3_p8-r0
`openjdk17-container-jre` BellSoft Hardened Containers:23	17.0.7_p7-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-crac` BellSoft Hardened Containers:23	17.0.13_p13-r0 up to 17.0.21.0.3_p6-r0	17.0.21.0.3_p6-r0
`openjdk17-lite` BellSoft Hardened Containers:23	17.0.7_p7-r1 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk21-container-jre` BellSoft Hardened Containers:23	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-crac` BellSoft Hardened Containers:23	21.0.5_p12-r0 up to 21.0.13.0.3_p6-r0	21.0.13.0.3_p6-r0
`openjdk21-lite` BellSoft Hardened Containers:23	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk25-container-jre` BellSoft Hardened Containers:23	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-lite` BellSoft Hardened Containers:23	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk27-container-jre` BellSoft Hardened Containers:23	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-lite` BellSoft Hardened Containers:23	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk8` BellSoft Hardened Containers:23	8u372_p7-r0 up to 8.513_p9-r0	8.513_p9-r0
`openjdk8-perf` BellSoft Hardened Containers:23	8u392_p9-r1 up to 8.513_p10-r0	8.513_p10-r0
`openjdk-nik-23-17` BellSoft Hardened Containers:25	23.0.8-r0 up to 23.0.14-r0	23.0.14-r0
`openjdk-nik-23-21` BellSoft Hardened Containers:25	23.1.7-r0 up to 23.1.13-r0	23.1.13-r0
`openjdk-nik-25-25` BellSoft Hardened Containers:25	25.0.0-r0 up to 25.0.5.0.3-r0	25.0.5.0.3-r0
`openjdk11-container-jre` BellSoft Hardened Containers:25	11.0.27_p9-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-lite` BellSoft Hardened Containers:25	11.0.27_p9-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-perf` BellSoft Hardened Containers:25	11.0.29_p11-r0 up to 11.0.33.0.3_p8-r0	11.0.33.0.3_p8-r0
`openjdk17-container-jre` BellSoft Hardened Containers:25	17.0.15_p10-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-crac` BellSoft Hardened Containers:25	17.0.15_p13-r1 up to 17.0.21.0.3_p6-r0	17.0.21.0.3_p6-r0
`openjdk17-lite` BellSoft Hardened Containers:25	17.0.15_p10-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk21-container-jre` BellSoft Hardened Containers:25	21.0.7_p9-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-crac` BellSoft Hardened Containers:25	21.0.7_p12-r1 up to 21.0.13.0.3_p6-r0	21.0.13.0.3_p6-r0
`openjdk21-lite` BellSoft Hardened Containers:25	21.0.7_p9-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk25-container-jre` BellSoft Hardened Containers:25	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk25-lite` BellSoft Hardened Containers:25	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk27-container-jre` BellSoft Hardened Containers:25	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk27-lite` BellSoft Hardened Containers:25	27_p36-r0 up to 27.0.1.0.3_p5-r0	27.0.1.0.3_p5-r0
`openjdk8` BellSoft Hardened Containers:25	8.452_p11-r0 up to 8.513_p9-r0	8.513_p9-r0
`openjdk8-perf` BellSoft Hardened Containers:25	8.472_p10-r0 up to 8.513_p10-r0	8.513_p10-r0
`openjdk-nik-23-17` BellSoft Hardened Containers:stream	23.0.4-r1 up to 23.0.14-r0	23.0.14-r0
`openjdk-nik-23-21` BellSoft Hardened Containers:stream	23.1.3-r1 up to 23.1.13-r0	23.1.13-r0
`openjdk-nik-25-25` BellSoft Hardened Containers:stream	25.0.0-r0 up to 25.0.5.0.3-r0	25.0.5.0.3-r0
`openjdk11-container-jre` BellSoft Hardened Containers:stream	11.0.19_p7-r0 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk11-lite` BellSoft Hardened Containers:stream	11.0.19_p7-r1 up to 11.0.33.0.3_p7-r0	11.0.33.0.3_p7-r0
`openjdk17-container-jre` BellSoft Hardened Containers:stream	17.0.7_p7-r0 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk17-crac` BellSoft Hardened Containers:stream	17.0.10_p13-r0 up to 17.0.21.0.3_p6-r0	17.0.21.0.3_p6-r0
`openjdk17-lite` BellSoft Hardened Containers:stream	17.0.7_p7-r1 up to 17.0.21.0.3_p5-r0	17.0.21.0.3_p5-r0
`openjdk21-container-jre` BellSoft Hardened Containers:stream	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk21-crac` BellSoft Hardened Containers:stream	21.0.2_p15-r0 up to 21.0.13.0.3_p6-r0	21.0.13.0.3_p6-r0
`openjdk21-lite` BellSoft Hardened Containers:stream	21_p37-r0 up to 21.0.13.0.3_p5-r0	21.0.13.0.3_p5-r0
`openjdk25-container-jre` BellSoft Hardened Containers:stream	25_p37-r0 up to 25.0.5.0.3_p5-r0	25.0.5.0.3_p5-r0
`openjdk-17` Debian:12	before 17.0.21+9-1~deb12u1, plus listed versions 17.0.10+7-117.0.10+7-1~deb11u117.0.10+7-1~deb12u117.0.10+7-217.0.10+7-3 Show 45 moreShow less 17.0.10~6ea-117.0.11+9-117.0.11+9-1~deb11u117.0.11+9-1~deb12u117.0.11~6ea-117.0.11~7ea-117.0.12+7-117.0.12+7-217.0.12+7-2~deb11u117.0.12+7-2~deb12u117.0.12~6ea-117.0.13+11-117.0.13+11-1~deb11u117.0.13+11-1~deb12u117.0.13+11-217.0.13+11-2~deb12u117.0.13~6ea-117.0.14+7-117.0.14+7-1~deb11u117.0.14+7-1~deb12u117.0.14~6ea-117.0.15+6-117.0.15+6-1~deb11u117.0.15+6-1~deb12u117.0.15~4ea-117.0.15~5ea-117.0.16+8-117.0.16+8-1~deb11u117.0.16+8-1~deb12u117.0.16~5ea-117.0.17+10-117.0.17+10-1~deb11u117.0.17+10-1~deb12u117.0.17~5ea-117.0.17~8ea-117.0.18+8-117.0.18+8-1~deb11u117.0.18+8-1~deb12u117.0.18~7ea-117.0.19+10-117.0.19+10-1~deb11u117.0.19+10-1~deb12u117.0.19+10-1~deb12u217.0.19~6ea-117.0.19~9ea-1	17.0.21+9-1~deb12u1
`openjdk-21` Debian:13	before 21.0.13+9-1~deb13u2, plus listed versions 21.0.10+7-121.0.10+7-1~deb13u121.0.10~4ea-121.0.10~6ea-121.0.11+10-1 Show 22 moreShow less 21.0.11+10-1~deb13u121.0.11+10-1~deb13u221.0.11~5ea-121.0.11~6ea-121.0.11~8ea-121.0.11~9ea-121.0.11~9ea-221.0.12+8-121.0.12+8-1~deb13u121.0.12+8-221.0.12.1+1-121.0.12.1+1-1~deb13u121.0.12~5ea-121.0.12~7ea-121.0.13+9-1~deb13u121.0.13~6ea-121.0.13~8ea-121.0.8+9-121.0.9+10-121.0.9+10-1~deb13u121.0.9~5ea-121.0.9~8ea-1	21.0.13+9-1~deb13u2
`openjdk-21` Debian:14	before 21.0.13+9-1, plus listed versions 21.0.10+7-121.0.10+7-1~deb13u121.0.10~4ea-121.0.10~6ea-121.0.11+10-1 Show 23 moreShow less 21.0.11+10-1~deb13u121.0.11+10-1~deb13u221.0.11~5ea-121.0.11~6ea-121.0.11~8ea-121.0.11~9ea-121.0.11~9ea-221.0.12+8-121.0.12+8-1~deb13u121.0.12+8-221.0.12.1+1-121.0.12.1+1-1~deb13u121.0.12~5ea-121.0.12~7ea-121.0.13+9-1~deb13u121.0.13+9-1~deb13u221.0.13~6ea-121.0.13~8ea-121.0.8+9-121.0.9+10-121.0.9+10-1~deb13u121.0.9~5ea-121.0.9~8ea-1	21.0.13+9-1
`openjdk-25` Debian:13	before 25.0.5+8-1~deb13u1, plus listed versions 25+36-125.0.1+8-125.0.1+8-1~deb13u125.0.1+8-225.0.1+8-3 Show 24 moreShow less 25.0.2+10-125.0.2+10-1~deb13u225.0.3+9-125.0.3+9-225.0.3+9-2~deb13u125.0.3~5ea-125.0.3~5ea-225.0.3~7ea-125.0.3~7ea-225.0.3~8ea-125.0.3~8ea-225.0.4+7-125.0.4+7-1~deb13u125.0.4+7-225.0.4.1+1-125.0.4.1+1-1~deb13u125.0.4~4ea-125.0.4~6ea-125.0.5~6ea-125.0.5~7ea-125.0.5~7ea-225~32ea-125~34ea-125~36ea-1	25.0.5+8-1~deb13u1
`openjdk-25` Debian:14	before 25.0.5+8-1, plus listed versions 25+36-125.0.1+8-125.0.1+8-1~deb13u125.0.1+8-225.0.1+8-3 Show 25 moreShow less 25.0.2+10-125.0.2+10-1~deb13u225.0.3+9-125.0.3+9-225.0.3+9-2~deb13u125.0.3~5ea-125.0.3~5ea-225.0.3~7ea-125.0.3~7ea-225.0.3~8ea-125.0.3~8ea-225.0.4+7-125.0.4+7-1~deb13u125.0.4+7-225.0.4.1+1-125.0.4.1+1-1~deb13u125.0.4~4ea-125.0.4~6ea-125.0.5+8-1~deb13u125.0.5~6ea-125.0.5~7ea-125.0.5~7ea-225~32ea-125~34ea-125~36ea-1	25.0.5+8-1
`openjdk-27` Debian:14	All versions, plus listed versions 27+35-127+35-227.0.1+9-127.0.1.0.2+1-127~10ea-1 Show 14 moreShow less 27~13ea-127~13ea-227~17ea-127~17ea-227~18ea-127~18ea-2~exp127~18ea-2~exp227~19ea-127~23ea-127~24ea-127~24ea-227~30ea-127~33ea-127~34ea-1	None known
`java-21-openjdk` Mageia:10 From an advisory covering 38 CVEs	before 21.0.13.0.9-1.mga10	21.0.13.0.9-1.mga10
`java-17-openjdk` Mageia:10 From an advisory covering 38 CVEs	before 17.0.21.0.9-1.mga10	17.0.21.0.9-1.mga10
`java-latest-openjdk` Mageia:10 From an advisory covering 38 CVEs	before 25.0.5.0.8-1.rolling.1.mga10	25.0.5.0.8-1.rolling.1.mga10
`timezone` Mageia:10 From an advisory covering 38 CVEs	before 2026e-1.mga10	2026e-1.mga10
`java-25-openjdk` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-crypto-adapter` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-crypto-adapter-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-debugsource` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-demo` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-devel` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-devel-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-headless` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-headless-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-javadoc` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-javadoc-zip` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-jmods` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-src` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-static-libs` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk` Red Hat:enterprise_linux:9::appstream From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el9	1:25.0.5.0.8-1.0.el9
`java-25-openjdk-crypto-adapter` Red Hat:enterprise_linux:9::appstream From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el9	1:25.0.5.0.8-1.0.el9
`java-25-openjdk-crypto-adapter-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el9	1:25.0.5.0.8-1.0.el9
`java-25-openjdk-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el9	1:25.0.5.0.8-1.0.el9
`java-25-openjdk-debugsource` Red Hat:enterprise_linux:9::appstream From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el9	1:25.0.5.0.8-1.0.el9
`java-25-openjdk-demo` Red Hat:enterprise_linux:9::appstream From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el9	1:25.0.5.0.8-1.0.el9
`java-25-openjdk-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el9	1:25.0.5.0.8-1.0.el9
`java-25-openjdk-devel-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el9	1:25.0.5.0.8-1.0.el9
`java-25-openjdk-headless` Red Hat:enterprise_linux:9::appstream From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el9	1:25.0.5.0.8-1.0.el9
`java-25-openjdk-headless-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el9	1:25.0.5.0.8-1.0.el9
`java-25-openjdk-javadoc` Red Hat:enterprise_linux:9::appstream From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el9	1:25.0.5.0.8-1.0.el9
`java-25-openjdk-javadoc-zip` Red Hat:enterprise_linux:9::appstream From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el9	1:25.0.5.0.8-1.0.el9
`java-25-openjdk-jmods` Red Hat:enterprise_linux:9::appstream From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el9	1:25.0.5.0.8-1.0.el9
`java-25-openjdk-src` Red Hat:enterprise_linux:9::appstream From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el9	1:25.0.5.0.8-1.0.el9
`java-25-openjdk-static-libs` Red Hat:enterprise_linux:9::appstream From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el9	1:25.0.5.0.8-1.0.el9
`java-25-openjdk-crypto-adapter-fastdebug` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-crypto-adapter-fastdebug-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-crypto-adapter-slowdebug` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-crypto-adapter-slowdebug-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-demo-fastdebug` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-demo-slowdebug` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-devel-fastdebug` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-devel-fastdebug-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-devel-slowdebug` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-devel-slowdebug-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-fastdebug` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-fastdebug-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-headless-fastdebug` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-headless-fastdebug-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-headless-slowdebug` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-headless-slowdebug-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-jmods-fastdebug` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk-jmods-slowdebug` Red Hat:enterprise_linux:10.2 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el10	1:25.0.5.0.8-1.0.el10
`java-25-openjdk` Rocky Linux:9 From an advisory covering 39 CVEs	before 1:25.0.5.0.8-1.0.el9_8	1:25.0.5.0.8-1.0.el9_8
`java-17-openjdk` Rocky Linux:8 From an advisory covering 36 CVEs	before 1:17.0.21.0.9-2.1.el8_10	1:17.0.21.0.9-2.1.el8_10
`java-1.8.0-openjdk` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-accessibility` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-accessibility-fastdebug` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-accessibility-slowdebug` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-debuginfo` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-debugsource` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-demo` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-demo-debuginfo` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-demo-fastdebug` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-demo-fastdebug-debuginfo` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-demo-slowdebug` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-demo-slowdebug-debuginfo` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-devel` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-devel-debuginfo` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-devel-fastdebug` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-devel-fastdebug-debuginfo` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-devel-slowdebug` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-devel-slowdebug-debuginfo` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-fastdebug` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-fastdebug-debuginfo` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-headless` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-headless-debuginfo` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-headless-fastdebug` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-headless-fastdebug-debuginfo` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-headless-slowdebug` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-headless-slowdebug-debuginfo` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-slowdebug` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-slowdebug-debuginfo` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-src` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-src-fastdebug` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-src-slowdebug` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-javadoc` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`java-1.8.0-openjdk-javadoc-zip` Rocky Linux:8 From an advisory covering 37 CVEs	before 1:1.8.0.512.b09-1.2.el8_10	1:1.8.0.512.b09-1.2.el8_10
`openjdk-8` Ubuntu:Pro:16.04:LTS	before 8u512-b09~us1-0ubuntu1~16.04.1, plus listed versions 8u66-b01-58u72-b05-1ubuntu18u72-b05-58u72-b05-68u72-b15-1 Show 45 moreShow less 8u72-b15-2ubuntu18u72-b15-2ubuntu38u72-b15-3ubuntu18u77-b03-1ubuntu28u77-b03-3ubuntu18u77-b03-3ubuntu28u77-b03-3ubuntu38u91-b14-0ubuntu4~16.04.18u91-b14-3ubuntu1~16.04.18u111-b14-2ubuntu0.16.04.28u121-b13-0ubuntu1.16.04.28u131-b11-0ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.38u151-b12-0ubuntu0.16.04.28u162-b12-0ubuntu0.16.04.28u171-b11-0ubuntu0.16.04.18u181-b13-0ubuntu0.16.04.18u181-b13-1ubuntu0.16.04.18u191-b12-0ubuntu0.16.04.18u191-b12-2ubuntu0.16.04.18u212-b03-0ubuntu1.16.04.18u222-b10-1ubuntu1~16.04.18u232-b09-0ubuntu1~16.04.18u242-b08-0ubuntu3~16.048u252-b09-1~16.048u265-b01-0ubuntu2~16.048u272-b10-0ubuntu1~16.048u275-b01-0ubuntu1~16.048u282-b08-0ubuntu1~16.048u292-b10-0ubuntu1~16.04.18u312-b07-0ubuntu1~16.048u342-b07-0ubuntu1~16.048u352-ga-1~16.048u362-ga-0ubuntu1~16.04.18u372-ga~us1-0ubuntu1~16.048u382-ga-1~16.04.18u392-ga-1~16.048u432-ga~us1-0ubuntu2~16.04.48u442-b06~us1-0ubuntu1~16.048u452-ga~us1-0ubuntu1~16.04.18u462-ga~us1-0ubuntu2~16.04.28u472-ga-1~16.048u482-ga~us1-0ubuntu1~16.048u492-ga~us2-0ubuntu1~16.04.1	8u512-b09~us1-0ubuntu1~16.04.1
`openjdk-9` Ubuntu:16.04:LTS	All versions, plus listed versions 9~b88-19~b101-2ubuntu29~b102-19~b113-0ubuntu19~b114-0ubuntu1	None known
`openjdk-lts` Ubuntu:Pro:18.04:LTS	before 11.0.33+9-1ubuntu1~18.04.1, plus listed versions 9.0.4+12-2ubuntu49.0.4+12-4ubuntu110~46-4ubuntu110~46-5ubuntu110.0.1+10-1ubuntu2 Show 38 moreShow less 10.0.1+10-3ubuntu110.0.2+13-1ubuntu0.18.04.110.0.2+13-1ubuntu0.18.04.210.0.2+13-1ubuntu0.18.04.310.0.2+13-1ubuntu0.18.04.411.0.2+9-3ubuntu1~18.04.311.0.3+7-1ubuntu2~18.04.111.0.4+11-1ubuntu2~18.04.311.0.5+10-0ubuntu1.1~18.0411.0.6+10-1ubuntu1~18.04.111.0.7+10-2ubuntu2~18.0411.0.8+10-0ubuntu1~18.04.111.0.9+11-0ubuntu1~18.04.111.0.9.1+1-0ubuntu1~18.0411.0.10+9-0ubuntu1~18.0411.0.11+9-0ubuntu2~18.0411.0.13+8-0ubuntu1~18.0411.0.14+9-0ubuntu2~18.0411.0.14.1+1-0ubuntu1~18.0411.0.15+10-0ubuntu0.18.04.111.0.16+8-0ubuntu1~18.0411.0.17+8-1ubuntu2~18.0411.0.18+10-0ubuntu1~18.04.111.0.19+7~us1-0ubuntu1~18.04.111.0.20+8-1ubuntu1~18.0411.0.20.1+1-0ubuntu1~18.0411.0.21+9-0ubuntu1~18.0411.0.22+7-0ubuntu2~18.04.111.0.23+9-1ubuntu1~18.04.111.0.25+9-1ubuntu1~18.0411.0.26+4-1ubuntu1~18.0411.0.27+6~us1-0ubuntu1~18.0411.0.28+6-1ubuntu1~18.04.111.0.29+7-1ubuntu1~18.0411.0.30+7-1ubuntu1~18.0411.0.31+11-1ubuntu1~18.04.211.0.32+9-1ubuntu1~18.0411.0.32.1+1-1ubuntu1~18.04	11.0.33+9-1ubuntu1~18.04.1
`openjdk-17` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 17+35-1~18.0417.0.1+12-1~18.0417.0.2+8-1~18.0417.0.3+7-0ubuntu0.18.04.117.0.4+8-1~18.04 Show 18 moreShow less 17.0.5+8-2ubuntu1~18.0417.0.6+10-0ubuntu1~18.04.117.0.7+7~us1-0ubuntu1~18.0417.0.8+7-1~18.0417.0.8.1+1~us1-0ubuntu1~18.0417.0.9+9-1~18.0417.0.10+7-1~18.04.117.0.11+9-1~18.04.117.0.13+11-2ubuntu1~18.04.217.0.14+7-1~18.0417.0.15+6~us1-0ubuntu1~18.0417.0.16+8~us1-0ubuntu1~18.04.117.0.17+10-1~18.0417.0.18+8-1~18.0417.0.19+10-1~18.04.217.0.20+8-1~18.0417.0.20.1+1-1~18.0417.0.21.0.3+1-1~18.04.1	None known
`openjdk-8` Ubuntu:Pro:18.04:LTS	before 8u512-b09~us1-0ubuntu1~18.04.1, plus listed versions 8u144-b01-28u151-b12-18u162-b12-18u171-b11-0ubuntu0.18.04.18u181-b13-0ubuntu0.18.04.1 Show 32 moreShow less 8u181-b13-1ubuntu0.18.04.18u191-b12-0ubuntu0.18.04.18u191-b12-2ubuntu0.18.04.18u212-b03-0ubuntu1.18.04.18u222-b10-1ubuntu1~18.04.18u232-b09-0ubuntu1~18.04.18u242-b08-0ubuntu3~18.048u252-b09-1~18.048u265-b01-0ubuntu2~18.048u272-b10-0ubuntu1~18.048u275-b01-0ubuntu1~18.048u282-b08-0ubuntu1~18.048u292-b10-0ubuntu1~18.048u312-b07-0ubuntu1~18.048u342-b07-0ubuntu1~18.048u352-ga-1~18.048u362-ga-0ubuntu1~18.04.18u372-ga~us1-0ubuntu1~18.048u382-ga-1~18.04.18u392-ga-1~18.048u402-ga-2ubuntu1~18.048u412-ga-1~18.04.18u422-b05-1~18.048u432-ga~us1-0ubuntu2~18.048u442-b06~us1-0ubuntu1~18.048u452-ga~us1-0ubuntu1~18.048u462-ga~us1-0ubuntu2~18.04.28u472-ga-1~18.048u482-ga~us1-0ubuntu1~18.048u492-ga~us2-0ubuntu1~18.04.18u502-ga~us1-0ubuntu1~18.048u504-ga-1ubuntu1~18.04.3	8u512-b09~us1-0ubuntu1~18.04.1
`openjdk-lts` Ubuntu:Pro:20.04:LTS	before 11.0.33+9-1ubuntu1~20.04.1, plus listed versions 11.0.5+10-0ubuntu111.0.5+10-2ubuntu111.0.6+10-1ubuntu111.0.6+10-2ubuntu211.0.7+9-1ubuntu1 Show 30 moreShow less 11.0.7+10-2ubuntu111.0.7+10-3ubuntu111.0.8+10-0ubuntu1~20.0411.0.9+11-0ubuntu1~20.0411.0.9.1+1-0ubuntu1~20.0411.0.10+9-0ubuntu1~20.0411.0.11+9-0ubuntu2~20.0411.0.13+8-0ubuntu1~20.0411.0.14+9-0ubuntu2~20.0411.0.14.1+1-0ubuntu1~20.0411.0.15+10-0ubuntu0.20.04.111.0.16+8-0ubuntu1~20.0411.0.17+8-1ubuntu2~20.0411.0.18+10-0ubuntu1~20.04.111.0.19+7~us1-0ubuntu1~20.04.111.0.20+8-1ubuntu1~20.0411.0.20.1+1-0ubuntu1~20.0411.0.21+9-0ubuntu1~20.0411.0.22+7-0ubuntu2~20.04.111.0.23+9-1ubuntu1~20.04.211.0.24+8-1ubuntu3~20.0411.0.25+9-1ubuntu1~20.0411.0.26+4-1ubuntu1~20.0411.0.27+6~us1-0ubuntu1~20.0411.0.28+6-1ubuntu1~20.04.111.0.29+7-1ubuntu1~20.0411.0.30+7-1ubuntu1~20.0411.0.31+11-1ubuntu1~20.04.211.0.32+9-1ubuntu1~20.0411.0.32.1+1-1ubuntu1~20.04	11.0.33+9-1ubuntu1~20.04.1
`openjdk-13` Ubuntu:20.04:LTS	All versions, plus listed versions 13+33-113.0.1+9-213.0.2+8-113.0.2+8-213.0.3+3-1ubuntu213.0.4+8-1~20.0413.0.7+5-0ubuntu1~20.04	None known
`openjdk-16` Ubuntu:20.04:LTS	All versions, plus listed versions 16.0.1+9-1~20.04	None known
`openjdk-17` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 17+35-1~20.0417.0.1+12-1~20.0417.0.2+8-1~20.0417.0.3+7-0ubuntu0.20.04.117.0.4+8-1~20.04 Show 19 moreShow less 17.0.5+8-2ubuntu1~20.0417.0.6+10-0ubuntu1~20.04.117.0.7+7~us1-0ubuntu1~20.0417.0.8+7-1~20.04.217.0.8.1+1~us1-0ubuntu1~20.0417.0.9+9-1~20.0417.0.10+7-1~20.04.117.0.11+9-1~20.04.217.0.12+7-1ubuntu2~20.0417.0.13+11-2ubuntu1~20.0417.0.14+7-1~20.0417.0.15+6~us1-0ubuntu1~20.0417.0.16+8~us1-0ubuntu1~20.04.617.0.17+10-1~20.0417.0.18+8-1~20.0417.0.19+10-1~20.04.217.0.20+8-1~20.0417.0.20.1+1-1~20.0417.0.21.0.3+1-1~20.04.1	None known
`openjdk-21` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 21.0.1+12-2~20.04.121.0.2+13-1~20.04.121.0.3+9-1ubuntu1~20.04.121.0.4+7-1ubuntu2~20.0421.0.5+11-1ubuntu1~20.04 Show 9 moreShow less 21.0.6+7-1~20.04.121.0.7+6~us1-0ubuntu1~20.0421.0.8+9~us1-0ubuntu1~20.04.121.0.9+10-1~20.0421.0.10+7-1~20.0421.0.11+10-1~20.04.221.0.12+8-1~20.0421.0.12.1+1-1~20.04.421.0.13.0.3+1-1~20.04.1	None known
`openjdk-8` Ubuntu:Pro:20.04:LTS	before 8u512-b09~us1-0ubuntu1~20.04.1, plus listed versions 8u232-b09-0ubuntu18u232-b09-18u242-b04-18u242-b08-0ubuntu38u252-b07-1 Show 25 moreShow less 8u252-b09-1ubuntu18u265-b01-0ubuntu2~20.048u272-b10-0ubuntu1~20.048u275-b01-0ubuntu1~20.048u282-b08-0ubuntu1~20.048u292-b10-0ubuntu1~20.048u312-b07-0ubuntu1~20.048u342-b07-0ubuntu1~20.048u352-ga-1~20.048u362-ga-0ubuntu1~20.04.18u372-ga~us1-0ubuntu1~20.048u382-ga-1~20.04.18u392-ga-1~20.048u402-ga-2ubuntu1~20.048u412-ga-1~20.04.18u422-b05-1~20.048u432-ga~us1-0ubuntu2~20.048u442-b06~us1-0ubuntu1~20.048u452-ga~us1-0ubuntu1~20.048u462-ga~us1-0ubuntu2~20.04.28u472-ga-1~20.048u482-ga~us1-0ubuntu1~20.048u492-ga~us2-0ubuntu1~20.04.18u502-ga~us1-0ubuntu1~20.048u504-ga-1ubuntu1~20.04.3	8u512-b09~us1-0ubuntu1~20.04.1
`openjdk-17` Ubuntu:22.04:LTS	before 17.0.21.0.3+1-1~22.04.1, plus listed versions 17+35-117.0.1+12-117.0.2+8-117.0.3+7-0ubuntu0.22.04.117.0.4+8-1~22.04 Show 18 moreShow less 17.0.5+8-2ubuntu1~22.0417.0.6+10-0ubuntu1~22.0417.0.7+7~us1-0ubuntu1~22.04.217.0.8+7-1~22.0417.0.8.1+1~us1-0ubuntu1~22.0417.0.9+9-1~22.0417.0.10+7-1~22.04.117.0.11+9-1~22.04.117.0.12+7-1ubuntu2~22.0417.0.13+11-2ubuntu1~22.0417.0.14+7-1~22.04.117.0.15+6~us1-0ubuntu1~22.0417.0.16+8~us1-0ubuntu1~22.04.117.0.17+10-1~22.0417.0.18+8-1~22.04.117.0.19+10-1~22.04.217.0.20+8-1~22.0417.0.20.1+1-1~22.04	17.0.21.0.3+1-1~22.04.1
`openjdk-18` Ubuntu:22.04:LTS	All versions, plus listed versions 18~15ea-418~20ea-118~32ea-118~36ea-118.0.2+9-2~22.04	None known
`openjdk-21` Ubuntu:22.04:LTS	before 21.0.13.0.3+1-1~22.04.1, plus listed versions 21.0.1+12-2~22.0421.0.2+13-1~22.04.121.0.3+9-1ubuntu1~22.04.121.0.4+7-1ubuntu2~22.0421.0.5+11-1ubuntu1~22.04 Show 8 moreShow less 21.0.6+7-1~22.04.121.0.7+6~us1-0ubuntu1~22.0421.0.8+9~us1-0ubuntu1~22.04.121.0.9+10-1~22.0421.0.10+7-1~22.0421.0.11+10-1~22.04.221.0.12+8-1~22.0421.0.12.1+1-1~22.04.4	21.0.13.0.3+1-1~22.04.1
`openjdk-25` Ubuntu:22.04:LTS	before 25.0.5.0.3+1-1~22.04.1, plus listed versions 25+36-1~22.04.225.0.1+8-1~22.0425.0.2+10-1~22.0425.0.3+9-2~22.04.225.0.4+7-1~22.0425.0.4.1+1-1~22.04.4	25.0.5.0.3+1-1~22.04.1
`openjdk-8` Ubuntu:22.04:LTS	before 8u512-b09~us1-0ubuntu1~22.04.1, plus listed versions 8u302-b08-0ubuntu28u312-b07-0ubuntu18u342-b07-0ubuntu1~22.048u352-ga-1~22.048u362-ga-0ubuntu1~22.04 Show 15 moreShow less 8u372-ga~us1-0ubuntu1~22.048u382-ga-1~22.04.18u392-ga-1~22.048u402-ga-2ubuntu1~22.048u412-ga-1~22.04.18u422-b05-1~22.048u432-ga~us1-0ubuntu2~22.048u442-b06~us1-0ubuntu1~22.048u452-ga~us1-0ubuntu1~22.048u462-ga~us1-0ubuntu2~22.04.28u472-ga-1~22.048u482-ga~us1-0ubuntu1~22.048u492-ga~us2-0ubuntu1~22.04.18u502-ga~us1-0ubuntu1~22.048u504-ga-1ubuntu1~22.04.3	8u512-b09~us1-0ubuntu1~22.04.1
`openjdk-lts` Ubuntu:22.04:LTS	before 11.0.33+9-1ubuntu1~22.04.1, plus listed versions 11.0.12+7-0ubuntu311.0.13+8-0ubuntu111.0.14+9-0ubuntu211.0.14.1+1-0ubuntu111.0.15+10-0ubuntu0.22.04.1 Show 19 moreShow less 11.0.16+8-0ubuntu1~22.0411.0.17+8-1ubuntu2~22.0411.0.18+10-0ubuntu1~22.0411.0.19+7~us1-0ubuntu1~22.04.111.0.20+8-1ubuntu1~22.0411.0.20.1+1-0ubuntu1~22.0411.0.21+9-0ubuntu1~22.0411.0.22+7-0ubuntu2~22.04.111.0.23+9-1ubuntu1~22.04.111.0.24+8-1ubuntu3~22.0411.0.25+9-1ubuntu1~22.0411.0.26+4-1ubuntu1~22.0411.0.27+6~us1-0ubuntu1~22.0411.0.28+6-1ubuntu1~22.04.111.0.29+7-1ubuntu1~22.0411.0.30+7-1ubuntu1~22.0411.0.31+11-1ubuntu1~22.04.211.0.32+9-1ubuntu1~22.0411.0.32.1+1-1ubuntu1~22.04	11.0.33+9-1ubuntu1~22.04.1
`openjdk-17` Ubuntu:24.04:LTS	before 17.0.21.0.3+1-1~24.04.1, plus listed versions 17.0.9~6ea-117.0.9+9-117.0.9+9-217.0.10~6ea-117.0.10+7-1 Show 13 moreShow less 17.0.11~7ea-117.0.11~7ea-1build117.0.11+9-117.0.12+7-1ubuntu2~24.0417.0.13+11-2ubuntu1~24.0417.0.14+7-1~24.0417.0.15+6~us1-0ubuntu1~24.0417.0.16+8~us1-0ubuntu1~24.04.117.0.17+10-1~24.0417.0.18+8-1~24.04.117.0.19+10-1~24.04.217.0.20+8-1~24.0417.0.20.1+1-1~24.04	17.0.21.0.3+1-1~24.04.1
`openjdk-21` Ubuntu:24.04:LTS	before 21.0.13.0.3+1-1~24.04.1, plus listed versions 21+35-121.0.1+12-221.0.1+12-321.0.2+13-121.0.2+13-2 Show 15 moreShow less 21.0.3~7ea-121.0.3~7ea-1build121.0.3~7ea-1build221.0.3+9-121.0.3+9-1ubuntu121.0.4+7-1ubuntu2~24.0421.0.5+11-1ubuntu1~24.0421.0.6+7-1~24.04.121.0.7+6~us1-0ubuntu1~24.0421.0.8+9~us1-0ubuntu1~24.04.121.0.9+10-1~24.0421.0.10+7-1~24.0421.0.11+10-1~24.04.221.0.12+8-1~24.0421.0.12.1+1-1~24.04.4	21.0.13.0.3+1-1~24.04.1
`openjdk-25` Ubuntu:24.04:LTS	before 25.0.5.0.3+1-1~24.04.1, plus listed versions 25+36-1~24.04.225.0.1+8-1~24.0425.0.2+10-1~24.0425.0.3+9-2~24.04.225.0.4+7-1~24.0425.0.4.1+1-1~24.04.4	25.0.5.0.3+1-1~24.04.1
`openjdk-8` Ubuntu:24.04:LTS	before 8u512-b09~us1-0ubuntu1~24.04.1, plus listed versions 8u382-ga-1ubuntu18u392-ga-18u402-ga-18u402-ga-28u402-ga-2ubuntu1 Show 14 moreShow less 8u402-ga-2ubuntu68u402-ga-2ubuntu78u402-ga-8build18u412-ga-1~24.04.28u422-b05-1~24.048u432-ga~us1-0ubuntu2~24.048u442-b06~us1-0ubuntu1~24.048u452-ga~us1-0ubuntu1~24.048u462-ga~us1-0ubuntu2~24.04.28u472-ga-1~24.048u482-ga~us1-0ubuntu1~24.048u492-ga~us2-0ubuntu1~24.04.18u502-ga~us1-0ubuntu1~24.048u504-ga-1ubuntu1~24.04.3	8u512-b09~us1-0ubuntu1~24.04.1
`openjdk-lts` Ubuntu:24.04:LTS	before 11.0.33+9-1ubuntu1~24.04.1, plus listed versions 11.0.20+8-1ubuntu111.0.21+9-0ubuntu111.0.22+7-0ubuntu211.0.23~7ea-1ubuntu111.0.23~7ea-1ubuntu2 Show 11 moreShow less 11.0.23+9-1ubuntu111.0.24+8-1ubuntu3~24.04.111.0.25+9-1ubuntu1~24.0411.0.26+4-1ubuntu1~24.0411.0.27+6~us1-0ubuntu1~24.0411.0.28+6-1ubuntu1~24.04.111.0.29+7-1ubuntu1~24.0411.0.30+7-1ubuntu1~24.0411.0.31+11-1ubuntu1~24.04.211.0.32+9-1ubuntu1~24.0411.0.32.1+1-1ubuntu1~24.04	11.0.33+9-1ubuntu1~24.04.1
`openjdk-17` Ubuntu:26.10	before 17.0.21.0.3+1-1~26.10.1, plus listed versions 17.0.18+8-117.0.19+10-117.0.20~5ea-117.0.20+8-117.0.20.1+1-117.0.21~6ea-1	17.0.21.0.3+1-1~26.10.1
`openjdk-17-crac` Ubuntu:26.10	All versions, plus listed versions 17.0.18+8-0ubuntu117.0.19+10-0ubuntu117.0.20+8-0ubuntu1	None known
`openjdk-21` Ubuntu:26.10	before 21.0.13.0.3+1-1~26.10.1, plus listed versions 21.0.11~8ea-121.0.11+10-121.0.12~5ea-121.0.12+8-121.0.12.1+1-1	21.0.13.0.3+1-1~26.10.1
`openjdk-21-crac` Ubuntu:26.10	All versions, plus listed versions 21.0.10+7-0ubuntu121.0.11+10-0ubuntu121.0.12+8-0ubuntu1	None known
`openjdk-25` Ubuntu:26.10	before 25.0.5.0.3+1-1~26.10.1, plus listed versions 25.0.3~7ea-225.0.3+9-225.0.4~4ea-125.0.4+7-125.0.4.1+1-1	25.0.5.0.3+1-1~26.10.1
`openjdk-27` Ubuntu:26.10	before 27.0.1.0.3+1-1~26.10.1, plus listed versions 27~19ea-127~34ea-127+35-1	27.0.1.0.3+1-1~26.10.1
`openjdk-8` Ubuntu:26.10	before 8u512-b09~us1-0ubuntu1~26.10.1, plus listed versions 8u482-ga~us1-0ubuntu18u492-ga~us2-0ubuntu28u502-ga~us1-0ubuntu18u504-ga-1ubuntu1	8u512-b09~us1-0ubuntu1~26.10.1
`openjdk-lts` Ubuntu:26.10	before 11.0.33+9-1ubuntu1~26.10.1, plus listed versions 11.0.30+7-1ubuntu111.0.31+11-1ubuntu211.0.32+9-1ubuntu111.0.32.1+1-1ubuntu111.0.32.1+1-1ubuntu2	11.0.33+9-1ubuntu1~26.10.1
`openjdk-17` Ubuntu:26.04:LTS	before 17.0.21.0.3+1-1~26.04.1, plus listed versions 17.0.17~8ea-117.0.17+10-117.0.18~7ea-117.0.18+8-117.0.19+10-1~26.04.217.0.20+8-1~26.0417.0.20.1+1-1~26.04	17.0.21.0.3+1-1~26.04.1
`openjdk-17-crac` Ubuntu:26.04:LTS	All versions, plus listed versions 17.0.16+8-0ubuntu117.0.17+10-0ubuntu117.0.18+8-0ubuntu117.0.19+10-0ubuntu1~26.04.117.0.20+8-0ubuntu1~26.04	None known
`openjdk-21` Ubuntu:26.04:LTS	before 21.0.13.0.3+1-1~26.04.1, plus listed versions 21.0.9~8ea-121.0.9+10-121.0.10~4ea-121.0.10~6ea-121.0.10+7-1 Show 5 moreShow less 21.0.11~5ea-121.0.11~8ea-121.0.11+10-1~26.04.221.0.12+8-1~26.0421.0.12.1+1-1~26.04.4	21.0.13.0.3+1-1~26.04.1
`openjdk-21-crac` Ubuntu:26.04:LTS	All versions, plus listed versions 21.0.8+9-0ubuntu121.0.9+10-0ubuntu121.0.10+7-0ubuntu121.0.11+10-0ubuntu1~26.04.121.0.12+8-0ubuntu1~26.04	None known
`openjdk-25` Ubuntu:26.04:LTS	before 25.0.5.0.3+1-1~26.04.1, plus listed versions 25+36-125.0.1+8-125.0.1+8-225.0.1+8-325.0.2+10-1 Show 5 moreShow less 25.0.3~5ea-225.0.3~7ea-225.0.3+9-2~26.04.225.0.4+7-1~26.0425.0.4.1+1-1~26.04.4	25.0.5.0.3+1-1~26.04.1
`openjdk-8` Ubuntu:26.04:LTS	before 8u512-b09~us1-0ubuntu1~26.04.1, plus listed versions 8u462-ga-18u472-ga~us1-0ubuntu18u472-ga-18u482-ga~us1-0ubuntu18u492-ga~us2-0ubuntu1~26.04.18u502-ga~us1-0ubuntu1~26.048u504-ga-1ubuntu1~26.04.3	8u512-b09~us1-0ubuntu1~26.04.1
`openjdk-lts` Ubuntu:26.04:LTS	before 11.0.33+9-1ubuntu1~26.04.1, plus listed versions 11.0.28+6-1ubuntu111.0.29+7-1ubuntu111.0.30+7-1ubuntu111.0.31+11-1ubuntu1~26.04.211.0.32+9-1ubuntu1~26.0411.0.32.1+1-1ubuntu1~26.04	11.0.33+9-1ubuntu1~26.04.1
`openjdk-25` Ubuntu:22.04:LTS From an advisory covering 41 CVEs	before 25.0.5.0.3+1-1~22.04.1, plus listed versions 25+36-1~22.04.225.0.1+8-1~22.0425.0.2+10-1~22.0425.0.3+9-2~22.04.225.0.4+7-1~22.0425.0.4.1+1-1~22.04.4	25.0.5.0.3+1-1~22.04.1
`openjdk-25` Ubuntu:24.04:LTS From an advisory covering 41 CVEs	before 25.0.5.0.3+1-1~24.04.1, plus listed versions 25+36-1~24.04.225.0.1+8-1~24.0425.0.2+10-1~24.0425.0.3+9-2~24.04.225.0.4+7-1~24.0425.0.4.1+1-1~24.04.4	25.0.5.0.3+1-1~24.04.1
`openjdk-25` Ubuntu:26.10 From an advisory covering 41 CVEs	before 25.0.5.0.3+1-1~26.10.1, plus listed versions 25.0.3~7ea-225.0.3+9-225.0.4~4ea-125.0.4+7-125.0.4.1+1-1	25.0.5.0.3+1-1~26.10.1
`openjdk-25` Ubuntu:26.04:LTS From an advisory covering 41 CVEs	before 25.0.5.0.3+1-1~26.04.1, plus listed versions 25+36-125.0.1+8-125.0.1+8-225.0.1+8-325.0.2+10-1 Show 5 moreShow less 25.0.3~5ea-225.0.3~7ea-225.0.3+9-2~26.04.225.0.4+7-1~26.0425.0.4.1+1-1~26.04.4	25.0.5.0.3+1-1~26.04.1
`openjdk-27` Ubuntu:26.10 From an advisory covering 40 CVEs	before 27.0.1.0.3+1-1~26.10.1, plus listed versions 27~19ea-127~34ea-127+35-1	27.0.1.0.3+1-1~26.10.1
`openjdk-8` Ubuntu:Pro:16.04:LTS From an advisory covering 37 CVEs	before 8u512-b09~us1-0ubuntu1~16.04.1, plus listed versions 8u66-b01-58u72-b05-1ubuntu18u72-b05-58u72-b05-68u72-b15-1 Show 45 moreShow less 8u72-b15-2ubuntu18u72-b15-2ubuntu38u72-b15-3ubuntu18u77-b03-1ubuntu28u77-b03-3ubuntu18u77-b03-3ubuntu28u77-b03-3ubuntu38u91-b14-0ubuntu4~16.04.18u91-b14-3ubuntu1~16.04.18u111-b14-2ubuntu0.16.04.28u121-b13-0ubuntu1.16.04.28u131-b11-0ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.38u151-b12-0ubuntu0.16.04.28u162-b12-0ubuntu0.16.04.28u171-b11-0ubuntu0.16.04.18u181-b13-0ubuntu0.16.04.18u181-b13-1ubuntu0.16.04.18u191-b12-0ubuntu0.16.04.18u191-b12-2ubuntu0.16.04.18u212-b03-0ubuntu1.16.04.18u222-b10-1ubuntu1~16.04.18u232-b09-0ubuntu1~16.04.18u242-b08-0ubuntu3~16.048u252-b09-1~16.048u265-b01-0ubuntu2~16.048u272-b10-0ubuntu1~16.048u275-b01-0ubuntu1~16.048u282-b08-0ubuntu1~16.048u292-b10-0ubuntu1~16.04.18u312-b07-0ubuntu1~16.048u342-b07-0ubuntu1~16.048u352-ga-1~16.048u362-ga-0ubuntu1~16.04.18u372-ga~us1-0ubuntu1~16.048u382-ga-1~16.04.18u392-ga-1~16.048u432-ga~us1-0ubuntu2~16.04.48u442-b06~us1-0ubuntu1~16.048u452-ga~us1-0ubuntu1~16.04.18u462-ga~us1-0ubuntu2~16.04.28u472-ga-1~16.048u482-ga~us1-0ubuntu1~16.048u492-ga~us2-0ubuntu1~16.04.1	8u512-b09~us1-0ubuntu1~16.04.1
`openjdk-8` Ubuntu:Pro:18.04:LTS From an advisory covering 37 CVEs	before 8u512-b09~us1-0ubuntu1~18.04.1, plus listed versions 8u144-b01-28u151-b12-18u162-b12-18u171-b11-0ubuntu0.18.04.18u181-b13-0ubuntu0.18.04.1 Show 32 moreShow less 8u181-b13-1ubuntu0.18.04.18u191-b12-0ubuntu0.18.04.18u191-b12-2ubuntu0.18.04.18u212-b03-0ubuntu1.18.04.18u222-b10-1ubuntu1~18.04.18u232-b09-0ubuntu1~18.04.18u242-b08-0ubuntu3~18.048u252-b09-1~18.048u265-b01-0ubuntu2~18.048u272-b10-0ubuntu1~18.048u275-b01-0ubuntu1~18.048u282-b08-0ubuntu1~18.048u292-b10-0ubuntu1~18.048u312-b07-0ubuntu1~18.048u342-b07-0ubuntu1~18.048u352-ga-1~18.048u362-ga-0ubuntu1~18.04.18u372-ga~us1-0ubuntu1~18.048u382-ga-1~18.04.18u392-ga-1~18.048u402-ga-2ubuntu1~18.048u412-ga-1~18.04.18u422-b05-1~18.048u432-ga~us1-0ubuntu2~18.048u442-b06~us1-0ubuntu1~18.048u452-ga~us1-0ubuntu1~18.048u462-ga~us1-0ubuntu2~18.04.28u472-ga-1~18.048u482-ga~us1-0ubuntu1~18.048u492-ga~us2-0ubuntu1~18.04.18u502-ga~us1-0ubuntu1~18.048u504-ga-1ubuntu1~18.04.3	8u512-b09~us1-0ubuntu1~18.04.1
`openjdk-8` Ubuntu:Pro:20.04:LTS From an advisory covering 37 CVEs	before 8u512-b09~us1-0ubuntu1~20.04.1, plus listed versions 8u232-b09-0ubuntu18u232-b09-18u242-b04-18u242-b08-0ubuntu38u252-b07-1 Show 25 moreShow less 8u252-b09-1ubuntu18u265-b01-0ubuntu2~20.048u272-b10-0ubuntu1~20.048u275-b01-0ubuntu1~20.048u282-b08-0ubuntu1~20.048u292-b10-0ubuntu1~20.048u312-b07-0ubuntu1~20.048u342-b07-0ubuntu1~20.048u352-ga-1~20.048u362-ga-0ubuntu1~20.04.18u372-ga~us1-0ubuntu1~20.048u382-ga-1~20.04.18u392-ga-1~20.048u402-ga-2ubuntu1~20.048u412-ga-1~20.04.18u422-b05-1~20.048u432-ga~us1-0ubuntu2~20.048u442-b06~us1-0ubuntu1~20.048u452-ga~us1-0ubuntu1~20.048u462-ga~us1-0ubuntu2~20.04.28u472-ga-1~20.048u482-ga~us1-0ubuntu1~20.048u492-ga~us2-0ubuntu1~20.04.18u502-ga~us1-0ubuntu1~20.048u504-ga-1ubuntu1~20.04.3	8u512-b09~us1-0ubuntu1~20.04.1
`openjdk-8` Ubuntu:22.04:LTS From an advisory covering 37 CVEs	before 8u512-b09~us1-0ubuntu1~22.04.1, plus listed versions 8u302-b08-0ubuntu28u312-b07-0ubuntu18u342-b07-0ubuntu1~22.048u352-ga-1~22.048u362-ga-0ubuntu1~22.04 Show 15 moreShow less 8u372-ga~us1-0ubuntu1~22.048u382-ga-1~22.04.18u392-ga-1~22.048u402-ga-2ubuntu1~22.048u412-ga-1~22.04.18u422-b05-1~22.048u432-ga~us1-0ubuntu2~22.048u442-b06~us1-0ubuntu1~22.048u452-ga~us1-0ubuntu1~22.048u462-ga~us1-0ubuntu2~22.04.28u472-ga-1~22.048u482-ga~us1-0ubuntu1~22.048u492-ga~us2-0ubuntu1~22.04.18u502-ga~us1-0ubuntu1~22.048u504-ga-1ubuntu1~22.04.3	8u512-b09~us1-0ubuntu1~22.04.1
`openjdk-8` Ubuntu:24.04:LTS From an advisory covering 37 CVEs	before 8u512-b09~us1-0ubuntu1~24.04.1, plus listed versions 8u382-ga-1ubuntu18u392-ga-18u402-ga-18u402-ga-28u402-ga-2ubuntu1 Show 14 moreShow less 8u402-ga-2ubuntu68u402-ga-2ubuntu78u402-ga-8build18u412-ga-1~24.04.28u422-b05-1~24.048u432-ga~us1-0ubuntu2~24.048u442-b06~us1-0ubuntu1~24.048u452-ga~us1-0ubuntu1~24.048u462-ga~us1-0ubuntu2~24.04.28u472-ga-1~24.048u482-ga~us1-0ubuntu1~24.048u492-ga~us2-0ubuntu1~24.04.18u502-ga~us1-0ubuntu1~24.048u504-ga-1ubuntu1~24.04.3	8u512-b09~us1-0ubuntu1~24.04.1
`openjdk-8` Ubuntu:26.10 From an advisory covering 37 CVEs	before 8u512-b09~us1-0ubuntu1~26.10.1, plus listed versions 8u482-ga~us1-0ubuntu18u492-ga~us2-0ubuntu28u502-ga~us1-0ubuntu18u504-ga-1ubuntu1	8u512-b09~us1-0ubuntu1~26.10.1
`java-17-openjdk` openSUSE:Tumbleweed From an advisory covering 35 CVEs	before 17.0.21.0-1.1	17.0.21.0-1.1
`java-21-openjdk` openSUSE:Tumbleweed From an advisory covering 38 CVEs	before 21.0.13.0-1.1	21.0.13.0-1.1
`java-25-openjdk` openSUSE:Tumbleweed From an advisory covering 39 CVEs	before 25.0.5.0-1.1	25.0.5.0-1.1
`java-11-openjdk` openSUSE:Tumbleweed From an advisory covering 38 CVEs	before 11.0.33.0-1.1	11.0.33.0-1.1
`java-11-openj9` openSUSE:Tumbleweed From an advisory covering 19 CVEs	before 11.0.33.0-1.1	11.0.33.0-1.1
`java-17-openj9` openSUSE:Tumbleweed From an advisory covering 18 CVEs	before 17.0.21.0-1.1	17.0.21.0-1.1
`java-21-openj9` openSUSE:Tumbleweed From an advisory covering 20 CVEs	before 21.0.13.0-1.1	21.0.13.0-1.1
`java-1_8_0-openjdk` openSUSE:Tumbleweed From an advisory covering 36 CVEs	before 1.8.0.512-1.1	1.8.0.512-1.1

What each source reports

CVE List Score used3.7

Record: CVE-2026-87367
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness: CWE-200
Updated: 2026-11-02

EUVDEUVD-2026-1064083.7

Record: EUVD-2026-106408
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

GitHub AdvisoriesGHSA-m2mw-3v6r-66h43.7

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...

Record: GHSA-m2mw-3v6r-66h4
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness: CWE-200
Updated: 2026-11-02

NVD3.7

Record: CVE-2026-87367
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness: CWE-200
Updated: 2026-11-02

OSVALPINE-CVE-2026-873673.7

Record: ALPINE-CVE-2026-87367
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-03

OSVBELL-CVE-2026-873673.7

Record: BELL-CVE-2026-87367
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-10

Show 41 moreShow less

OSVDEBIAN-CVE-2026-873673.7

Record: DEBIAN-CVE-2026-87367
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

OSVRHSA-2026:883476.8

Red Hat Security Advisory: java-25-openjdk security update

Record: RHSA-2026:88347
CVSS 3.1: 6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated: 2026-11-13

OSVRHSA-2026:883496.8

Red Hat Security Advisory: java-21-openjdk security update for RHEL 8 and 9

Record: RHSA-2026:88349
CVSS 3.1: 6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated: 2026-11-13

OSVRHSA-2026:883526.8

Red Hat Security Advisory: java-17-openjdk security update for RHEL 8

Record: RHSA-2026:88352
CVSS 3.1: 6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated: 2026-11-13

OSVRHSA-2026:905006.8

Red Hat Security Advisory: java-17-openjdk security update for RHEL 9

Record: RHSA-2026:90500
CVSS 3.1: 6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated: 2026-11-13

OSVRHSA-2026:905046.8

Red Hat Security Advisory: java-21-openjdk security update for RHEL 10

Record: RHSA-2026:90504
CVSS 3.1: 6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated: 2026-11-13

OSVRHSA-2026:940698.1

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record: RHSA-2026:94069
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated: 2026-11-13

OSVRHSA-2026:941118.1

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record: RHSA-2026:94111
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated: 2026-11-13

OSVRHSA-2026:944036.8

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record: RHSA-2026:94403
CVSS 3.1: 6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated: 2026-11-13

OSVRHSA-2026:945206.8

Red Hat Security Advisory: Java 11 OpenJDK ELS Security Update

Record: RHSA-2026:94520
CVSS 3.1: 6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated: 2026-11-13

OSVRHSA-2026:946256.8

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record: RHSA-2026:94625
CVSS 3.1: 6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated: 2026-11-13

OSVRHSA-2026:955986.8

Red Hat Security Advisory: java-1.8.0-openjdk security update

Record: RHSA-2026:95598
CVSS 3.1: 6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated: 2026-11-13

OSVRHSA-2026:956096.8

Red Hat Security Advisory: java-1.8.0-openjdk security update for RHEL 8

Record: RHSA-2026:95609
CVSS 3.1: 6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated: 2026-11-13

OSVRHSA-2026:956136.8

Red Hat Security Advisory: java-1.8.0-openjdk security update for RHEL 9

Record: RHSA-2026:95613
CVSS 3.1: 6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated: 2026-11-13

OSVRHSA-2026:958338.1

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record: RHSA-2026:95833
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated: 2026-11-13

OSVRLSA-2026:883476.8

Important: java-25-openjdk security update

The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Improve C2 loop transformations (CVE-2026-83378)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance Vector Processing (CVE-2026-87255)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance HTTP Server (CVE-2026-87291)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance HTTP Client (CVE-2026-91332)
JDK: Improve ciphertext handling (CVE-2026-91333)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance jmod handling (CVE-2026-91375)
JDK: Enhance JShell (CVE-2026-91379)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance HTTP client caching (CVE-2026-91394)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP server (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)
JDK: Enhance C2 comparisons (CVE-2026-91487)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record: RLSA-2026:88347
CVSS 3.1: 6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated: 2026-11-02

OSVRLSA-2026:883526.8

Important: java-17-openjdk security update for Rocky Linux 8

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance HTTP Client (CVE-2026-91332)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance jmod handling (CVE-2026-91375)
JDK: Enhance JShell (CVE-2026-91379)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance Image Processing (CVE-2026-91382)
JDK: Enhance HTTP client caching (CVE-2026-91394)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP server (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)
JDK: Enhance C2 comparisons (CVE-2026-91487)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record: RLSA-2026:88352
CVSS 3.1: 6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated: 2026-11-02

OSVRLSA-2026:956096.8

Important: java-1.8.0-openjdk security update for Rocky Linux 8

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance RMI connections (CVE-2026-87293)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance Font Rendering (CVE-2026-91381)
JDK: Enhance Image Processing (CVE-2026-91382)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance Pack200 unpacking (CVE-2026-91395)
JDK: Improve Pack200 handling (CVE-2026-91396)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance JGSS (CVE-2026-91411)
JDK: Enhance CORBA (CVE-2026-91417)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP Server Handler (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate repository rather than one provided by OpenJDK. For updates to remove the compromised eMudhra certificates, please update the ca-certificates package.

Record: RLSA-2026:95609
CVSS 3.1: 6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated: 2026-11-14

OSVUBUNTU-CVE-2026-873673.7

Record: UBUNTU-CVE-2026-87367
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-11

OSVALSA-2026:88347No score

Important: java-25-openjdk security update

The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Improve C2 loop transformations (CVE-2026-83378)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance Vector Processing (CVE-2026-87255)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance HTTP Server (CVE-2026-87291)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance HTTP Client (CVE-2026-91332)
JDK: Improve ciphertext handling (CVE-2026-91333)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance jmod handling (CVE-2026-91375)
JDK: Enhance JShell (CVE-2026-91379)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance HTTP client caching (CVE-2026-91394)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP server (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)
JDK: Enhance C2 comparisons (CVE-2026-91487)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record: ALSA-2026:88347
Updated: 2026-11-02

OSVALSA-2026:88349No score

Important: java-21-openjdk security update for AlmaLinux 8 and 9

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Improve C2 loop transformations (CVE-2026-83378)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance HTTP Server (CVE-2026-87291)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance HTTP Client (CVE-2026-91332)
JDK: Improve ciphertext handling (CVE-2026-91333)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance jmod handling (CVE-2026-91375)
JDK: Enhance JShell (CVE-2026-91379)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance HTTP client caching (CVE-2026-91394)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP server (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)
JDK: Enhance C2 comparisons (CVE-2026-91487)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record: ALSA-2026:88349
Updated: 2026-11-02

OSVALSA-2026:88352No score

Important: java-17-openjdk security update for AlmaLinux 8

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance HTTP Client (CVE-2026-91332)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance jmod handling (CVE-2026-91375)
JDK: Enhance JShell (CVE-2026-91379)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance Image Processing (CVE-2026-91382)
JDK: Enhance HTTP client caching (CVE-2026-91394)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP server (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)
JDK: Enhance C2 comparisons (CVE-2026-91487)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record: ALSA-2026:88352
Updated: 2026-11-02

OSVALSA-2026:90500No score

Important: java-17-openjdk security update for AlmaLinux 9

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance HTTP Client (CVE-2026-91332)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance jmod handling (CVE-2026-91375)
JDK: Enhance JShell (CVE-2026-91379)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance Image Processing (CVE-2026-91382)
JDK: Enhance HTTP client caching (CVE-2026-91394)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP server (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)
JDK: Enhance C2 comparisons (CVE-2026-91487)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record: ALSA-2026:90500
Updated: 2026-11-02

OSVALSA-2026:90504No score

Important: java-21-openjdk security update for AlmaLinux 10

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Improve C2 loop transformations (CVE-2026-83378)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance HTTP Server (CVE-2026-87291)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance HTTP Client (CVE-2026-91332)
JDK: Improve ciphertext handling (CVE-2026-91333)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance jmod handling (CVE-2026-91375)
JDK: Enhance JShell (CVE-2026-91379)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance HTTP client caching (CVE-2026-91394)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP server (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)
JDK: Enhance C2 comparisons (CVE-2026-91487)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 & CVE-2026-114820) should be resolved by updating the ca-certificates package.

Record: ALSA-2026:90504
Updated: 2026-11-02

OSVALSA-2026:95609No score

Important: java-1.8.0-openjdk security update for AlmaLinux 8

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

JDK: Enhance PKCS5 padding (CVE-2026-83374)
JDK: Enhance TLS certificate handling (CVE-2026-83376)
JDK: Enhance LDAP logins (CVE-2026-83380)
JDK: Enhance SASL Authentication (CVE-2026-83381)
JDK: Enhance WebRowSets (CVE-2026-83387)
JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)
JDK: Enhance Certificate Name Checks (CVE-2026-87294)
JDK: Enhance XPath Expressions (CVE-2026-87290)
JDK: Enhance Network Clients (CVE-2026-87292)
JDK: Enhance RMI connections (CVE-2026-87293)
JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)
JDK: Enhance XML Processing (CVE-2026-83400)
JDK: Enhance JPEG loading (CVE-2026-91334)
JDK: Enhance Template Handling (CVE-2026-87367)
JDK: Enhance Image Handling (CVE-2026-91335)
JDK: Enhance Preferences (CVE-2026-91380)
JDK: Enhance TLS handshakes (CVE-2026-91373)
JDK: Enhance Font Rendering (CVE-2026-91381)
JDK: Enhance Image Processing (CVE-2026-91382)
JDK: Enhance jstatd (CVE-2026-91374)
JDK: Enhance Pack200 unpacking (CVE-2026-91395)
JDK: Improve Pack200 handling (CVE-2026-91396)
JDK: Enhance diagnostic sessions (CVE-2026-91397)
JDK: Enhance SOCKS5 support (CVE-2026-91398)
JDK: Enhance MIDI file handling (CVE-2026-91400)
JDK: Enhance zipfs (CVE-2026-91410)
JDK: Enhance JGSS (CVE-2026-91411)
JDK: Enhance CORBA (CVE-2026-91417)
JDK: Enhance font rendering (CVE-2026-91415)
JDK: Enhance HTTP server parsing (CVE-2026-91451)
JDK: Enhance HTTP Server Handler (CVE-2026-91452)
JDK: Improve HTTP headers (CVE-2026-91453)
JDK: Enhance GIF loading (CVE-2026-91418)
JDK: Enhance TLS Extensions (CVE-2026-91461)
JDK: Enhance krb5 tokens (CVE-2026-91462)
JDK: Enhance krb5 client (CVE-2026-91463)
JDK: Enhance Kerberos validation (CVE-2026-91464)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:95609
Updated: 2026-11-13

OSVAZL-112496No score

CVE-2026-87367 affecting package python-tensorboard 2.16.2-6

Record: AZL-112496
Updated: 2026-11-05

OSVMGASA-2026-0572No score

Updated java-latest-openjdk, timezone, java-21-openjdk, java-17-openjdk packages fix security vulnerabilities

Enhance PKCS5 padding. (CVE-2026-83374) Enhance TLS certificate handling. (CVE-2026-83376) Improve C2 loop transformations. (CVE-2026-83378) Enhance LDAP logins. (CVE-2026-83380) Enhance SASL Authentication. (CVE-2026-83381) Enhance WebRowSets. (CVE-2026-83387) Enhance HTTP Client Response Handling. (CVE-2026-83395) Enhance XML Processing. (CVE-2026-83400) Enhance XPath Expressions. (CVE-2026-87290) Enhance HTTP Server. (CVE-2026-87291) Enhance Network Clients. (CVE-2026-87292) Enhance Certificate Name Checks. (CVE-2026-87294) Enhance Template Handling. (CVE-2026-87367) Enhance HTTP Client. (CVE-2026-91332) Improve ciphertext handling. (CVE-2026-91333) Enhance JPEG loading. (CVE-2026-91334) Enhance Image Handling. (CVE-2026-91335) Enhance TLS handshakes. (CVE-2026-91373) Enhance jstatd. (CVE-2026-91374) Enhance jmod handling. (CVE-2026-91375) Enhance JShell. (CVE-2026-91379) Enhance Preferences. (CVE-2026-91380) Enhance HTTP client caching. (CVE-2026-91394) Enhance diagnostic sessions. (CVE-2026-91397) Enhance SOCKS5 support. (CVE-2026-91398) Enhance MIDI file handling. (CVE-2026-91400) Enhance zipfs. (CVE-2026-91410) Enhance font rendering. (CVE-2026-91415) Enhance GIF loading. (CVE-2026-91418) Enhance HTTP server parsing. (CVE-2026-91451) Enhance HTTP server. (CVE-2026-91452) Improve HTTP headers. (CVE-2026-91453) Enhance TLS Extensions. (CVE-2026-91461) Enhance krb5 tokens. (CVE-2026-91462) Enhance krb5 client. (CVE-2026-91463) Enhance Kerberos validation. (CVE-2026-91464) Enhance C2 comparisons. (CVE-2026-91487) Enhance Certificate Constraint Checking. (CVE-2026-101516)

Record: MGASA-2026-0572
Updated: 2026-11-03

OSVopenSUSE-SU-2026:12294-1No score

java-17-openjdk-17.0.21.0-1.1 on GA media

These are all security issues fixed in the java-17-openjdk-17.0.21.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12294-1
Updated: 2026-11-02

OSVopenSUSE-SU-2026:12328-1No score

java-21-openjdk-21.0.13.0-1.1 on GA media

These are all security issues fixed in the java-21-openjdk-21.0.13.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12328-1
Updated: 2026-11-02

OSVopenSUSE-SU-2026:12329-1No score

java-25-openjdk-25.0.5.0-1.1 on GA media

These are all security issues fixed in the java-25-openjdk-25.0.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12329-1
Updated: 2026-11-02

OSVopenSUSE-SU-2026:12418-1No score

java-11-openjdk-11.0.33.0-1.1 on GA media

These are all security issues fixed in the java-11-openjdk-11.0.33.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12418-1
Updated: 2026-11-05

OSVopenSUSE-SU-2026:12433-1No score

java-11-openj9-11.0.33.0-1.1 on GA media

These are all security issues fixed in the java-11-openj9-11.0.33.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12433-1
Updated: 2026-11-06

OSVopenSUSE-SU-2026:12434-1No score

java-17-openj9-17.0.21.0-1.1 on GA media

These are all security issues fixed in the java-17-openj9-17.0.21.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12434-1
Updated: 2026-11-06

OSVopenSUSE-SU-2026:12435-1No score

java-21-openj9-21.0.13.0-1.1 on GA media

These are all security issues fixed in the java-21-openj9-21.0.13.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12435-1
Updated: 2026-11-06

OSVopenSUSE-SU-2026:12513-1No score

java-1_8_0-openjdk-1.8.0.512-1.1 on GA media

These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.512-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:12513-1
Updated: 2026-11-11

OSVUSN-9004-1No score

openjdk-25 vulnerabilities

It was discovered that the 2D component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to cause a denial of service or to read or modify sensitive data. (CVE-2026-91415)

It was discovered that the Networking component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-91398)

It was discovered that the 2D component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to cause a denial of service or to modify sensitive data. (CVE-2026-91382)

It was discovered that the JGSS component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to cause a denial of service or to modify sensitive data. (CVE-2026-91411)

It was discovered that the Networking component of OpenJDK 25 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service or to modify sensitive data. (CVE-2026-83395)

It was discovered that the Security component of OpenJDK 25 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-83381, CVE-2026-87294)

It was discovered that the JAXP component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-87290)

It was discovered that the JDBC component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83387)

It was discovered that the JGSS component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-91462)

It was discovered that the Security component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83374)

It was discovered that the Libraries component of OpenJDK 25 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-91410)

It was discovered that the Networking component of OpenJDK 25 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-87292, CVE-2026-91332, CVE-2026-91451, CVE-2026-91452)

It was discovered that the JSSE component of OpenJDK 25 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-91373)

It was discovered that the JAAS component of OpenJDK 25 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83380)

It was discovered that the JAXP component of OpenJDK 25 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-83400)

It was discovered that the JGSS component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-91463, CVE-2026-91464)

It was discovered that the Lightweight HTTP Server component of OpenJDK 25 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-91453)

It was discovered that the ImageIO component of OpenJDK 25 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-91418)

It was discovered that the Compiler component of OpenJDK 25 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91487)

It was discovered that the Serviceability component of OpenJDK 25 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91374) …

Record: USN-9004-1
Updated: 2026-11-11

OSVUSN-9005-1No score

openjdk-27 vulnerabilities

It was discovered that the 2D component of OpenJDK 27 did not correctly authenticate users. A remote attacker could possibly use this issue to cause a denial of service or to read or modify sensitive data. (CVE-2026-91415)

It was discovered that the Networking component of OpenJDK 27 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-91398)

It was discovered that the Networking component of OpenJDK 27 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service or to modify sensitive data. (CVE-2026-83395)

It was discovered that the Security component of OpenJDK 27 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-83381, CVE-2026-87294)

It was discovered that the JAXP component of OpenJDK 27 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-87290)

It was discovered that the JDBC component of OpenJDK 27 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83387)

It was discovered that the JGSS component of OpenJDK 27 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-91462)

It was discovered that the Security component of OpenJDK 27 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83374)

It was discovered that the Libraries component of OpenJDK 27 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-91410)

It was discovered that the Networking component of OpenJDK 27 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-87292, CVE-2026-91332, CVE-2026-91451, CVE-2026-91452)

It was discovered that the JSSE component of OpenJDK 27 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-91373)

It was discovered that the JAAS component of OpenJDK 27 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83380)

It was discovered that the JAXP component of OpenJDK 27 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-83400)

It was discovered that the JGSS component of OpenJDK 27 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-91463, CVE-2026-91464)

It was discovered that the Lightweight HTTP Server component of OpenJDK 27 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-91453)

It was discovered that the ImageIO component of OpenJDK 27 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-91418)

It was discovered that the Compiler component of OpenJDK 27 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91487)

It was discovered that the Serviceability component of OpenJDK 27 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91374)

It was discovered that the Libraries component of OpenJDK 27 did not correctly authenticate users. A local attacker could possibly use this issue to modify sensitive data. (CVE-2026-91375)

It was discovered that the JDK tools component of OpenJDK 27 did not correctly authenticate users. A local attacker could possibly use this issue to modify sensitive data. (CVE-2026-91379)

It was discovered that the Utility component of OpenJDK…

Record: USN-9005-1
Updated: 2026-11-12

OSVUSN-9009-1No score

openjdk-8 vulnerabilities

It was discovered that the Security component of OpenJDK 8 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83374)

It was discovered that the JSSE component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83376, CVE-2026-91461)

It was discovered that the JAAS component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83380)

It was discovered that the Security component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-83381, CVE-2026-87294)

It was discovered that the JDBC component of OpenJDK 8 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83387)

It was discovered that the Networking component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service or to modify sensitive data. (CVE-2026-83395)

It was discovered that the JAXP component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-83400)

It was discovered that the JAXP component of OpenJDK 8 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-87290)

It was discovered that the Networking component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-87292, CVE-2026-91451, CVE-2026-91452)

It was discovered that the RMI component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-87293)

It was discovered that the JAXP component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-87367)

It was discovered that the ImageIO component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-91334)

It was discovered that the AWT component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-91335)

It was discovered that the JSSE component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-91373)

It was discovered that the Serviceability component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91374)

It was discovered that the Utility component of OpenJDK 8 did not correctly authorize users. A local attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91380)

It was discovered that the 2D component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-91381)

It was discovered that the 2D component of OpenJDK 8 did not correctly authenticate users. A remote attacker could possibly use this issue to cause a denial of service or to modify sensitive data. (CVE-2026-91382)

It was discovered that the Utility component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service or to modify sensitive data. (CVE-2026-91395, CVE-2026-91396)

It was discovered that the Serviceability component of OpenJDK 8 did not correctly authorize users. A local attacker could possibly use this issue to cause a denial of service or to modify sensitive data. (CVE-2026-91397)

It was discovered that the Networking component of OpenJDK 8 did not…

Record: USN-9009-1
Updated: 2026-11-10

OSVUSN-9010-1No score

openjdk-lts vulnerabilities

It was discovered that the Security component of OpenJDK 11 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83374)

It was discovered that the JSSE component of OpenJDK 11 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83376, CVE-2026-91461)

It was discovered that the JAAS component of OpenJDK 11 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83380)

It was discovered that the Security component of OpenJDK 11 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-83381, CVE-2026-87294)

It was discovered that the JDBC component of OpenJDK 11 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83387)

It was discovered that the Networking component of OpenJDK 11 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service or to modify sensitive data. (CVE-2026-83395)

It was discovered that the JAXP component of OpenJDK 11 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-83400)

It was discovered that the JAXP component of OpenJDK 11 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-87290)

It was discovered that the Networking component of OpenJDK 11 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-87292, CVE-2026-91332, CVE-2026-91451, CVE-2026-91452)

It was discovered that the JAXP component of OpenJDK 11 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-87367)

It was discovered that the ImageIO component of OpenJDK 11 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-91334)

It was discovered that the AWT component of OpenJDK 11 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-91335)

It was discovered that the JSSE component of OpenJDK 11 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-91373)

It was discovered that the Serviceability component of OpenJDK 11 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91374)

It was discovered that the Libraries component of OpenJDK 11 did not correctly authenticate users. A local attacker could possibly use this issue to modify sensitive data. (CVE-2026-91375)

It was discovered that the JDK tools component of OpenJDK 11 did not correctly authenticate users. A local attacker could possibly use this issue to modify sensitive data. (CVE-2026-91379)

It was discovered that the Utility component of OpenJDK 11 did not correctly authorize users. A local attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91380)

It was discovered that the 2D component of OpenJDK 11 did not correctly authenticate users. A remote attacker could possibly use this issue to cause a denial of service or to modify sensitive data. (CVE-2026-91382)

It was discovered that the Networking component of OpenJDK 11 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-91394)

It was discovered that the Utility component of OpenJDK 11 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service or to modify sensitive data. (CVE-2026-91395, CVE-2026-91396)

It was discovered that the Serviceability component of…

Record: USN-9010-1
Updated: 2026-11-10

OSVUSN-9014-1No score

openjdk-17 vulnerabilities

It was discovered that the Security component of OpenJDK 17 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83374)

It was discovered that the JSSE component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83376)

It was discovered that the JAAS component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83380)

It was discovered that the Security component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-83381)

It was discovered that the JDBC component of OpenJDK 17 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83387)

It was discovered that the Networking component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service or modify sensitive data. (CVE-2026-83395)

It was discovered that the JAXP component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-83400)

It was discovered that the JAXP component of OpenJDK 17 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-87290)

It was discovered that the Networking component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-87292)

It was discovered that the Security component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-87294)

It was discovered that the JAXP component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-87367)

It was discovered that the Networking component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-91332)

It was discovered that the ImageIO component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-91334)

It was discovered that the AWT component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-91335)

It was discovered that the JSSE component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-91373)

It was discovered that the Serviceability component of OpenJDK 17 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91374)

It was discovered that the Libraries component of OpenJDK 17 did not correctly authenticate users. A local attacker could possibly use this issue to modify sensitive data. (CVE-2026-91375)

It was discovered that the JDK tools component of OpenJDK 17 did not correctly authenticate users. A local attacker could possibly use this issue to modify sensitive data. (CVE-2026-91379)

It was discovered that the Utility component of OpenJDK 17 did not correctly authorize users. A local attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91380)

It was discovered that the 2D component of OpenJDK 17 did not correctly authenticate users. A remote attacker could possibly use this issue to cause a denial of service or modify sensitive data. (CVE-2026-91382)

It was discovered that the Networking component of OpenJDK 17 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data.…

Record: USN-9014-1
Updated: 2026-11-12

OSVUSN-9015-1No score

openjdk-21 vulnerabilities

It was discovered that the Security component of OpenJDK 21 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83374)

It was discovered that the JSSE component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83376)

It was discovered that the Compiler component of OpenJDK 21 did not correctly authorize users. An unauthenticated remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-83378)

It was discovered that the JAAS component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83380)

It was discovered that the Security component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-83381)

It was discovered that the JDBC component of OpenJDK 21 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83387)

It was discovered that the Networking component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service or modify sensitive data. (CVE-2026-83395)

It was discovered that the JAXP component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-83400)

It was discovered that the JAXP component of OpenJDK 21 did not correctly authenticate users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-87290)

It was discovered that the Networking component of OpenJDK 21 did not correctly authorize users. An unauthenticated remote attacker could possibly use this issue to read sensitive data. (CVE-2026-87291)

It was discovered that the Networking component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-87292)

It was discovered that the Security component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-87294)

It was discovered that the JAXP component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-87367)

It was discovered that the Networking component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-91332)

It was discovered that the Security component of OpenJDK 21 did not correctly authorize users. An unauthenticated remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91333)

It was discovered that the ImageIO component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-91334)

It was discovered that the AWT component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-91335)

It was discovered that the JSSE component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-91373)

It was discovered that the Serviceability component of OpenJDK 21 did not correctly authorize users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-91374)

It was discovered that the Libraries component of OpenJDK 21 did not correctly authenticate users. A local attacker could possibly use this issue to modify sensitive data. (CVE-2026-91375)

It was discovered that the JDK tools component of OpenJDK 21 did not correctly authenticate users. A local attacker could possibly use this issue to…

Record: USN-9015-1
Updated: 2026-11-12

History

History
Recorded	Changed	Sources
Nov 14, 2026	affected, aliases, references	OSV
Nov 13, 2026	affected, aliases, references	OSV
Nov 13, 2026	affected, aliases, references	OSV
Nov 12, 2026	affected, aliases, references	OSV
Nov 11, 2026	affected, aliases, references	OSV
Nov 11, 2026	affected, aliases, references	OSV
Nov 10, 2026	affected	OSV
Nov 10, 2026	affected, aliases, references	OSV
Nov 9, 2026	affected	OSV
Nov 9, 2026	affected	OSV

Show 7 moreShow less

History
Recorded	Changed	Sources
Nov 6, 2026	affected, aliases	OSV
Nov 6, 2026	affected
Nov 5, 2026	affected, aliases, references	OSV
Nov 5, 2026	facts	OSV
Nov 3, 2026	affected, aliases, references	OSV
Nov 3, 2026	affected, aliases, references	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV