{"id":"CVE-2025-50059","aliases":["ALPINE-CVE-2025-50059","ALSA-2025:10867","ALSA-2025:10873","BELL-CVE-2025-50059","BIT-java-2025-50059","BIT-java-min-2025-50059","BIT-jre-2025-50059","CLSA-2025-1754043770","CLSA-2025-1754649468","CLSA-2025-1755112965","CLSA-2025-1755603149","CLSA-2025-1756203636","CLSA-2026-1772113038","DEBIAN-CVE-2025-50059","DLA-4248-1","DLA-4275-1","DSA-5972-1","EUVD-2025-21519","GHSA-wpm9-mhxc-7hwj","MGASA-2025-0233","OESA-2026-3759","OESA-2026-3760","OESA-2026-3761","OESA-2026-3892","OESA-2026-3893","OESA-2026-3894","OESA-2026-3895","OESA-2026-3927","OESA-2026-4020","RHSA-2025:10865","RHSA-2025:10867","RHSA-2025:10873","RHSA-2025:13656","RLSA-2025:10867","RLSA-2025:10873","SUSE-SU-2025:02545-1","SUSE-SU-2025:02563-1","SUSE-SU-2025:02657-1","SUSE-SU-2025:02666-1","SUSE-SU-2025:02667-1","SUSE-SU-2025:03236-1","SUSE-SU-2025:03262-1","UBUNTU-CVE-2025-50059","USN-7668-1","USN-7669-1","USN-7672-1","USN-7673-1","USN-7674-1","USN-7690-1","openSUSE-SU-2025:15356-1","openSUSE-SU-2025:15357-1","openSUSE-SU-2025:15358-1","openSUSE-SU-2025:15362-1","openSUSE-SU-2025:15391-1","openSUSE-SU-2025:15393-1","openSUSE-SU-2026:20943-1","openSUSE-SU-2026:20947-1"],"status":"published","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).","severity":{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00615,"percentile":0.49947,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-284"],"published":"2025-07-15T00:00:00Z","modified":"2026-11-03T06:33:00Z","fixes":[{"ecosystem":"Alpine:v3.20","package":"openjdk11","fixed_in":["11.0.28_p6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openjdk11","fixed_in":["11.0.28_p6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openjdk11","fixed_in":["11.0.28_p6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openjdk11","fixed_in":["11.0.28_p6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openjdk11","fixed_in":["11.0.28_p6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openjdk17","fixed_in":["17.0.16_p8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openjdk17","fixed_in":["17.0.16_p8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openjdk17","fixed_in":["17.0.16_p8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openjdk17","fixed_in":["17.0.16_p8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openjdk17","fixed_in":["17.0.16_p8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openjdk21","fixed_in":["21.0.8_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openjdk21","fixed_in":["21.0.8_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openjdk21","fixed_in":["21.0.8_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openjdk21","fixed_in":["21.0.8_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openjdk21","fixed_in":["21.0.8_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk-nik-23-17","fixed_in":["23.0.9-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk-nik-23-21","fixed_in":["23.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk-nik-24-24","fixed_in":["24.2.2-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk11","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk11-container-jre","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk11-lite","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk11-perf","fixed_in":["11.0.28_p13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk17","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk17-container-jre","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk17-crac","fixed_in":["17.0.16_p13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk17-lite","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk21","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk21-container-jre","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk21-crac","fixed_in":["21.0.8_p13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk21-lite","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk24","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk24-container-jre","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk24-lite","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk-nik-23-17","fixed_in":["23.0.9-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk-nik-23-21","fixed_in":["23.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk-nik-24-24","fixed_in":["24.2.2-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk11","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk11-container-jre","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk11-lite","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk17","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk17-container-jre","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk17-crac","fixed_in":["17.0.16_p13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk17-lite","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk21","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk21-container-jre","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk21-crac","fixed_in":["21.0.8_p13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk21-lite","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk24","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk24-container-jre","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk24-lite","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk-nik-23-17","fixed_in":["23.0.9-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk-nik-23-21","fixed_in":["23.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk-nik-24-24","fixed_in":["24.2.2-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk11","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk11-container-jre","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk11-lite","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk17","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk17-container-jre","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk17-crac","fixed_in":["17.0.16_p13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk17-lite","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk21","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk21-container-jre","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk21-crac","fixed_in":["21.0.8_p13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk21-lite","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk24","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk24-container-jre","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk24-lite","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk-nik-23-17","fixed_in":["23.0.9-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk-nik-23-21","fixed_in":["23.1.8-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk-nik-24-24","fixed_in":["24.2.2-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-container-jre","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-lite","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-perf","fixed_in":["11.0.28_p13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-container-jre","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-crac","fixed_in":["17.0.16_p13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-lite","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-container-jre","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-crac","fixed_in":["21.0.8_p13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-lite","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk24-container-jre","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk24-lite","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk-nik-23-17","fixed_in":["23.0.9-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk-nik-23-21","fixed_in":["23.1.8-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk-nik-24-24","fixed_in":["24.2.2-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-container-jre","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-lite","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-container-jre","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-crac","fixed_in":["17.0.16_p13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-lite","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-container-jre","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-crac","fixed_in":["21.0.8_p13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-lite","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk24-container-jre","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk24-lite","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk-nik-23-17","fixed_in":["23.0.9-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk-nik-23-21","fixed_in":["23.1.8-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk-nik-24-24","fixed_in":["24.2.2-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk11-container-jre","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk11-lite","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-container-jre","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-crac","fixed_in":["17.0.16_p13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-lite","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-container-jre","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-crac","fixed_in":["21.0.8_p13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-lite","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk24-container-jre","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk24-lite","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"java","fixed_in":["11.0.28","17.0.16","21.0.8","24.0.2"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"java-min","fixed_in":["11.0.28","17.0.16","21.0.8","24.0.2"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"jre","fixed_in":["11.0.28","17.0.16","21.0.8","24.0.2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"openjdk-17","fixed_in":["17.0.16+8-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openjdk-21","fixed_in":["21.0.8+9-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openjdk-21","fixed_in":["21.0.8+9-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"openjdk-latest","fixed_in":["java-latest-openjdk-26.0.2.1.1-0.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"openjdk-latest","fixed_in":["java-latest-openjdk-26.0.2.1.1-0.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"openjdk-latest","fixed_in":["java-latest-openjdk-26.0.2.1.1-0.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"openjdk-latest","fixed_in":["java-latest-openjdk-26.0.2.1.1-0.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP4","package":"openjdk-latest","fixed_in":["java-latest-openjdk-26.0.2.1.1-0.oe2403sp4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-lts","fixed_in":["11.0.28+6-1ubuntu1~18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-17","fixed_in":["17.0.16+8~us1-0ubuntu1~18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-lts","fixed_in":["11.0.28+6-1ubuntu1~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-17","fixed_in":["17.0.16+8~us1-0ubuntu1~20.04.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-17","fixed_in":["17.0.16+8~us1-0ubuntu1~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-21","fixed_in":["21.0.8+9~us1-0ubuntu1~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-lts","fixed_in":["11.0.28+6-1ubuntu1~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-17","fixed_in":["17.0.16+8~us1-0ubuntu1~24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-21","fixed_in":["21.0.8+9~us1-0ubuntu1~24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-lts","fixed_in":["11.0.28+6-1ubuntu1~24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"openjdk-17","fixed_in":["17.0.16+8-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"openjdk-17-crac","fixed_in":["17.0.16+8-0ubuntu1"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"openjdk-21","fixed_in":["21.0.8+9-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"openjdk-21-crac","fixed_in":["21.0.8+9-0ubuntu1"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"openjdk-lts","fixed_in":["11.0.28+6-1ubuntu1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-17-crac","fixed_in":["17.0.16+8-0ubuntu1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-21-crac","fixed_in":["21.0.8+9-0ubuntu1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-lts","fixed_in":["11.0.28+6-1ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.20","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28_p6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28_p6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28_p6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28_p6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28_p6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16_p8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16_p8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16_p8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16_p8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16_p8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.8_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.8_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.8_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.8_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.8_p9-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk-nik-23-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.0.4-r1"},{"fixed":"23.0.9-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk-nik-23-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.1.3-r1"},{"fixed":"23.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk-nik-24-24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24.2.0-r0"},{"fixed":"24.2.2-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk11-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.20.1_p1-r0"},{"fixed":"11.0.28_p13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.13_p13-r0"},{"fixed":"17.0.16_p13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.5_p12-r0"},{"fixed":"21.0.8_p13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk24-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk24-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk-nik-23-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.0.8-r0"},{"fixed":"23.0.9-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk-nik-23-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.1.7-r0"},{"fixed":"23.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk-nik-24-24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24.2.1-r0"},{"fixed":"24.2.2-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r1"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p13-r1"},{"fixed":"17.0.16_p13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r1"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p12-r1"},{"fixed":"21.0.8_p13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.1_p11-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk24-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.1_p11-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk24-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.1_p11-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk-nik-23-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.0.4-r1"},{"fixed":"23.0.9-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk-nik-23-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.1.3-r1"},{"fixed":"23.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk-nik-24-24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24.2.0-r0"},{"fixed":"24.2.2-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.10_p13-r0"},{"fixed":"17.0.16_p13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.2_p15-r0"},{"fixed":"21.0.8_p13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk24-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk24-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk-nik-23-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.0.4-r1"},{"fixed":"23.0.9-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk-nik-23-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.1.3-r1"},{"fixed":"23.1.8-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk-nik-24-24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24.2.0-r0"},{"fixed":"24.2.2-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.20.1_p1-r0"},{"fixed":"11.0.28_p13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.13_p13-r0"},{"fixed":"17.0.16_p13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.5_p12-r0"},{"fixed":"21.0.8_p13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk24-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk24-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk-nik-23-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.0.8-r0"},{"fixed":"23.0.9-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk-nik-23-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.1.7-r0"},{"fixed":"23.1.8-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk-nik-24-24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24.2.1-r0"},{"fixed":"24.2.2-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p13-r1"},{"fixed":"17.0.16_p13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p12-r1"},{"fixed":"21.0.8_p13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk24-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.1_p11-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk24-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.1_p11-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk-nik-23-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.0.4-r1"},{"fixed":"23.0.9-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk-nik-23-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.1.3-r1"},{"fixed":"23.1.8-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk-nik-24-24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24.2.0-r0"},{"fixed":"24.2.2-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.10_p13-r0"},{"fixed":"17.0.16_p13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.2_p15-r0"},{"fixed":"21.0.8_p13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk24-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk24-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"java","ranges":[{"type":"SEMVER","events":[{"introduced":"9.0.0"},{"fixed":"11.0.28"},{"introduced":"12.0.0"},{"fixed":"17.0.16"},{"introduced":"18.0.0"},{"fixed":"21.0.8"},{"introduced":"22.0.0"},{"fixed":"24.0.2"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"java-min","ranges":[{"type":"SEMVER","events":[{"introduced":"9.0.0"},{"fixed":"11.0.28"},{"introduced":"12.0.0"},{"fixed":"17.0.16"},{"introduced":"18.0.0"},{"fixed":"21.0.8"},{"introduced":"22.0.0"},{"fixed":"24.0.2"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"jre","ranges":[{"type":"SEMVER","events":[{"introduced":"9.0.0"},{"fixed":"11.0.28"},{"introduced":"12.0.0"},{"fixed":"17.0.16"},{"introduced":"18.0.0"},{"fixed":"21.0.8"},{"introduced":"22.0.0"},{"fixed":"24.0.2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28+6-0ubuntu1~18.04.1+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28+6-0ubuntu1~18.04.1+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-jdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28+6-0ubuntu1~18.04.1+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-jdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28+6-0ubuntu1~18.04.1+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28+6-0ubuntu1~18.04.1+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-jre-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28+6-0ubuntu1~18.04.1+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-jre-zero","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28+6-0ubuntu1~18.04.1+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28+6-0ubuntu1~18.04.1+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-8-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u462-ga-0ubuntu1~18.04+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-8-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u462-ga-0ubuntu1~18.04+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-8-jdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u462-ga-0ubuntu1~18.04+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-8-jdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u462-ga-0ubuntu1~18.04+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-8-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u462-ga-0ubuntu1~18.04+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-8-jre-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u462-ga-0ubuntu1~18.04+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-8-jre-zero","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u462-ga-0ubuntu1~18.04+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-8-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u462-ga-0ubuntu1~18.04+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"openjdk-8-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u462-ga-0ubuntu1~16.04+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"openjdk-8-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u462-ga-0ubuntu1~16.04+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"openjdk-8-jdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u462-ga-0ubuntu1~16.04+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"openjdk-8-jdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u462-ga-0ubuntu1~16.04+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"openjdk-8-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u462-ga-0ubuntu1~16.04+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"openjdk-8-jre-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u462-ga-0ubuntu1~16.04+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"openjdk-8-jre-jamvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u462-ga-0ubuntu1~16.04+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"openjdk-8-jre-zero","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u462-ga-0ubuntu1~16.04+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"openjdk-8-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u462-ga-0ubuntu1~16.04+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"java-11-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"java-11-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"java-11-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"java-11-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"java-11-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"java-11-openjdk-javadoc-zip-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"java-11-openjdk-jmods-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"java-11-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"java-11-openjdk-static-libs-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9.tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"openjdk-8-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u482-ga~us1-0ubuntu1~20.04+tuxcare.els1"}]}],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"openjdk-8-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u482-ga~us1-0ubuntu1~20.04+tuxcare.els1"}]}],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"openjdk-8-jdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u482-ga~us1-0ubuntu1~20.04+tuxcare.els1"}]}],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"openjdk-8-jdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u482-ga~us1-0ubuntu1~20.04+tuxcare.els1"}]}],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"openjdk-8-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u482-ga~us1-0ubuntu1~20.04+tuxcare.els1"}]}],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"openjdk-8-jre-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u482-ga~us1-0ubuntu1~20.04+tuxcare.els1"}]}],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"openjdk-8-jre-zero","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u482-ga~us1-0ubuntu1~20.04+tuxcare.els1"}]}],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"openjdk-8-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u482-ga~us1-0ubuntu1~20.04+tuxcare.els1"}]}],"bundled":12},{"source":"osv","ecosystem":"Debian:12","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16+8-1~deb12u1"}]}],"versions":["17.0.10+7-1","17.0.10+7-1~deb11u1","17.0.10+7-1~deb12u1","17.0.10+7-2","17.0.10+7-3","17.0.10~6ea-1","17.0.11+9-1","17.0.11+9-1~deb11u1","17.0.11+9-1~deb12u1","17.0.11~6ea-1","17.0.11~7ea-1","17.0.12+7-1","17.0.12+7-2","17.0.12+7-2~deb11u1","17.0.12+7-2~deb12u1","17.0.12~6ea-1","17.0.13+11-1","17.0.13+11-1~deb11u1","17.0.13+11-1~deb12u1","17.0.13+11-2","17.0.13+11-2~deb12u1","17.0.13~6ea-1","17.0.14+7-1","17.0.14+7-1~deb11u1","17.0.14+7-1~deb12u1","17.0.14~6ea-1","17.0.15+6-1","17.0.15+6-1~deb11u1","17.0.15+6-1~deb12u1","17.0.15~4ea-1","17.0.15~5ea-1","17.0.16+8-1~deb11u1","17.0.16~5ea-1","17.0.6+10-1","17.0.7+7-1","17.0.7+7-1~deb11u1","17.0.7+7-1~deb12u1","17.0.7+7-2","17.0.8+7-1","17.0.8+7-1~deb12u1","17.0.8~6-1","17.0.8~6-2","17.0.8~6-3","17.0.8~6-4","17.0.8~6-5","17.0.9+9-1","17.0.9+9-1~deb11u1","17.0.9+9-1~deb12u1","17.0.9+9-2","17.0.9~4ea-1","17.0.9~6ea-1"]},{"source":"osv","ecosystem":"Debian:13","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.8+9-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.8+9-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"openjdk-11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28+6-1~deb11u1"}]}],"versions":["11.0.12+7-2","11.0.13+8-1","11.0.13+8-1~deb10u1","11.0.13+8-1~deb11u1","11.0.14+9-1","11.0.14+9-1~deb10u1","11.0.14+9-1~deb11u1","11.0.14.1+1-1","11.0.15+10-1","11.0.15+10-1~deb10u1","11.0.15+10-1~deb11u1","11.0.16+8-1","11.0.16+8-1~deb10u1","11.0.16+8-1~deb11u1","11.0.17+8-1","11.0.17+8-2","11.0.18+10-1","11.0.18+10-1~deb10u1","11.0.18+10-1~deb11u1","11.0.19+7+really11.0.11+9-1+b2","11.0.19+7-1","11.0.20+8-1","11.0.20+8-1~deb10u1","11.0.20+8-1~deb11u1","11.0.20~7-1","11.0.21+9-1","11.0.21+9-1~deb10u1","11.0.21+9-1~deb11u1","11.0.21~4ea-1","11.0.22+7-1","11.0.22+7-1~deb10u1","11.0.22+7-1~deb11u1","11.0.22+7-2","11.0.22+7-3","11.0.22~6ea-1","11.0.23+9-1","11.0.23+9-1~deb10u1","11.0.23+9-1~deb11u1","11.0.23~7ea-1","11.0.24+8-1","11.0.24+8-2","11.0.24+8-2~deb11u1","11.0.24~7ea-1","11.0.25+9-1","11.0.25+9-1~deb11u1","11.0.25~5ea-1","11.0.26+4-1","11.0.26+4-1~deb11u1","11.0.26~6ea-1","11.0.27+6-1","11.0.27+6-1~deb11u1","11.0.27~4ea-1","11.0.28~3ea-1"],"bundled":5},{"source":"osv","ecosystem":"Debian:11","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16+8-1~deb11u1"}]}],"versions":["17+35-1","17.0.1+12-1","17.0.1+12-1+deb11u1","17.0.1+12-1+deb11u2","17.0.10+7-1","17.0.10+7-1~deb11u1","17.0.10+7-1~deb12u1","17.0.10+7-2","17.0.10+7-3","17.0.10~6ea-1","17.0.11+9-1","17.0.11+9-1~deb11u1","17.0.11+9-1~deb12u1","17.0.11~6ea-1","17.0.11~7ea-1","17.0.12+7-1","17.0.12+7-2","17.0.12+7-2~deb11u1","17.0.12+7-2~deb12u1","17.0.12~6ea-1","17.0.13+11-1","17.0.13+11-1~deb11u1","17.0.13+11-1~deb12u1","17.0.13+11-2","17.0.13+11-2~deb12u1","17.0.13~6ea-1","17.0.14+7-1","17.0.14+7-1~deb11u1","17.0.14+7-1~deb12u1","17.0.14~6ea-1","17.0.15+6-1","17.0.15+6-1~deb11u1","17.0.15+6-1~deb12u1","17.0.15~4ea-1","17.0.15~5ea-1","17.0.16~5ea-1","17.0.2+8-1","17.0.2+8-1~deb11u1","17.0.3+7-1","17.0.3+7-1~deb11u1","17.0.4+8-1","17.0.4+8-1~deb11u1","17.0.5+8-1","17.0.5+8-2","17.0.6+10-1","17.0.6+10-1~deb11u1","17.0.7+7-1","17.0.7+7-1~deb11u1","17.0.7+7-1~deb12u1","17.0.7+7-2","17.0.8+7-1","17.0.8+7-1~deb12u1","17.0.8~6-1","17.0.8~6-2","17.0.8~6-3","17.0.8~6-4","17.0.8~6-5","17.0.9+9-1","17.0.9+9-1~deb11u1","17.0.9+9-1~deb12u1","17.0.9+9-2","17.0.9~4ea-1","17.0.9~6ea-1","17~19-1","17~24-1","17~27-1","17~29-1","17~31ea-1","17~33ea-1","17~35ea-1"],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16+8-1~deb12u1"}]}],"versions":["17.0.10+7-1","17.0.10+7-1~deb11u1","17.0.10+7-1~deb12u1","17.0.10+7-2","17.0.10+7-3","17.0.10~6ea-1","17.0.11+9-1","17.0.11+9-1~deb11u1","17.0.11+9-1~deb12u1","17.0.11~6ea-1","17.0.11~7ea-1","17.0.12+7-1","17.0.12+7-2","17.0.12+7-2~deb11u1","17.0.12+7-2~deb12u1","17.0.12~6ea-1","17.0.13+11-1","17.0.13+11-1~deb11u1","17.0.13+11-1~deb12u1","17.0.13+11-2","17.0.13+11-2~deb12u1","17.0.13~6ea-1","17.0.14+7-1","17.0.14+7-1~deb11u1","17.0.14+7-1~deb12u1","17.0.14~6ea-1","17.0.15+6-1","17.0.15+6-1~deb11u1","17.0.15+6-1~deb12u1","17.0.15~4ea-1","17.0.15~5ea-1","17.0.16+8-1~deb11u1","17.0.16~5ea-1","17.0.6+10-1","17.0.7+7-1","17.0.7+7-1~deb11u1","17.0.7+7-1~deb12u1","17.0.7+7-2","17.0.8+7-1","17.0.8+7-1~deb12u1","17.0.8~6-1","17.0.8~6-2","17.0.8~6-3","17.0.8~6-4","17.0.8~6-5","17.0.9+9-1","17.0.9+9-1~deb11u1","17.0.9+9-1~deb12u1","17.0.9+9-2","17.0.9~4ea-1","17.0.9~6ea-1"],"bundled":4},{"source":"osv","ecosystem":"Mageia:9","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.462.b08-1.mga9"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:9","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28.0.6-1.mga9"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:9","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16.0.8-1.mga9"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:9","package":"java-latest-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.2.0.12-1.rolling.1.mga9"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-21-openjdk-21.0.12.8-4.oe2203sp4"}]}],"bundled":27},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-21-openjdk-21.0.12.8-4.oe2403sp1"}]}],"bundled":27},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-21-openjdk-21.0.12.8-4.oe2403sp4"}]}],"bundled":27},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"openjdk-latest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-latest-openjdk-26.0.2.1.1-0.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"openjdk-latest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-latest-openjdk-26.0.2.1.1-0.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"openjdk-latest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-latest-openjdk-26.0.2.1.1-0.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"openjdk-latest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-latest-openjdk-26.0.2.1.1-0.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-21-openjdk-21.0.12.8-4.oe2403sp3"}]}],"bundled":27},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"openjdk-latest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-latest-openjdk-26.0.2.1.1-0.oe2403sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-javadoc-zip-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-jmods-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-static-libs-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.28.0.6-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-17-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-17-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-17-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-17-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-17-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-17-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-17-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-17-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-17-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-17-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-17-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-17-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-17-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-17-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"java-21-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"java-21-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"java-21-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"java-21-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"java-21-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"java-21-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"java-21-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"java-21-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"java-21-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"java-21-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"java-21-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"java-21-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-21-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-21-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-21-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-21-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-21-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-21-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-21-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-21-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-21-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-21-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-21-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-21-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-21-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-21-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-21-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-21-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-21-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-21-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-21-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-21-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-21-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-21-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-21-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"java-21-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-ibm-semeru-certified-jdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-ibm-semeru-certified-jdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-ibm-semeru-certified-jdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-ibm-semeru-certified-jdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"java-21-ibm-semeru-certified-jdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.16.0.8-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:10","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.8.0.9-1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"java-1_8_0-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.462-150200.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"java-1_8_0-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.462-150200.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"java-1_8_0-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.462-150200.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28.0-3.90.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28.0-3.90.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.8.0-150600.3.15.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.8.0-150600.3.15.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.8.0-150600.3.15.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP6","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28.0-150000.3.129.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP7","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28.0-150000.3.129.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28.0-150000.3.129.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28.0-150000.3.129.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28.0-150000.3.129.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28.0-150000.3.129.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28.0-150000.3.129.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28.0-150000.3.129.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28.0-150000.3.129.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28.0-150000.3.129.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28.0-150000.3.129.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28.0-150000.3.129.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28.0-150000.3.129.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28.0-150000.3.129.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28.0-150000.3.129.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28.0-150000.3.129.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28.0-150000.3.129.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28.0-150000.3.129.2"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28.0-150000.3.129.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16.0-150400.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP6","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16.0-150400.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP7","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16.0-150400.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16.0-150400.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16.0-150400.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16.0-150400.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16.0-150400.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16.0-150400.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16.0-150400.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16.0-150400.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16.0-150400.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16.0-150400.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16.0-150400.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16.0-150400.3.57.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.50-30.138.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.50-30.138.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP6","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.50-150000.3.104.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP7","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.50-150000.3.104.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.50-150000.3.104.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.50-150000.3.104.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.50-150000.3.104.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.50-150000.3.104.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.50-150000.3.104.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.50-150000.3.104.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.50-150000.3.104.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.50-150000.3.104.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.50-150000.3.104.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.50-150000.3.104.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.50-150000.3.104.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9~b88-1","9~b101-2ubuntu2","9~b102-1","9~b113-0ubuntu1","9~b114-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28+6-1ubuntu1~18.04.1"}]}],"versions":["9.0.4+12-2ubuntu4","9.0.4+12-4ubuntu1","10~46-4ubuntu1","10~46-5ubuntu1","10.0.1+10-1ubuntu2","10.0.1+10-3ubuntu1","10.0.2+13-1ubuntu0.18.04.1","10.0.2+13-1ubuntu0.18.04.2","10.0.2+13-1ubuntu0.18.04.3","10.0.2+13-1ubuntu0.18.04.4","11.0.2+9-3ubuntu1~18.04.3","11.0.3+7-1ubuntu2~18.04.1","11.0.4+11-1ubuntu2~18.04.3","11.0.5+10-0ubuntu1.1~18.04","11.0.6+10-1ubuntu1~18.04.1","11.0.7+10-2ubuntu2~18.04","11.0.8+10-0ubuntu1~18.04.1","11.0.9+11-0ubuntu1~18.04.1","11.0.9.1+1-0ubuntu1~18.04","11.0.10+9-0ubuntu1~18.04","11.0.11+9-0ubuntu2~18.04","11.0.13+8-0ubuntu1~18.04","11.0.14+9-0ubuntu2~18.04","11.0.14.1+1-0ubuntu1~18.04","11.0.15+10-0ubuntu0.18.04.1","11.0.16+8-0ubuntu1~18.04","11.0.17+8-1ubuntu2~18.04","11.0.18+10-0ubuntu1~18.04.1","11.0.19+7~us1-0ubuntu1~18.04.1","11.0.20+8-1ubuntu1~18.04","11.0.20.1+1-0ubuntu1~18.04","11.0.21+9-0ubuntu1~18.04","11.0.22+7-0ubuntu2~18.04.1","11.0.23+9-1ubuntu1~18.04.1","11.0.25+9-1ubuntu1~18.04","11.0.26+4-1ubuntu1~18.04","11.0.27+6~us1-0ubuntu1~18.04"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16+8~us1-0ubuntu1~18.04.1"}]}],"versions":["17+35-1~18.04","17.0.1+12-1~18.04","17.0.2+8-1~18.04","17.0.3+7-0ubuntu0.18.04.1","17.0.4+8-1~18.04","17.0.5+8-2ubuntu1~18.04","17.0.6+10-0ubuntu1~18.04.1","17.0.7+7~us1-0ubuntu1~18.04","17.0.8+7-1~18.04","17.0.8.1+1~us1-0ubuntu1~18.04","17.0.9+9-1~18.04","17.0.10+7-1~18.04.1","17.0.11+9-1~18.04.1","17.0.13+11-2ubuntu1~18.04.2","17.0.14+7-1~18.04","17.0.15+6~us1-0ubuntu1~18.04"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28+6-1ubuntu1~20.04.1"}]}],"versions":["11.0.5+10-0ubuntu1","11.0.5+10-2ubuntu1","11.0.6+10-1ubuntu1","11.0.6+10-2ubuntu2","11.0.7+9-1ubuntu1","11.0.7+10-2ubuntu1","11.0.7+10-3ubuntu1","11.0.8+10-0ubuntu1~20.04","11.0.9+11-0ubuntu1~20.04","11.0.9.1+1-0ubuntu1~20.04","11.0.10+9-0ubuntu1~20.04","11.0.11+9-0ubuntu2~20.04","11.0.13+8-0ubuntu1~20.04","11.0.14+9-0ubuntu2~20.04","11.0.14.1+1-0ubuntu1~20.04","11.0.15+10-0ubuntu0.20.04.1","11.0.16+8-0ubuntu1~20.04","11.0.17+8-1ubuntu2~20.04","11.0.18+10-0ubuntu1~20.04.1","11.0.19+7~us1-0ubuntu1~20.04.1","11.0.20+8-1ubuntu1~20.04","11.0.20.1+1-0ubuntu1~20.04","11.0.21+9-0ubuntu1~20.04","11.0.22+7-0ubuntu2~20.04.1","11.0.23+9-1ubuntu1~20.04.2","11.0.24+8-1ubuntu3~20.04","11.0.25+9-1ubuntu1~20.04","11.0.26+4-1ubuntu1~20.04","11.0.27+6~us1-0ubuntu1~20.04"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["13+33-1","13.0.1+9-2","13.0.2+8-1","13.0.2+8-2","13.0.3+3-1ubuntu2","13.0.4+8-1~20.04","13.0.7+5-0ubuntu1~20.04"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["16.0.1+9-1~20.04"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16+8~us1-0ubuntu1~20.04.6"}]}],"versions":["17+35-1~20.04","17.0.1+12-1~20.04","17.0.2+8-1~20.04","17.0.3+7-0ubuntu0.20.04.1","17.0.4+8-1~20.04","17.0.5+8-2ubuntu1~20.04","17.0.6+10-0ubuntu1~20.04.1","17.0.7+7~us1-0ubuntu1~20.04","17.0.8+7-1~20.04.2","17.0.8.1+1~us1-0ubuntu1~20.04","17.0.9+9-1~20.04","17.0.10+7-1~20.04.1","17.0.11+9-1~20.04.2","17.0.12+7-1ubuntu2~20.04","17.0.13+11-2ubuntu1~20.04","17.0.14+7-1~20.04","17.0.15+6~us1-0ubuntu1~20.04"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16+8~us1-0ubuntu1~22.04.1"}]}],"versions":["17+35-1","17.0.1+12-1","17.0.2+8-1","17.0.3+7-0ubuntu0.22.04.1","17.0.4+8-1~22.04","17.0.5+8-2ubuntu1~22.04","17.0.6+10-0ubuntu1~22.04","17.0.7+7~us1-0ubuntu1~22.04.2","17.0.8+7-1~22.04","17.0.8.1+1~us1-0ubuntu1~22.04","17.0.9+9-1~22.04","17.0.10+7-1~22.04.1","17.0.11+9-1~22.04.1","17.0.12+7-1ubuntu2~22.04","17.0.13+11-2ubuntu1~22.04","17.0.14+7-1~22.04.1","17.0.15+6~us1-0ubuntu1~22.04"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["18~15ea-4","18~20ea-1","18~32ea-1","18~36ea-1","18.0.2+9-2~22.04"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.8+9~us1-0ubuntu1~22.04.1"}]}],"versions":["21.0.1+12-2~22.04","21.0.2+13-1~22.04.1","21.0.3+9-1ubuntu1~22.04.1","21.0.4+7-1ubuntu2~22.04","21.0.5+11-1ubuntu1~22.04","21.0.6+7-1~22.04.1","21.0.7+6~us1-0ubuntu1~22.04"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28+6-1ubuntu1~22.04.1"}]}],"versions":["11.0.12+7-0ubuntu3","11.0.13+8-0ubuntu1","11.0.14+9-0ubuntu2","11.0.14.1+1-0ubuntu1","11.0.15+10-0ubuntu0.22.04.1","11.0.16+8-0ubuntu1~22.04","11.0.17+8-1ubuntu2~22.04","11.0.18+10-0ubuntu1~22.04","11.0.19+7~us1-0ubuntu1~22.04.1","11.0.20+8-1ubuntu1~22.04","11.0.20.1+1-0ubuntu1~22.04","11.0.21+9-0ubuntu1~22.04","11.0.22+7-0ubuntu2~22.04.1","11.0.23+9-1ubuntu1~22.04.1","11.0.24+8-1ubuntu3~22.04","11.0.25+9-1ubuntu1~22.04","11.0.26+4-1ubuntu1~22.04","11.0.27+6~us1-0ubuntu1~22.04"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16+8~us1-0ubuntu1~24.04.1"}]}],"versions":["17.0.9~6ea-1","17.0.9+9-1","17.0.9+9-2","17.0.10~6ea-1","17.0.10+7-1","17.0.11~7ea-1","17.0.11~7ea-1build1","17.0.11+9-1","17.0.12+7-1ubuntu2~24.04","17.0.13+11-2ubuntu1~24.04","17.0.14+7-1~24.04","17.0.15+6~us1-0ubuntu1~24.04"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.8+9~us1-0ubuntu1~24.04.1"}]}],"versions":["21+35-1","21.0.1+12-2","21.0.1+12-3","21.0.2+13-1","21.0.2+13-2","21.0.3~7ea-1","21.0.3~7ea-1build1","21.0.3~7ea-1build2","21.0.3+9-1","21.0.3+9-1ubuntu1","21.0.4+7-1ubuntu2~24.04","21.0.5+11-1ubuntu1~24.04","21.0.6+7-1~24.04.1","21.0.7+6~us1-0ubuntu1~24.04"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28+6-1ubuntu1~24.04.1"}]}],"versions":["11.0.20+8-1ubuntu1","11.0.21+9-0ubuntu1","11.0.22+7-0ubuntu2","11.0.23~7ea-1ubuntu1","11.0.23~7ea-1ubuntu2","11.0.23+9-1ubuntu1","11.0.24+8-1ubuntu3~24.04.1","11.0.25+9-1ubuntu1~24.04","11.0.26+4-1ubuntu1~24.04","11.0.27+6~us1-0ubuntu1~24.04"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16+8-1"}]}],"versions":["17.0.15~5ea-1","17.0.15+6-1","17.0.16~5ea-1","17.0.16+8~us1-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"openjdk-17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16+8-0ubuntu1"}]}],"versions":["17.0.14+7-0ubuntu1","17.0.15+6-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.8+9-1"}]}],"versions":["21.0.7~8ea-1","21.0.7+6-1","21.0.8~5ea-1","21.0.8+9~us1-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"openjdk-21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.8+9-0ubuntu1"}]}],"versions":["21.0.6+7-0ubuntu1","21.0.7+6.1-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28+6-1ubuntu1"}]}],"versions":["11.0.26+4-1ubuntu1","11.0.28~3ea-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16+8-0ubuntu1"}]}]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.8+9-0ubuntu1"}]}]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28+6-1ubuntu1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.8+9~us1-0ubuntu1~20.04.1"}]}],"versions":["21.0.1+12-2~20.04.1","21.0.2+13-1~20.04.1","21.0.3+9-1ubuntu1~20.04.1","21.0.4+7-1ubuntu2~20.04","21.0.5+11-1ubuntu1~20.04","21.0.6+7-1~20.04.1","21.0.7+6~us1-0ubuntu1~20.04"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.8+9~us1-0ubuntu1~22.04.1"}]}],"versions":["21.0.1+12-2~22.04","21.0.2+13-1~22.04.1","21.0.3+9-1ubuntu1~22.04.1","21.0.4+7-1ubuntu2~22.04","21.0.5+11-1ubuntu1~22.04","21.0.6+7-1~22.04.1","21.0.7+6~us1-0ubuntu1~22.04"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.8+9~us1-0ubuntu1~24.04.1"}]}],"versions":["21+35-1","21.0.1+12-2","21.0.1+12-3","21.0.2+13-1","21.0.2+13-2","21.0.3~7ea-1","21.0.3~7ea-1build1","21.0.3~7ea-1build2","21.0.3+9-1","21.0.3+9-1ubuntu1","21.0.4+7-1ubuntu2~24.04","21.0.5+11-1ubuntu1~24.04","21.0.6+7-1~24.04.1","21.0.7+6~us1-0ubuntu1~24.04"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:25.04","package":"openjdk-24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.2+12~us1-0ubuntu1~25.04.1"}]}],"versions":["24~16ea-1","24~20ea-1","24~22ea-1","24~30ea-1","24~33ea-1","24~34ea-0ubuntu1","24~36ea-1","24+36-1","24.0.1+9~us1-0ubuntu1~25.04"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:25.04","package":"openjdk-17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16+8-0ubuntu2~25.04"}]}],"versions":["17.0.13+0-0ubuntu2","17.0.13+11-0ubuntu1","17.0.14+7-0ubuntu1","17.0.15+6-0ubuntu1~25.04"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:25.04","package":"openjdk-21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.8+9-0ubuntu2~25.04"}]}],"versions":["21.0.5+0-0ubuntu2","21.0.5+11-0ubuntu1","21.0.6+7-0ubuntu1","21.0.7+6.1-0ubuntu1~25.04"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28+6-1ubuntu1~18.04.1"}]}],"versions":["9.0.4+12-2ubuntu4","9.0.4+12-4ubuntu1","10~46-4ubuntu1","10~46-5ubuntu1","10.0.1+10-1ubuntu2","10.0.1+10-3ubuntu1","10.0.2+13-1ubuntu0.18.04.1","10.0.2+13-1ubuntu0.18.04.2","10.0.2+13-1ubuntu0.18.04.3","10.0.2+13-1ubuntu0.18.04.4","11.0.2+9-3ubuntu1~18.04.3","11.0.3+7-1ubuntu2~18.04.1","11.0.4+11-1ubuntu2~18.04.3","11.0.5+10-0ubuntu1.1~18.04","11.0.6+10-1ubuntu1~18.04.1","11.0.7+10-2ubuntu2~18.04","11.0.8+10-0ubuntu1~18.04.1","11.0.9+11-0ubuntu1~18.04.1","11.0.9.1+1-0ubuntu1~18.04","11.0.10+9-0ubuntu1~18.04","11.0.11+9-0ubuntu2~18.04","11.0.13+8-0ubuntu1~18.04","11.0.14+9-0ubuntu2~18.04","11.0.14.1+1-0ubuntu1~18.04","11.0.15+10-0ubuntu0.18.04.1","11.0.16+8-0ubuntu1~18.04","11.0.17+8-1ubuntu2~18.04","11.0.18+10-0ubuntu1~18.04.1","11.0.19+7~us1-0ubuntu1~18.04.1","11.0.20+8-1ubuntu1~18.04","11.0.20.1+1-0ubuntu1~18.04","11.0.21+9-0ubuntu1~18.04","11.0.22+7-0ubuntu2~18.04.1","11.0.23+9-1ubuntu1~18.04.1","11.0.25+9-1ubuntu1~18.04","11.0.26+4-1ubuntu1~18.04","11.0.27+6~us1-0ubuntu1~18.04"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28+6-1ubuntu1~20.04.1"}]}],"versions":["11.0.5+10-0ubuntu1","11.0.5+10-2ubuntu1","11.0.6+10-1ubuntu1","11.0.6+10-2ubuntu2","11.0.7+9-1ubuntu1","11.0.7+10-2ubuntu1","11.0.7+10-3ubuntu1","11.0.8+10-0ubuntu1~20.04","11.0.9+11-0ubuntu1~20.04","11.0.9.1+1-0ubuntu1~20.04","11.0.10+9-0ubuntu1~20.04","11.0.11+9-0ubuntu2~20.04","11.0.13+8-0ubuntu1~20.04","11.0.14+9-0ubuntu2~20.04","11.0.14.1+1-0ubuntu1~20.04","11.0.15+10-0ubuntu0.20.04.1","11.0.16+8-0ubuntu1~20.04","11.0.17+8-1ubuntu2~20.04","11.0.18+10-0ubuntu1~20.04.1","11.0.19+7~us1-0ubuntu1~20.04.1","11.0.20+8-1ubuntu1~20.04","11.0.20.1+1-0ubuntu1~20.04","11.0.21+9-0ubuntu1~20.04","11.0.22+7-0ubuntu2~20.04.1","11.0.23+9-1ubuntu1~20.04.2","11.0.24+8-1ubuntu3~20.04","11.0.25+9-1ubuntu1~20.04","11.0.26+4-1ubuntu1~20.04","11.0.27+6~us1-0ubuntu1~20.04"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28+6-1ubuntu1~22.04.1"}]}],"versions":["11.0.12+7-0ubuntu3","11.0.13+8-0ubuntu1","11.0.14+9-0ubuntu2","11.0.14.1+1-0ubuntu1","11.0.15+10-0ubuntu0.22.04.1","11.0.16+8-0ubuntu1~22.04","11.0.17+8-1ubuntu2~22.04","11.0.18+10-0ubuntu1~22.04","11.0.19+7~us1-0ubuntu1~22.04.1","11.0.20+8-1ubuntu1~22.04","11.0.20.1+1-0ubuntu1~22.04","11.0.21+9-0ubuntu1~22.04","11.0.22+7-0ubuntu2~22.04.1","11.0.23+9-1ubuntu1~22.04.1","11.0.24+8-1ubuntu3~22.04","11.0.25+9-1ubuntu1~22.04","11.0.26+4-1ubuntu1~22.04","11.0.27+6~us1-0ubuntu1~22.04"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28+6-1ubuntu1~24.04.1"}]}],"versions":["11.0.20+8-1ubuntu1","11.0.21+9-0ubuntu1","11.0.22+7-0ubuntu2","11.0.23~7ea-1ubuntu1","11.0.23~7ea-1ubuntu2","11.0.23+9-1ubuntu1","11.0.24+8-1ubuntu3~24.04.1","11.0.25+9-1ubuntu1~24.04","11.0.26+4-1ubuntu1~24.04","11.0.27+6~us1-0ubuntu1~24.04"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16+8~us1-0ubuntu1~18.04.1"}]}],"versions":["17+35-1~18.04","17.0.1+12-1~18.04","17.0.2+8-1~18.04","17.0.3+7-0ubuntu0.18.04.1","17.0.4+8-1~18.04","17.0.5+8-2ubuntu1~18.04","17.0.6+10-0ubuntu1~18.04.1","17.0.7+7~us1-0ubuntu1~18.04","17.0.8+7-1~18.04","17.0.8.1+1~us1-0ubuntu1~18.04","17.0.9+9-1~18.04","17.0.10+7-1~18.04.1","17.0.11+9-1~18.04.1","17.0.13+11-2ubuntu1~18.04.2","17.0.14+7-1~18.04","17.0.15+6~us1-0ubuntu1~18.04"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16+8~us1-0ubuntu1~20.04.6"}]}],"versions":["17+35-1~20.04","17.0.1+12-1~20.04","17.0.2+8-1~20.04","17.0.3+7-0ubuntu0.20.04.1","17.0.4+8-1~20.04","17.0.5+8-2ubuntu1~20.04","17.0.6+10-0ubuntu1~20.04.1","17.0.7+7~us1-0ubuntu1~20.04","17.0.8+7-1~20.04.2","17.0.8.1+1~us1-0ubuntu1~20.04","17.0.9+9-1~20.04","17.0.10+7-1~20.04.1","17.0.11+9-1~20.04.2","17.0.12+7-1ubuntu2~20.04","17.0.13+11-2ubuntu1~20.04","17.0.14+7-1~20.04","17.0.15+6~us1-0ubuntu1~20.04"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16+8~us1-0ubuntu1~22.04.1"}]}],"versions":["17+35-1","17.0.1+12-1","17.0.2+8-1","17.0.3+7-0ubuntu0.22.04.1","17.0.4+8-1~22.04","17.0.5+8-2ubuntu1~22.04","17.0.6+10-0ubuntu1~22.04","17.0.7+7~us1-0ubuntu1~22.04.2","17.0.8+7-1~22.04","17.0.8.1+1~us1-0ubuntu1~22.04","17.0.9+9-1~22.04","17.0.10+7-1~22.04.1","17.0.11+9-1~22.04.1","17.0.12+7-1ubuntu2~22.04","17.0.13+11-2ubuntu1~22.04","17.0.14+7-1~22.04.1","17.0.15+6~us1-0ubuntu1~22.04"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16+8~us1-0ubuntu1~24.04.1"}]}],"versions":["17.0.9~6ea-1","17.0.9+9-1","17.0.9+9-2","17.0.10~6ea-1","17.0.10+7-1","17.0.11~7ea-1","17.0.11~7ea-1build1","17.0.11+9-1","17.0.12+7-1ubuntu2~24.04","17.0.13+11-2ubuntu1~24.04","17.0.14+7-1~24.04","17.0.15+6~us1-0ubuntu1~24.04"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.28.0-1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16.0-1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-24-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.2.0-1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.8.0-1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-17-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.16.0-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-21-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.8.0-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"java-17-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.19.0-bp160.1.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"java-21-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.11.0-bp160.1.1"}]}],"bundled":28}],"products":[{"vendor":"oracle","product":"graalvm"},{"vendor":"oracle","product":"graalvm_for_jdk"},{"vendor":"oracle","product":"jdk"},{"vendor":"oracle","product":"jre"},{"vendor":"oracle corporation","product":"oracle graalvm enterprise edition"},{"vendor":"oracle corporation","product":"oracle graalvm for jdk"},{"vendor":"oracle corporation","product":"oracle java se"}],"references":[{"url":"https://www.oracle.com/security-alerts/cpujul2025.html","tags":["vendor-advisory","Vendor Advisory","advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/08/msg00014.html","tags":["web"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/07/msg00011.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-50059","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-wpm9-mhxc-7hwj"},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-50059","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10867","tags":["advisory","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-30749","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-30754","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-50059","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-50106","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-10867.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-10867.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10873","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2025-10873.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-10873.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-10873.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-50059","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1754043770.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2025-1754649468.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2025-1755112965.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2025-1755603149.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2025-1756203636.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1772113038.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-50059","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0233.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34487","tags":["report"]},{"url":"https://www.oracle.com/security-alerts/cpujul2025.html#AppendixJAVA","tags":["web","article"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10862","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10865","tags":["web","advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3759","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-28162","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-28164","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-30749","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-30754","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-30761","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-50106","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61748","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-64505","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-64506","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-64720","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-65018","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66293","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-21925","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-21932","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-21933","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-21945","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22021","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22184","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22693","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22695","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22801","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25646","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34282","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-60589","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61308","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70907","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3760","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3761","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3892","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3893","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3894","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3895","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3927","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4020","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10865.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2376783","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-30749","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2376784","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-30754","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-30761","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2376786","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-30761","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2376785","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-50059","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2379031","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-50106","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10867.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10873.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:13656","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_13656.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:10867","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:10873","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502545-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1246575","tags":["report"]},{"url":"https://bugzilla.suse.com/1246580","tags":["report"]},{"url":"https://bugzilla.suse.com/1246595","tags":["report"]},{"url":"https://bugzilla.suse.com/1246598","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-30749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-30754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-30761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-50059","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502563-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1246584","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-50106","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502657-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1213796","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502666-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502667-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503236-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1247754","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503262-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-50059","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7669-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7668-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7672-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7673-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7674-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7690-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-30749","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-30754","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-50106","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-30761","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1231702","tags":["report"]},{"url":"https://bugzilla.suse.com/1231711","tags":["report"]},{"url":"https://bugzilla.suse.com/1231716","tags":["report"]},{"url":"https://bugzilla.suse.com/1231719","tags":["report"]},{"url":"https://bugzilla.suse.com/1235844","tags":["report"]},{"url":"https://bugzilla.suse.com/1236278","tags":["report"]},{"url":"https://bugzilla.suse.com/1236804","tags":["report"]},{"url":"https://bugzilla.suse.com/1241274","tags":["report"]},{"url":"https://bugzilla.suse.com/1241275","tags":["report"]},{"url":"https://bugzilla.suse.com/1241276","tags":["report"]},{"url":"https://bugzilla.suse.com/1246806","tags":["report"]},{"url":"https://bugzilla.suse.com/1252414","tags":["report"]},{"url":"https://bugzilla.suse.com/1252417","tags":["report"]},{"url":"https://bugzilla.suse.com/1257034","tags":["report"]},{"url":"https://bugzilla.suse.com/1257036","tags":["report"]},{"url":"https://bugzilla.suse.com/1257037","tags":["report"]},{"url":"https://bugzilla.suse.com/1257038","tags":["report"]},{"url":"https://bugzilla.suse.com/1259118","tags":["report"]},{"url":"https://bugzilla.suse.com/1262490","tags":["report"]},{"url":"https://bugzilla.suse.com/1262494","tags":["report"]},{"url":"https://bugzilla.suse.com/1262495","tags":["report"]},{"url":"https://bugzilla.suse.com/1262496","tags":["report"]},{"url":"https://bugzilla.suse.com/1262497","tags":["report"]},{"url":"https://bugzilla.suse.com/1262500","tags":["report"]},{"url":"https://bugzilla.suse.com/1262501","tags":["report"]},{"url":"https://bugzilla.suse.com/1265261","tags":["report"]},{"url":"https://bugzilla.suse.com/1267355","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21217","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21235","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-21502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-21587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-30691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-30698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53057","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21925","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21932","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22007","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23865","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34282","tags":["web"]},{"url":"https://bugzilla.suse.com/1252418","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61748","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2025-50059","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).","status":"published","published":"2025-07-15T19:27:33.672Z","modified":"2025-11-03T20:05:31.134Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:32:52.526476Z"}],"euvd":[{"id":"EUVD-2025-21519","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).","status":"published","published":"2025-07-15T19:27:33Z","modified":"2025-11-03T20:05:31Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T19:49:32.896597Z"}],"ghsa":[{"id":"GHSA-wpm9-mhxc-7hwj","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).","status":"published","published":"2025-07-15T21:31:40Z","modified":"2025-11-03T21:34:08Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T15:04:23.841448Z"}],"nvd":[{"id":"CVE-2025-50059","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).","status":"published","published":"2025-07-15T20:15:40.367Z","modified":"2026-06-17T09:34:34.11Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:11:18.285862Z"}],"osv":[{"id":"ALPINE-CVE-2025-50059","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).","status":"published","published":"2025-07-15T20:15:40.367Z","modified":"2026-11-03T06:33:00.692784869Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-03T07:15:53.944853Z"},{"id":"BELL-CVE-2025-50059","status":"published","published":"2025-07-16T06:03:12.856387Z","modified":"2026-01-26T09:40:30.581546Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:22.495824Z"},{"id":"CVE-2025-50059","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).","status":"published","published":"2025-07-15T20:15:40.367Z","modified":"2026-06-13T18:29:29.740761033Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:50.037003Z"},{"id":"DEBIAN-CVE-2025-50059","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).","status":"published","published":"2025-07-15T20:15:40.367Z","modified":"2026-09-05T17:00:08.159916712Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:47.378563Z"},{"id":"OESA-2026-3759","title":"openjdk-21 security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\n\nBuffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (ASan), the program leaks memory in various locations, eventually leading to high memory usage and causing the program to become unresponsive(CVE-2025-28162)\n\nBuffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via png_create_read_struct() function.(CVE-2025-28164)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in takeover of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).(CVE-2025-30749)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2025-30754)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting).  Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf and  11.0.27; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2025-30761)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).(CVE-2025-50059)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in takeover of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).(CVE-2025-50106)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 21.0.8 and  25; Oracle GraalVM for JDK: 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2025-61748)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng\u0026apos;s png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51.(CVE-2025-64505)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng\u0026apos;s png_write_image_8bit function when processing 8-bit images through the simplified write API with convert_to_8bit enabled. The vulnerability affects 8-bit grayscale+alpha, RGB/RGBA, and images with incomplete row data. A conditional guard incorrectly allows 8-bit input to enter code expecting 16-bit input, causing reads up to 2 bytes beyond allocated buffer boundaries. This issue has been patched in version 1.6.51.(CVE-2025-64506)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read vulnerability exists in png_image_read_composite when processing palette images with PNG_FLAG_OPTIMIZE_ALPHA enabled. The palette compositing code in png_init_read_transformations incorrectly applies background compositing during premultiplication, violating the invariant component ≤ alpha × 257 required by the simplified PNG API. This issue has been patched in version 1.6.51.(CVE-2025-64720)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds. This issue has been patched in version 1.6.51.(CVE-2025-65018)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng\u0026apos;s simplified API allows reading up to 1012 bytes beyond the png_sRGB_base[512] array when processing valid palette PNG images with partial transparency and gamma correction. The PNG files that trigger this vulnerability are valid per the PNG specification; the bug is in libpng\u0026apos;s internal state management. Upgrade to libpng 1.6.52 or later.(CVE-2025-66293)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2026-21925)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N).(CVE-2026-21932)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).(CVE-2026-21933)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-21945)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-22021)\n\nzlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under contrib/untgz. The vulnerability is limited to the standalone demonstration utility and does not affect the core zlib compression library. The flaw occurs when a user executes the untgz command with an excessively long archive name supplied via the command line, leading to an out-of-bounds write in a fixed-size global buffer.(CVE-2026-22184)\n\nHarfBuzz is a text shaping engine. Prior to version 12.3.0, a null pointer dereference vulnerability exists in the SubtableUnicodesCache::create function located in src/hb-ot-cmap-table.hh. The function fails to check if hb_malloc returns NULL before using placement new to construct an object at the returned pointer address. When hb_malloc fails to allocate memory (which can occur in low-memory conditions or when using custom allocators that simulate allocation failures), it returns NULL. The code then attempts to call the constructor on this null pointer using placement new syntax, resulting in undefined behavior and a Segmentation Fault. This issue has been patched in version 12.3.0.(CVE-2026-22693)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.51 to 1.6.53, there is a heap buffer over-read in the libpng simplified API function png_image_finish_read when processing interlaced 16-bit PNGs with 8-bit output format and non-minimal row stride. This is a regression introduced by the fix for CVE-2025-65018. This vulnerability is fixed in 1.6.54.(CVE-2026-22695)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.26 to 1.6.53, there is an integer truncation in the libpng simplified write API functions png_write_image_16bit and png_write_image_8bit causes heap buffer over-read when the caller provides a negative row stride (for bottom-up image layouts) or a stride exceeding 65535 bytes. The bug was introduced in libpng 1.6.26 (October 2016) by casts added to silence compiler warnings on 16-bit systems. This vulnerability is fixed in 1.6.54.(CVE-2026-22801)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported by the user\u0026apos;s display, certain palettes will cause the function to enter into an infinite loop that reads past the end of an internal heap-allocated buffer. The images that trigger this vulnerability are valid per the PNG specification. This vulnerability is fixed in 1.6.55.(CVE-2026-25646)\n\nA vulnerability exists in the Networking component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. This easily exploitable vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise the affected products. Successful attacks can result in an unauthorized ability to cause a hang or frequently repeatable crash (complete Denial of Service) of Oracle Java SE, Oracle GraalVM for JDK, or Oracle GraalVM Enterprise Edition. This vulnerability can be exploited by using APIs in the specified component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score is 7.5 (Availability impacts).(CVE-2026-34282)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).(CVE-2026-60589)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).(CVE-2026-61308)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.(CVE-2026-70907)","status":"published","published":"2026-09-14T16:34:04Z","modified":"2026-09-13T16:45:47.887991045Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3760","title":"openjdk-21 security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\n\nBuffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (ASan), the program leaks memory in various locations, eventually leading to high memory usage and causing the program to become unresponsive(CVE-2025-28162)\n\nBuffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via png_create_read_struct() function.(CVE-2025-28164)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in takeover of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).(CVE-2025-30749)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2025-30754)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting).  Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf and  11.0.27; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2025-30761)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).(CVE-2025-50059)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in takeover of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).(CVE-2025-50106)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 21.0.8 and  25; Oracle GraalVM for JDK: 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2025-61748)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng\u0026apos;s png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51.(CVE-2025-64505)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng\u0026apos;s png_write_image_8bit function when processing 8-bit images through the simplified write API with convert_to_8bit enabled. The vulnerability affects 8-bit grayscale+alpha, RGB/RGBA, and images with incomplete row data. A conditional guard incorrectly allows 8-bit input to enter code expecting 16-bit input, causing reads up to 2 bytes beyond allocated buffer boundaries. This issue has been patched in version 1.6.51.(CVE-2025-64506)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read vulnerability exists in png_image_read_composite when processing palette images with PNG_FLAG_OPTIMIZE_ALPHA enabled. The palette compositing code in png_init_read_transformations incorrectly applies background compositing during premultiplication, violating the invariant component ≤ alpha × 257 required by the simplified PNG API. This issue has been patched in version 1.6.51.(CVE-2025-64720)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds. This issue has been patched in version 1.6.51.(CVE-2025-65018)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng\u0026apos;s simplified API allows reading up to 1012 bytes beyond the png_sRGB_base[512] array when processing valid palette PNG images with partial transparency and gamma correction. The PNG files that trigger this vulnerability are valid per the PNG specification; the bug is in libpng\u0026apos;s internal state management. Upgrade to libpng 1.6.52 or later.(CVE-2025-66293)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2026-21925)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N).(CVE-2026-21932)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).(CVE-2026-21933)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-21945)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-22021)\n\nzlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under contrib/untgz. The vulnerability is limited to the standalone demonstration utility and does not affect the core zlib compression library. The flaw occurs when a user executes the untgz command with an excessively long archive name supplied via the command line, leading to an out-of-bounds write in a fixed-size global buffer.(CVE-2026-22184)\n\nHarfBuzz is a text shaping engine. Prior to version 12.3.0, a null pointer dereference vulnerability exists in the SubtableUnicodesCache::create function located in src/hb-ot-cmap-table.hh. The function fails to check if hb_malloc returns NULL before using placement new to construct an object at the returned pointer address. When hb_malloc fails to allocate memory (which can occur in low-memory conditions or when using custom allocators that simulate allocation failures), it returns NULL. The code then attempts to call the constructor on this null pointer using placement new syntax, resulting in undefined behavior and a Segmentation Fault. This issue has been patched in version 12.3.0.(CVE-2026-22693)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.51 to 1.6.53, there is a heap buffer over-read in the libpng simplified API function png_image_finish_read when processing interlaced 16-bit PNGs with 8-bit output format and non-minimal row stride. This is a regression introduced by the fix for CVE-2025-65018. This vulnerability is fixed in 1.6.54.(CVE-2026-22695)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.26 to 1.6.53, there is an integer truncation in the libpng simplified write API functions png_write_image_16bit and png_write_image_8bit causes heap buffer over-read when the caller provides a negative row stride (for bottom-up image layouts) or a stride exceeding 65535 bytes. The bug was introduced in libpng 1.6.26 (October 2016) by casts added to silence compiler warnings on 16-bit systems. This vulnerability is fixed in 1.6.54.(CVE-2026-22801)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported by the user\u0026apos;s display, certain palettes will cause the function to enter into an infinite loop that reads past the end of an internal heap-allocated buffer. The images that trigger this vulnerability are valid per the PNG specification. This vulnerability is fixed in 1.6.55.(CVE-2026-25646)\n\nA vulnerability exists in the Networking component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. This easily exploitable vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise the affected products. Successful attacks can result in an unauthorized ability to cause a hang or frequently repeatable crash (complete Denial of Service) of Oracle Java SE, Oracle GraalVM for JDK, or Oracle GraalVM Enterprise Edition. This vulnerability can be exploited by using APIs in the specified component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score is 7.5 (Availability impacts).(CVE-2026-34282)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).(CVE-2026-60589)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).(CVE-2026-61308)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.(CVE-2026-70907)","status":"published","published":"2026-09-14T16:34:05Z","modified":"2026-09-13T16:45:48.729615628Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3761","title":"openjdk-21 security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\n\nBuffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (ASan), the program leaks memory in various locations, eventually leading to high memory usage and causing the program to become unresponsive(CVE-2025-28162)\n\nBuffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via png_create_read_struct() function.(CVE-2025-28164)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in takeover of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).(CVE-2025-30749)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2025-30754)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting).  Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf and  11.0.27; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2025-30761)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).(CVE-2025-50059)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in takeover of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).(CVE-2025-50106)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 21.0.8 and  25; Oracle GraalVM for JDK: 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2025-61748)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng\u0026apos;s png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51.(CVE-2025-64505)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng\u0026apos;s png_write_image_8bit function when processing 8-bit images through the simplified write API with convert_to_8bit enabled. The vulnerability affects 8-bit grayscale+alpha, RGB/RGBA, and images with incomplete row data. A conditional guard incorrectly allows 8-bit input to enter code expecting 16-bit input, causing reads up to 2 bytes beyond allocated buffer boundaries. This issue has been patched in version 1.6.51.(CVE-2025-64506)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read vulnerability exists in png_image_read_composite when processing palette images with PNG_FLAG_OPTIMIZE_ALPHA enabled. The palette compositing code in png_init_read_transformations incorrectly applies background compositing during premultiplication, violating the invariant component ≤ alpha × 257 required by the simplified PNG API. This issue has been patched in version 1.6.51.(CVE-2025-64720)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds. This issue has been patched in version 1.6.51.(CVE-2025-65018)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng\u0026apos;s simplified API allows reading up to 1012 bytes beyond the png_sRGB_base[512] array when processing valid palette PNG images with partial transparency and gamma correction. The PNG files that trigger this vulnerability are valid per the PNG specification; the bug is in libpng\u0026apos;s internal state management. Upgrade to libpng 1.6.52 or later.(CVE-2025-66293)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2026-21925)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N).(CVE-2026-21932)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).(CVE-2026-21933)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-21945)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-22021)\n\nzlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under contrib/untgz. The vulnerability is limited to the standalone demonstration utility and does not affect the core zlib compression library. The flaw occurs when a user executes the untgz command with an excessively long archive name supplied via the command line, leading to an out-of-bounds write in a fixed-size global buffer.(CVE-2026-22184)\n\nHarfBuzz is a text shaping engine. Prior to version 12.3.0, a null pointer dereference vulnerability exists in the SubtableUnicodesCache::create function located in src/hb-ot-cmap-table.hh. The function fails to check if hb_malloc returns NULL before using placement new to construct an object at the returned pointer address. When hb_malloc fails to allocate memory (which can occur in low-memory conditions or when using custom allocators that simulate allocation failures), it returns NULL. The code then attempts to call the constructor on this null pointer using placement new syntax, resulting in undefined behavior and a Segmentation Fault. This issue has been patched in version 12.3.0.(CVE-2026-22693)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.51 to 1.6.53, there is a heap buffer over-read in the libpng simplified API function png_image_finish_read when processing interlaced 16-bit PNGs with 8-bit output format and non-minimal row stride. This is a regression introduced by the fix for CVE-2025-65018. This vulnerability is fixed in 1.6.54.(CVE-2026-22695)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.26 to 1.6.53, there is an integer truncation in the libpng simplified write API functions png_write_image_16bit and png_write_image_8bit causes heap buffer over-read when the caller provides a negative row stride (for bottom-up image layouts) or a stride exceeding 65535 bytes. The bug was introduced in libpng 1.6.26 (October 2016) by casts added to silence compiler warnings on 16-bit systems. This vulnerability is fixed in 1.6.54.(CVE-2026-22801)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported by the user\u0026apos;s display, certain palettes will cause the function to enter into an infinite loop that reads past the end of an internal heap-allocated buffer. The images that trigger this vulnerability are valid per the PNG specification. This vulnerability is fixed in 1.6.55.(CVE-2026-25646)\n\nA vulnerability exists in the Networking component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. This easily exploitable vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise the affected products. Successful attacks can result in an unauthorized ability to cause a hang or frequently repeatable crash (complete Denial of Service) of Oracle Java SE, Oracle GraalVM for JDK, or Oracle GraalVM Enterprise Edition. This vulnerability can be exploited by using APIs in the specified component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score is 7.5 (Availability impacts).(CVE-2026-34282)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).(CVE-2026-60589)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).(CVE-2026-61308)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.(CVE-2026-70907)","status":"published","published":"2026-09-14T16:34:05Z","modified":"2026-09-13T16:45:48.734251617Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3892","title":"openjdk-latest security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).(CVE-2025-50059)","status":"published","published":"2026-09-20T13:22:58Z","modified":"2026-09-20T13:30:23.582339642Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-3893","title":"openjdk-latest security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).(CVE-2025-50059)","status":"published","published":"2026-09-20T13:22:58Z","modified":"2026-09-20T13:30:23.701132672Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-3894","title":"openjdk-latest security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).(CVE-2025-50059)","status":"published","published":"2026-09-20T13:22:59Z","modified":"2026-09-20T13:30:23.700366408Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-3895","title":"openjdk-latest security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).(CVE-2025-50059)","status":"published","published":"2026-09-20T13:22:59Z","modified":"2026-09-20T13:30:23.702523124Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-3927","title":"openjdk-21 security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\n\nBuffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (ASan), the program leaks memory in various locations, eventually leading to high memory usage and causing the program to become unresponsive(CVE-2025-28162)\n\nBuffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via png_create_read_struct() function.(CVE-2025-28164)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in takeover of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).(CVE-2025-30749)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2025-30754)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting).  Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf and  11.0.27; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2025-30761)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).(CVE-2025-50059)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in takeover of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).(CVE-2025-50106)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 21.0.8 and  25; Oracle GraalVM for JDK: 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2025-61748)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng\u0026apos;s png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51.(CVE-2025-64505)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng\u0026apos;s png_write_image_8bit function when processing 8-bit images through the simplified write API with convert_to_8bit enabled. The vulnerability affects 8-bit grayscale+alpha, RGB/RGBA, and images with incomplete row data. A conditional guard incorrectly allows 8-bit input to enter code expecting 16-bit input, causing reads up to 2 bytes beyond allocated buffer boundaries. This issue has been patched in version 1.6.51.(CVE-2025-64506)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read vulnerability exists in png_image_read_composite when processing palette images with PNG_FLAG_OPTIMIZE_ALPHA enabled. The palette compositing code in png_init_read_transformations incorrectly applies background compositing during premultiplication, violating the invariant component ≤ alpha × 257 required by the simplified PNG API. This issue has been patched in version 1.6.51.(CVE-2025-64720)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds. This issue has been patched in version 1.6.51.(CVE-2025-65018)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng\u0026apos;s simplified API allows reading up to 1012 bytes beyond the png_sRGB_base[512] array when processing valid palette PNG images with partial transparency and gamma correction. The PNG files that trigger this vulnerability are valid per the PNG specification; the bug is in libpng\u0026apos;s internal state management. Upgrade to libpng 1.6.52 or later.(CVE-2025-66293)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2026-21925)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N).(CVE-2026-21932)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).(CVE-2026-21933)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-21945)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-22021)\n\nzlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under contrib/untgz. The vulnerability is limited to the standalone demonstration utility and does not affect the core zlib compression library. The flaw occurs when a user executes the untgz command with an excessively long archive name supplied via the command line, leading to an out-of-bounds write in a fixed-size global buffer.(CVE-2026-22184)\n\nHarfBuzz is a text shaping engine. Prior to version 12.3.0, a null pointer dereference vulnerability exists in the SubtableUnicodesCache::create function located in src/hb-ot-cmap-table.hh. The function fails to check if hb_malloc returns NULL before using placement new to construct an object at the returned pointer address. When hb_malloc fails to allocate memory (which can occur in low-memory conditions or when using custom allocators that simulate allocation failures), it returns NULL. The code then attempts to call the constructor on this null pointer using placement new syntax, resulting in undefined behavior and a Segmentation Fault. This issue has been patched in version 12.3.0.(CVE-2026-22693)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.51 to 1.6.53, there is a heap buffer over-read in the libpng simplified API function png_image_finish_read when processing interlaced 16-bit PNGs with 8-bit output format and non-minimal row stride. This is a regression introduced by the fix for CVE-2025-65018. This vulnerability is fixed in 1.6.54.(CVE-2026-22695)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.26 to 1.6.53, there is an integer truncation in the libpng simplified write API functions png_write_image_16bit and png_write_image_8bit causes heap buffer over-read when the caller provides a negative row stride (for bottom-up image layouts) or a stride exceeding 65535 bytes. The bug was introduced in libpng 1.6.26 (October 2016) by casts added to silence compiler warnings on 16-bit systems. This vulnerability is fixed in 1.6.54.(CVE-2026-22801)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported by the user\u0026apos;s display, certain palettes will cause the function to enter into an infinite loop that reads past the end of an internal heap-allocated buffer. The images that trigger this vulnerability are valid per the PNG specification. This vulnerability is fixed in 1.6.55.(CVE-2026-25646)\n\nA vulnerability exists in the Networking component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. This easily exploitable vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise the affected products. Successful attacks can result in an unauthorized ability to cause a hang or frequently repeatable crash (complete Denial of Service) of Oracle Java SE, Oracle GraalVM for JDK, or Oracle GraalVM Enterprise Edition. This vulnerability can be exploited by using APIs in the specified component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score is 7.5 (Availability impacts).(CVE-2026-34282)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).(CVE-2026-60589)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).(CVE-2026-61308)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.(CVE-2026-70907)","status":"published","published":"2026-09-20T13:23:18Z","modified":"2026-09-20T13:30:30.299027092Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-4020","title":"openjdk-latest security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).(CVE-2025-50059)","status":"published","published":"2026-09-25T01:27:23Z","modified":"2026-09-25T01:45:03.630115993Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"RHSA-2025:10865","title":"Red Hat Security Advisory: java-11-openjdk ELS security update","status":"published","published":"2025-07-21T10:01:59Z","modified":"2026-10-17T10:04:40Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10867","title":"Red Hat Security Advisory: java-17-openjdk security update","status":"published","published":"2025-07-16T10:02:22Z","modified":"2026-10-17T10:04:41Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10873","title":"Red Hat Security Advisory: java-21-openjdk security update","status":"published","published":"2025-07-17T10:04:49Z","modified":"2026-10-17T10:04:42Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:13656","title":"Red Hat Security Advisory: java-21-ibm-semeru-certified-jdk bug fix and enhancement update","status":"published","published":"2025-08-12T10:03:38Z","modified":"2026-10-17T10:04:53Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RLSA-2025:10867","title":"Important: java-17-openjdk security update","description":"The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.\n\nSecurity Fix(es):\n\n* JDK: Better Glyph drawing (CVE-2025-30749)\n* JDK: Enhance TLS protocol support (CVE-2025-30754)\n* JDK: Improve HTTP client header handling (CVE-2025-50059)\n* JDK: Better Glyph drawing redux (CVE-2025-50106)\n\nBug Fix(es):\n\n* In Rocky Linux 9 and Rocky Linux 10 systems, the default graphical display system is Wayland. The use of Wayland in these systems causes a failure in the traditional X11 method that java.awt.Robot uses to take a screen capture, producing a blank image. With this update, the RPM now recommends installing the PipeWire package, which the JDK can use to take screen captures in Wayland systems (Rocky Linux-102668, Rocky Linux-102669, Rocky Linux-102670, Rocky Linux-102672)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-07-29T13:38:41.630147Z","modified":"2025-07-29T15:00:28.256603Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"RLSA-2025:10873","title":"Important: java-21-openjdk security update","description":"The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.\n\nSecurity Fix(es):\n\n* JDK: Better Glyph drawing (CVE-2025-30749)\n* JDK: Enhance TLS protocol support (CVE-2025-30754)\n* JDK: Improve HTTP client header handling (CVE-2025-50059)\n* JDK: Better Glyph drawing redux (CVE-2025-50106)\n\nBug Fix(es):\n\n* In Rocky Linux 9 and Rocky Linux 10 systems, the default graphical display system is Wayland. The use of Wayland in these systems causes a failure in the traditional X11 method that java.awt.Robot uses to take a screen capture, producing a blank image. With this update, the RPM now recommends installing the PipeWire package, which the JDK can use to take screen captures in Wayland systems (Rocky Linux-102683, Rocky Linux-102684, Rocky Linux-102685)\n* On NUMA systems, the operating system can choose to migrate a task from one NUMA node to another. In the G1 garbage collector, G1AllocRegion objects are associated with NUMA nodes. The G1Allocator code assumes that obtaining the G1AllocRegion object for the current thread is sufficient, but OS scheduling can lead to arbitrary changes in the NUMA-to-thread association. This can cause crashes when the G1AllocRegion being used changes mid-operation. This update resolves this issue by always using the same NUMA node and associated G1AllocRegion object throughout an operation. (Rocky Linux-90307, Rocky Linux-90308, Rocky Linux-90311)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-03T19:56:45.27031Z","modified":"2025-10-08T17:12:45.925357Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"UBUNTU-CVE-2025-50059","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).","status":"published","published":"2025-07-15T20:15:00Z","modified":"2026-05-20T16:23:36.32070603Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T16:55:50.31802Z"},{"id":"ALSA-2025:10867","title":"Important: java-17-openjdk security update","description":"The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  \n\nSecurity Fix(es):  \n\n  * JDK: Better Glyph drawing (CVE-2025-30749)\n  * JDK: Enhance TLS protocol support (CVE-2025-30754)\n  * JDK: Improve HTTP client header handling (CVE-2025-50059)\n  * JDK: Better Glyph drawing redux (CVE-2025-50106)\n\n\nBug Fix(es):  \n\n  * In AlmaLinuxand AlmaLinux systems, the default graphical display system is Wayland. The use of Wayland in these systems causes a failure in the traditional X11 method that java.awt.Robot uses to take a screen capture, producing a blank image. With this update, the RPM now recommends installing the PipeWire package, which the JDK can use to take screen captures in Wayland systems (AlmaLinux-102668, AlmaLinux-102669, AlmaLinux-102670, AlmaLinux-102672)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-07-15T00:00:00Z","modified":"2026-10-29T11:02:26.389562983Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ALSA-2025:10873","title":"Important: java-21-openjdk security update","description":"The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  \n\nSecurity Fix(es):  \n\n  * JDK: Better Glyph drawing (CVE-2025-30749)\n  * JDK: Enhance TLS protocol support (CVE-2025-30754)\n  * JDK: Improve HTTP client header handling (CVE-2025-50059)\n  * JDK: Better Glyph drawing redux (CVE-2025-50106)\n\n\nBug Fix(es):  \n\n  * In AlmaLinuxand AlmaLinux systems, the default graphical display system is Wayland. The use of Wayland in these systems causes a failure in the traditional X11 method that java.awt.Robot uses to take a screen capture, producing a blank image. With this update, the RPM now recommends installing the PipeWire package, which the JDK can use to take screen captures in Wayland systems (AlmaLinux-102683, AlmaLinux-102684, AlmaLinux-102685)\n  * On NUMA systems, the operating system can choose to migrate a task from one NUMA node to another. In the G1 garbage collector, G1AllocRegion objects are associated with NUMA nodes. The G1Allocator code assumes that obtaining the G1AllocRegion object for the current thread is sufficient, but OS scheduling can lead to arbitrary changes in the NUMA-to-thread association. This can cause crashes when the G1AllocRegion being used changes mid-operation. This update resolves this issue by always using the same NUMA node and associated G1AllocRegion object throughout an operation. (AlmaLinux-90307, AlmaLinux-90308, AlmaLinux-90311)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-07-16T00:00:00Z","modified":"2026-10-29T11:02:26.425489972Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"BIT-java-2025-50059","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).","status":"published","published":"2026-05-06T14:45:36.983Z","modified":"2026-09-08T08:48:00.634530684Z","updated_at":"2026-11-02T15:28:31.42203Z"},{"id":"BIT-java-min-2025-50059","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).","status":"published","published":"2026-05-06T14:45:38.88Z","modified":"2026-09-08T08:47:56.594871253Z","updated_at":"2026-11-02T15:28:31.42203Z"},{"id":"BIT-jre-2025-50059","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).","status":"published","published":"2026-05-08T05:47:18.354Z","modified":"2026-09-08T08:48:05.949862002Z","updated_at":"2026-11-02T15:28:31.782692Z"},{"id":"CLSA-2025-1754043770","title":"java-17-openjdk: Fix of 4 CVEs","description":"- Update to jdk-17.0.16+8\n- CVE-2025-50106: fix 2D component vulnerability in Java SE allowing remote\n  attackers to compromise the Java runtime via crafted input\n- CVE-2025-30749: fix 2D rendering vulnerability in Java SE that could lead to\n  application crash or remote code execution\n- CVE-2025-30754: fix JSSE component vulnerability allowing unauthorized access\n  to sensitive data over TLS connections\n- CVE-2025-50059: fix Networking component vulnerability allowing unauthenticated\n  remote attackers to access sensitive data in Java SE and GraalVM environments","status":"published","published":"2025-08-01T10:22:54Z","modified":"2026-10-21T10:46:15.650633275Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1754649468","title":"Fix of 5 CVEs","description":"   * OpenJDK 11.0.28 release, build 6.\n     - CVE-2025-30749: Java 2D heap corruption, code execution/DoS\n     - CVE-2025-30754: JSSE TLS handshake flaw, weakened encryption\n     - CVE-2025-30761: nashorn sandbox bypass, code execution\n     - CVE-2025-50059: HTTP client header bug, data leak\n     - CVE-2025-50106: Glyph rendering memory bug, crash/code exec\n     - Release notes:\n       https://mail.openjdk.org/pipermail/jdk-updates-dev/2025-July/045612.html","status":"published","published":"2025-08-08T10:38:04Z","modified":"2026-06-04T10:03:55.85939Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1755112965","title":"Fix of 5 CVEs","description":"   * OpenJDK 8u462 release\n     - CVE-2025-30749: Java 2D heap corruption, code execution/DoS\n     - CVE-2025-30754: JSSE TLS handshake flaw, weakened encryption\n     - CVE-2025-30761: nashorn sandbox bypass, code execution\n     - CVE-2025-50059: HTTP client header bug, data leak\n     - CVE-2025-50106: Glyph rendering memory bug, crash/code exec\n     - Release notes:\n       https://mail.openjdk.org/pipermail/jdk8u-dev/2025-July/020263.html","status":"published","published":"2025-08-13T19:22:53Z","modified":"2026-06-04T10:04:20.562943Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1755603149","title":"Fix of 5 CVEs","description":"   * OpenJDK 8u462 release\n     - CVE-2025-30749: Java 2D heap corruption, code execution/DoS\n     - CVE-2025-30754: JSSE TLS handshake flaw, weakened encryption\n     - CVE-2025-30761: nashorn sandbox bypass, code execution\n     - CVE-2025-50059: HTTP client header bug, data leak\n     - CVE-2025-50106: Glyph rendering memory bug, crash/code exec\n     - Release notes:\n       https://mail.openjdk.org/pipermail/jdk8u-dev/2025-July/020263.html","status":"published","published":"2025-08-19T11:32:37Z","modified":"2026-06-04T10:03:18.159164Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1756203636","title":"java-11-openjdk: Fix of 5 CVEs","description":"- Upgrade to openjdk-11.0.28+6 (GA).). The following CVEs were fixed:\n- CVE-2025-30749: better Glyph drawing\n- CVE-2025-30754: enhance TLS protocol support\n- CVE-2025-30761: improve scripting supports\n- CVE-2025-50059: improve HTTP client header handling\n- CVE-2025-50106: better Glyph drawing redux","status":"published","published":"2025-08-26T10:20:40Z","modified":"2026-06-01T00:33:18.026738766Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2026-1772113038","title":"Fix of 12 CVEs","description":"   * OpenJDK 8u482 release, build 8.\n     Release notes:\n     https://mail.openjdk.org/pipermail/jdk8u-dev/2026-January/020959.html\n     - Security fixes (8u482):\n       + CVE-2026-21945: Prevent DoS via repeated crash or hang in sandbox security\n       + CVE-2026-21932: Fix integrity issue in sandboxed handling of untrusted input\n       + CVE-2026-21933: Prevent unauthorized data access or modification via networking APIs\n       + CVE-2026-21925: Fix RMI flaw allowing unauthorized data read or modification\n     - Previously fixed:\n       * 8u472:\n         - CVE-2025-53066: Prevent DoS or data exposure from untrusted input handling\n         - CVE-2025-53057: Fix validation flaw affecting sandboxed networking/security logic\n         - CVE-2025-61748: Prevent resource-consumption denial-of-service via crafted input\n       * 8u462:\n         - CVE-2025-30749: Fix security flaw enabling unauthorized actions or data exposure\n         - CVE-2025-30754: Correct validation weakness affecting sandboxed execution integrity\n         - CVE-2025-30761: Prevent unintended data access or via insufficient checks\n         - CVE-2025-50106: Fix parsing weakness leading to potential denial-of-service\n         - CVE-2025-50059: Fix improper HTTP header handling to prevent unintended requests","status":"published","published":"2026-02-26T13:37:26Z","modified":"2026-06-04T10:03:48.434710853Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"DLA-4248-1","title":"openjdk-11 - security update","status":"published","published":"2025-07-23T00:00:00Z","modified":"2026-03-09T02:09:11.670667Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DLA-4275-1","title":"openjdk-17 - security update","status":"published","published":"2025-08-19T00:00:00Z","modified":"2026-03-09T02:11:41.465307Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-5972-1","title":"openjdk-17 - security update","status":"published","published":"2025-08-12T00:00:00Z","modified":"2026-03-09T02:08:29.188346Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2025-0233","title":"Updated java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk \u0026 java-latest-openjdk packages fix security vulnerabilities","description":"Better Glyph drawing. (CVE-2025-30749)\nEnhance TLS protocol support. (CVE-2025-30754)\nImprove scripting supports. (CVE-2025-30761)\nImprove HTTP client header handling. (CVE-2025-50059)\nBetter Glyph drawing redux. (CVE-2025-50106)\n","status":"published","published":"2025-09-16T16:34:13Z","modified":"2026-04-16T04:44:45.580347237Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15356-1","title":"java-11-openjdk-11.0.28.0-1.1 on GA media","description":"These are all security issues fixed in the java-11-openjdk-11.0.28.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-18T00:00:00Z","modified":"2026-03-23T04:53:40.873776Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:15357-1","title":"java-17-openjdk-17.0.16.0-1.1 on GA media","description":"These are all security issues fixed in the java-17-openjdk-17.0.16.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-18T00:00:00Z","modified":"2026-03-23T04:53:40.855233Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:15358-1","title":"java-24-openjdk-24.0.2.0-1.1 on GA media","description":"These are all security issues fixed in the java-24-openjdk-24.0.2.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-18T00:00:00Z","modified":"2026-03-23T04:53:41.02013Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:15362-1","title":"java-21-openjdk-21.0.8.0-1.1 on GA media","description":"These are all security issues fixed in the java-21-openjdk-21.0.8.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-20T00:00:00Z","modified":"2026-03-23T04:53:41.429094Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:15391-1","title":"java-17-openj9-17.0.16.0-1.1 on GA media","description":"These are all security issues fixed in the java-17-openj9-17.0.16.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-27T00:00:00Z","modified":"2026-03-23T04:53:43.381337Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:15393-1","title":"java-21-openj9-21.0.8.0-1.1 on GA media","description":"These are all security issues fixed in the java-21-openj9-21.0.8.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-27T00:00:00Z","modified":"2026-03-23T04:53:43.289487Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2026:20943-1","title":"Security update for java-17-openj9","description":"This update for java-17-openj9 fixes the following issues:\n\nChanges in java-17-openj9:\n\n- Make post scripts less noisy (bsc#1267355)\n\n- Use libalternatives instead of update-alternatives for\n  distributions where libalternatives is available\n\n- Update to OpenJDK 17.0.19 with OpenJ9 0.59.0 virtual machine\n- Including Oracle April 2026 CPU changes\n  * CVE-2026-22007 (bsc#1262490), CVE-2026-22013 (bsc#1262494),\n    CVE-2026-22016 (bsc#1262495), CVE-2026-22018 (bsc#1262496),\n    CVE-2026-22021 (bsc#1262497), CVE-2026-23865 (bsc#1259118),\n    CVE-2026-34268 (bsc#1262500), CVE-2026-34282 (bsc#1262501)\n- OpenJ9 specific security fix\n  * CVE-2026-1188 (bsc#1265261)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.59/\n\n- Update to OpenJDK 17.0.18 with OpenJ9 0.57.0 virtual machine\n- Including Oracle January 2026 CPU changes\n  * CVE-2026-21925 (bsc#1257034), CVE-2026-21932 (bsc#1257036),\n    CVE-2026-21933 (bsc#1257037), CVE-2026-21945 (bsc#1257038)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.57/\n\n- Do not depend on update-desktop-files (jsc#PED-14507)\n\n- Update to OpenJDK 17.0.17 with OpenJ9 0.56.0 virtual machine\n- Including Oracle October 2025 CPU changes\n  * CVE-2025-53057 (bsc#1252414), CVE-2025-53066 (bsc#1252417)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.56/\n\n- Update to OpenJDK 17.0.16 with OpenJ9 0.53.0 virtual machine\n- Including Oracle July 2025 CPU changes\n  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),\n    CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.53/\n- Enable bootcycle build\n\n- Do not embed rebuild counter (bsc#1246806)\n\n- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since\n  the C++ part is on -std=gnu++98, this is the closest.\n- Added patch:\n  * fix-build-with-gcc15.patch\n    + fix a typo in omr that is fatal with gcc15\n\n- Update to OpenJDK 17.0.15 with OpenJ9 0.51.0 virtual machine\n- Including Oracle April 2025 CPU changes\n  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),\n    CVE-2025-30698 (bsc#1241276)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.51/\n\n- fix wrong execstack flag in libj9jit (bsc#1235844)\n\n- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine\n- Including Oracle October 2024 and January 2025 CPU changes\n  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),\n    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),\n    CVE-2025-21502 (bsc#1236278)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.49/\n","status":"published","published":"2026-06-11T07:34:54Z","modified":"2026-06-13T18:24:19.600416001Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"openSUSE-SU-2026:20947-1","title":"Security update for java-21-openj9","description":"This update for java-21-openj9 fixes the following issues:\n\nChanges in java-21-openj9:\n\n- Make post scripts less noisy (bsc#1267355)\n\n- Use libalternatives instead of update-alternatives for\n  distributions where libalternatives is available\n\n- Update to OpenJDK 21.0.11 with OpenJ9 0.59.0 virtual machine\n- Including Oracle April 2026 CPU changes\n  * CVE-2026-22007 (bsc#1262490), CVE-2026-22013 (bsc#1262494),\n    CVE-2026-22016 (bsc#1262495), CVE-2026-22018 (bsc#1262496),\n    CVE-2026-22021 (bsc#1262497), CVE-2026-23865 (bsc#1259118),\n    CVE-2026-34268 (bsc#1262500), CVE-2026-34282 (bsc#1262501)\n- OpenJ9 specific security fix\n  * CVE-2026-1188 (bsc#1265261)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.59/\n\n- Update to OpenJDK 21.0.10 with OpenJ9 0.57.0 virtual machine\n- Including Oracle January 2026 CPU changes\n  * CVE-2026-21925 (bsc#1257034), CVE-2026-21932 (bsc#1257036),\n    CVE-2026-21933 (bsc#1257037), CVE-2026-21945 (bsc#1257038)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.57/\n\n- Do not depend on update-desktop-files (jsc#PED-14507)\n\n- Update to OpenJDK 21.0.9 with OpenJ9 0.56.0 virtual machine\n- Including Oracle October 2025 CPU changes\n  * CVE-2025-53057 (bsc#1252414), CVE-2025-53066 (bsc#1252417),\n    CVE-2025-61748 (bsc#1252418)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.56/\n\n- Update to OpenJDK 21.0.8 with OpenJ9 0.53.0 virtual machine\n- Including Oracle July 2025 CPU changes\n  * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),\n    CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.53/\n- Enable bootcycle build\n\n- Do not embed rebuild counter (bsc#1246806)\n\n- Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since\n  the C++ part is on -std=gnu++98, this is the closest.\n\n- Update to OpenJDK 21.0.7 with OpenJ9 0.51.0 virtual machine\n- Including Oracle April 2025 CPU changes\n  * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),\n    CVE-2025-30698 (bsc#1241276)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.51/\n\n- fix wrong execstack flag in libj9jit (bsc#1235844)\n\n- Update to OpenJDK 21.0.6 with OpenJ9 0.49.0 virtual machine\n- Including Oracle October 2024 and January 2025 CPU changes\n  * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),\n    CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),\n    CVE-2025-21502 (bsc#1236278)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.49/\n","status":"published","published":"2026-06-12T00:33:03Z","modified":"2026-06-13T08:00:06.821696084Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2025:02545-1","title":"Security update for java-1_8_0-openj9","description":"This update for java-1_8_0-openj9 fixes the following issues:\n\nUpdate to OpenJDK 8u462 build 08 with OpenJ9 0.53.0 virtual machine:\n\n- CVE-2025-30749: several scenarios can lead to heap corruption (Oracle CPU 2025-07) (bsc#1246595)\n- CVE-2025-30754: incomplete handshake may lead to weakening TLS protections (Oracle CPU 2025-07) (bsc#1246598)\n- CVE-2025-30761: Improve scripting supports (Oracle CPU 2025-07) (bsc#1246580)\n- CVE-2025-50059: Improve HTTP client header handling (Oracle CPU 2025-07) (bsc#1246575)\n","status":"published","published":"2025-07-30T06:34:52Z","modified":"2026-02-04T03:21:03.066045Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02563-1","title":"Security update for java-11-openjdk","description":"This update for java-11-openjdk fixes the following issues:\n\nUpgrade to upstream tag jdk-11.0.28+6 (July 2025 CPU):\n\nSecurity fixes:\n\n- CVE-2025-30749: several scenarios can lead to heap corruption (bsc#1246595) \n- CVE-2025-30754: incomplete handshake may lead to weakening TLS protections (bsc#1246598) \n- CVE-2025-30761: Improve scripting supports (bsc#1246580) \n- CVE-2025-50059: Improve HTTP client header handling (bsc#1246575) \n- CVE-2025-50106: Glyph out-of-memory access and crash (bsc#1246584) \n\nChangelog:\n\n    + JDK-8026976: ECParameters, Point does not match field size\n    + JDK-8211400: nsk.share.gc.Memory::getArrayLength returns wrong\n      value\n    + JDK-8231058: VerifyOops crashes with assert(_offset \u003e= 0)\n      failed: offset for non comment?\n    + JDK-8232625: HttpClient redirect policy should be more\n      conservative\n    + JDK-8258483: [TESTBUG] gtest\n      CollectorPolicy.young_scaled_initial_ergo_vm fails if heap is\n      too small\n    + JDK-8293345: SunPKCS11 provider checks on PKCS11 Mechanism are\n      problematic\n    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts\n    + JDK-8301753: AppendFile/WriteFile has differences between make\n      3.81 and 4+\n    + JDK-8303770: Remove Baltimore root certificate expiring in May\n      2025\n    + JDK-8315380: AsyncGetCallTrace crash in frame::safe_for_sender\n    + JDK-8327476: Upgrade JLine to 3.26.1\n    + JDK-8328957: Update PKCS11Test.java to not use hardcoded path\n    + JDK-8331959: Update PKCS#11 Cryptographic Token Interface to\n      v3.1\n    + JDK-8339300: CollectorPolicy.young_scaled_initial_ergo_vm\n      gtest fails on ppc64 based platforms\n    + JDK-8339728: [Accessibility,Windows,JAWS] Bug in the\n      getKeyChar method of the AccessBridge class\n    + JDK-8345133: Test sun/security/tools/jarsigner/\n      /TsacertOptionTest.java failed: Warning found in stdout\n    + JDK-8345625: Better HTTP connections\n    + JDK-8346887: DrawFocusRect() may cause an assertion failure\n    + JDK-8347629: Test FailOverDirectExecutionControlTest.java\n      fails with -Xcomp\n    + JDK-8348110: Update LCMS to 2.17\n    + JDK-8348596: Update FreeType to 2.13.3\n    + JDK-8348598: Update Libpng to 1.6.47\n    + JDK-8348989: Better Glyph drawing\n    + JDK-8349111: Enhance Swing supports\n    + JDK-8349594: Enhance TLS protocol support\n    + JDK-8350469: [11u] Test AbsPathsInImage.java fails\n      - JDK-8239429 public clone\n    + JDK-8350498: Remove two Camerfirma root CA certificates\n    + JDK-8350991: Improve HTTP client header handling\n    + JDK-8351099: Bump update version of OpenJDK: 11.0.28\n    + JDK-8351422: Improve scripting supports\n    + JDK-8352302: Test sun/security/tools/jarsigner/\n      /TimestampCheck.java is failing\n    + JDK-8352716: (tz) Update Timezone Data to 2025b\n    + JDK-8356096: ISO 4217 Amendment 179 Update\n    + JDK-8356571: Re-enable -Wtype-limits for GCC in LCMS\n    + JDK-8359170: Add 2 TLS and 2 CS Sectigo roots\n    + JDK-8360147: Better Glyph drawing redux\n","status":"published","published":"2025-07-31T02:15:52Z","modified":"2026-02-04T03:12:15.269098Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02657-1","title":"Security update for java-21-openjdk","description":"This update for java-21-openjdk fixes the following issues:\n\nUpdate to upstream tag jdk-21.0.8+9 (July 2025 CPU):\n\nSecurity fixes:\n\n- CVE-2025-30749: several scenarios can lead to heap corruption (bsc#1246595) \n- CVE-2025-30754: incomplete handshake may lead to weakening TLS protections (bsc#1246598) \n- CVE-2025-50059: Improve HTTP client header handling (bsc#1246575) \n- CVE-2025-50106: Glyph out-of-memory access and crash (bsc#1246584) \n\nOther fixes:\n\n- Allow compilation of openjdk for 40 years (bsc#1213796)\n\nChangelog:\n\n    + JDK-6956385: URLConnection.getLastModified() leaks file\n      handles for jar:file and file: URLs\n    + JDK-8051591: Test\n      javax/swing/JTabbedPane/8007563/Test8007563.java fails\n    + JDK-8136895: Writer not closed with disk full error, file\n      resource leaked\n    + JDK-8180450: secondary_super_cache does not scale well\n    + JDK-8183348: Better cleanup for\n      jdk/test/sun/security/pkcs12/P12SecretKey.java\n    + JDK-8200566: DistributionPointFetcher fails to fetch CRLs if\n      the DistributionPoints field contains more than one\n      DistributionPoint and the first one fails\n    + JDK-8202100: Merge vm/share/InMemoryJavaCompiler w/\n      jdk/test/lib/compiler/InMemoryJavaCompiler\n    + JDK-8210471: GZIPInputStream constructor could leak an\n      un-end()ed Inflater\n    + JDK-8211400: nsk.share.gc.Memory::getArrayLength returns\n      wrong value\n    + JDK-8220213: com/sun/jndi/dns/ConfigTests/Timeout.java\n      failed intermittent\n    + JDK-8249831: Test sun/security/mscapi/nonUniqueAliases/\n      /NonUniqueAliases.java is marked with @ignore\n    + JDK-8253440: serviceability/sa/TestJhsdbJstackLineNumbers.java\n      failed with 'Didn't find enough line numbers'\n    + JDK-8256211: assert fired in\n      java/net/httpclient/DependentPromiseActionsTest (infrequent)\n    + JDK-8258483: [TESTBUG] gtest\n      CollectorPolicy.young_scaled_initial_ergo_vm fails if heap is\n      too small\n    + JDK-8267174: Many test files have the wrong Copyright header\n    + JDK-8270269: Desktop.browse method fails if earlier\n      CoInitialize call as COINIT_MULTITHREADED\n    + JDK-8276995: Bug in jdk.jfr.event.gc.collection.TestSystemGC\n    + JDK-8279016: JFR Leak Profiler is broken with Shenandoah\n    + JDK-8280991: [XWayland] No displayChanged event after\n      setDisplayMode call\n    + JDK-8281511: java/net/ipv6tests/UdpTest.java fails with\n      checkTime failed\n    + JDK-8282726: java/net/vthread/BlockingSocketOps.java\n      timeout/hang intermittently on Windows\n    + JDK-8286204: [Accessibility,macOS,VoiceOver] VoiceOver reads\n      the spinner value 10 as 1 when user iterates to 10 for the\n      first time on macOS\n    + JDK-8286789: Test forceEarlyReturn002.java timed out\n    + JDK-8286875: ProgrammableUpcallHandler::on_entry/on_exit\n      access thread fields from native\n    + JDK-8294155: Exception thrown before awaitAndCheck hangs\n      PassFailJFrame\n    + JDK-8295804: javax/swing/JFileChooser/\n      /JFileChooserSetLocationTest.java failed with 'setLocation()\n      is not working properly'\n    + JDK-8297692: Avoid sending per-region GCPhaseParallel JFR\n      events in G1ScanCollectionSetRegionClosure\n    + JDK-8303770: Remove Baltimore root certificate expiring in\n      May 2025\n    + JDK-8305010: Test vmTestbase/nsk/jvmti/scenarios/sampling/\n      /SP05/sp05t003/TestDescription.java timed out: thread not\n      suspended\n    + JDK-8307318: Test serviceability/sa/\n      /ClhsdbCDSJstackPrintAll.java failed:\n      ArrayIndexOutOfBoundsException\n    + JDK-8307824: Clean up Finalizable.java and finalize\n      terminology in vmTestbase/nsk/share\n    + JDK-8308033: The jcmd thread dump related tests should test\n      virtual threads\n    + JDK-8308966: Add intrinsic for float/double modulo for x86\n      AVX2 and AVX512\n    + JDK-8309667: TLS handshake fails because of\n      ConcurrentModificationException in PKCS12KeyStore\n      .engineGetEntry\n    + JDK-8309841: Jarsigner should print a warning if an entry is\n      removed\n    + JDK-8309978: [x64] Fix useless padding\n    + JDK-8310066: Improve test coverage for JVMTI GetThreadState\n      on carrier and mounted vthread\n    + JDK-8310525: DynamicLauncher for JDP test needs to try\n      harder to find a free port\n    + JDK-8310643: Misformatted copyright messages in FFM\n    + JDK-8312246: NPE when HSDB visits bad oop\n    + JDK-8312475: org.jline.util.PumpReader signed byte problem\n    + JDK-8313290: Misleading exception message from\n      STS.Subtask::get when task forked after shutdown\n    + JDK-8313430: [JVMCI] fatal error: Never compilable: in JVMCI\n      shutdown\n    + JDK-8313654: Test WaitNotifySuspendedVThreadTest.java timed\n      out\n    + JDK-8314056: Remove runtime platform check from frem/drem\n    + JDK-8314136: Test java/net/httpclient/CancelRequestTest.java\n      failed: WARNING: tracker for HttpClientImpl(42) has\n      outstanding operations\n    + JDK-8314236: Overflow in Collections.rotate\n    + JDK-8314319: LogCompilation doesn't reset lateInlining when\n      it encounters a failure.\n    + JDK-8314840: 3 gc/epsilon tests ignore external vm options\n    + JDK-8314842: zgc/genzgc tests ignore vm flags\n    + JDK-8315128: jdk/jfr/event/runtime/\n      /TestResidentSetSizeEvent.java fails with 'The size should be\n      less than or equal to peak'\n    + JDK-8315484: java/awt/dnd/RejectDragDropActionTest.java\n      timed out\n    + JDK-8315669: Open source several Swing PopupMenu related\n      tests\n    + JDK-8315742: Open source several Swing Scroll related tests\n    + JDK-8315827: Kitchensink.java and RenaissanceStressTest.java\n      time out with jvmti module errors\n    + JDK-8315871: Opensource five more Swing regression tests\n    + JDK-8315876: Open source several Swing CSS related tests\n    + JDK-8315951: Open source several Swing HTMLEditorKit related\n      tests\n    + JDK-8315981: Opensource five more random Swing tests\n    + JDK-8316061: Open source several Swing RootPane and Slider\n      related tests\n    + JDK-8316324: Opensource five miscellaneous Swing tests\n    + JDK-8316388: Opensource five Swing component related\n      regression tests\n    + JDK-8316452: java/lang/instrument/modules/\n      /AppendToClassPathModuleTest.java ignores VM flags\n    + JDK-8316497: ColorConvertOp - typo for non-ICC conversions\n      needs one-line fix\n    + JDK-8316580: HttpClient with StructuredTaskScope does not\n      close when a task fails\n    + JDK-8316629: j.text.DateFormatSymbols setZoneStrings()\n      exception is unhelpful\n    + JDK-8317264: Pattern.Bound has `static` fields that should\n      be `static final`.\n    + JDK-8318509: x86 count_positives intrinsic broken for\n      -XX:AVX3Threshold=0\n    + JDK-8318636: Add jcmd to print annotated process memory map\n    + JDK-8318700: MacOS Zero cannot run gtests due to wrong JVM\n      path\n    + JDK-8318811: Compiler directives parser swallows a character\n      after line comments\n    + JDK-8318915: Enhance checks in BigDecimal.toPlainString()\n    + JDK-8319439: Move BufferNode from PtrQueue files to new files\n    + JDK-8319572: Test jdk/incubator/vector/LoadJsvmlTest.java\n      ignores VM flags\n    + JDK-8319690: [AArch64] C2 compilation hits\n      offset_ok_for_immed: assert 'c2 compiler bug'\n    + JDK-8320687: sun.jvmstat.monitor.MonitoredHost\n      .getMonitoredHost() throws unexpected exceptions when invoked\n      concurrently\n    + JDK-8320948: NPE due to unreported compiler error\n    + JDK-8321204: C2: assert(false) failed: node should be in\n      igvn hash table\n    + JDK-8321479: java -D-D crashes\n    + JDK-8321931: memory_swap_current_in_bytes reports 0 as\n      'unlimited'\n    + JDK-8322141: SequenceInputStream.transferTo should not\n      return as soon as Long.MAX_VALUE bytes have been transferred\n    + JDK-8322475: Extend printing for System.map\n    + JDK-8323795: jcmd Compiler.codecache should print total size\n      of code cache\n    + JDK-8324345: Stack overflow during C2 compilation when\n      splitting memory phi\n    + JDK-8324678: Replace NULL with nullptr in HotSpot gtests\n    + JDK-8324681: Replace NULL with nullptr in HotSpot jtreg test\n      native code files\n    + JDK-8324799: Use correct extension for C++ test headers\n    + JDK-8324880: Rename get_stack_trace.h\n    + JDK-8325055: Rename Injector.h\n    + JDK-8325180: Rename jvmti_FollowRefObjects.h\n    + JDK-8325347: Rename native_thread.h\n    + JDK-8325367: Rename nsk_list.h\n    + JDK-8325435: [macos] Menu or JPopupMenu not closed when main\n      window is resized\n    + JDK-8325456: Rename nsk_mutex.h\n    + JDK-8325458: Rename mlvmJvmtiUtils.h\n    + JDK-8325680: Uninitialised memory in deleteGSSCB of\n      GSSLibStub.c:179\n    + JDK-8325682: Rename nsk_strace.h\n    + JDK-8325910: Rename jnihelper.h\n    + JDK-8326090: Rename jvmti_aod.h\n    + JDK-8326389: [test] improve assertEquals failure output\n    + JDK-8326524: Rename agent_common.h\n    + JDK-8326586: Improve Speed of System.map\n    + JDK-8327071: [Testbug] g-tests for cgroup leave files in\n      /tmp on linux\n    + JDK-8327169: serviceability/dcmd/vm/SystemMapTest.java and\n      SystemDumpMapTest.java may fail after JDK-8326586\n    + JDK-8327370: (ch) sun.nio.ch.Poller.register throws\n      AssertionError\n    + JDK-8327461: KeyStore getEntry is not thread-safe\n    + JDK-8328107: Shenandoah/C2: TestVerifyLoopOptimizations test\n      failure\n    + JDK-8328301: Convert Applet test\n      ManualHTMLDataFlavorTest.java to main program\n    + JDK-8328482: Convert and Open source few manual applet test\n      to main based\n    + JDK-8328484: Convert and Opensource few JFileChooser applet\n      test to main\n    + JDK-8328648: Remove applet usage from JFileChooser tests\n      bug4150029\n    + JDK-8328670: Automate and open source few closed manual\n      applet test\n    + JDK-8328673: Convert closed text/html/CSS manual applet test\n      to main\n    + JDK-8328864: NullPointerException in\n      sun.security.jca.ProviderList.getService()\n    + JDK-8329261: G1: interpreter post-barrier x86 code asserts\n      index size of wrong buffer\n    + JDK-8329729:\n      java/util/Properties/StoreReproducibilityTest.java times out\n    + JDK-8330106: C2: VectorInsertNode::make() shouldn't call\n      ConINode::make() directly\n    + JDK-8330158: C2: Loop strip mining uses ABS with min int\n    + JDK-8330534: Update nsk/jdwp tests to use driver instead of\n      othervm\n    + JDK-8330598: java/net/httpclient/Http1ChunkedTest.java fails\n      with java.util.MissingFormatArgumentException: Format\n      specifier '%s'\n    + JDK-8330936: [ubsan] exclude function BilinearInterp and\n      ShapeSINextSpan in libawt java2d from ubsan checks\n    + JDK-8331088: Incorrect TraceLoopPredicate output\n    + JDK-8331735: UpcallLinker::on_exit races with GC when\n      copying frame anchor\n    + JDK-8332252: Clean up vmTestbase/vm/share\n    + JDK-8332506: SIGFPE In\n      ObjectSynchronizer::is_async_deflation_needed()\n    + JDK-8332631: Update nsk.share.jpda.BindServer to don't use\n      finalization\n    + JDK-8332641: Update nsk.share.jpda.Jdb to don't use\n      finalization\n    + JDK-8332880: JFR GCHelper class recognizes 'Archive' regions\n      as valid\n    + JDK-8332921: Ctrl+C does not call shutdown hooks after JLine\n      upgrade\n    + JDK-8333013: Update vmTestbase/nsk/share/LocalProcess.java\n      to don't use finalization\n    + JDK-8333117: Remove support of remote and manual debuggee\n      launchers\n    + JDK-8333680: com/sun/tools/attach/BasicTests.java fails with\n      'SocketException: Permission denied: connect'\n    + JDK-8333805: Replaying compilation with null static final\n      fields results in a crash\n    + JDK-8333890: Fatal error in auto-vectorizer with float16\n      kernel.\n    + JDK-8334644: Automate\n      javax/print/attribute/PageRangesException.java\n    + JDK-8334780: Crash: assert(h_array_list.not_null()) failed:\n      invariant\n    + JDK-8334895: OpenJDK fails to configure on linux aarch64\n      when CDS is disabled after JDK-8331942\n    + JDK-8335181: Incorrect handling of HTTP/2 GOAWAY frames in\n      HttpClient\n    + JDK-8335643: serviceability/dcmd/vm tests fail for ZGC after\n      JDK-8322475\n    + JDK-8335662: [AArch64] C1: guarantee(val \u003c (1ULL \u003c\u003c nbits))\n      failed: Field too big for insn\n    + JDK-8335684: Test ThreadCpuTime.java should pause like\n      ThreadCpuTimeArray.java\n    + JDK-8335710: serviceability/dcmd/vm/SystemDumpMapTest.java\n      and SystemMapTest.java fail on Linux Alpine after 8322475\n    + JDK-8335836: serviceability/jvmti/StartPhase/AllowedFunctions/\n      /AllowedFunctions.java fails with unexpected exit code: 112\n    + JDK-8335860: compiler/vectorization/\n      /TestFloat16VectorConvChain.java fails with non-standard\n      AVX/SSE settings\n    + JDK-8336042: Caller/callee param size mismatch in\n      deoptimization causes crash\n    + JDK-8336499: Failure when creating non-CRT RSA private keys\n      in SunPKCS11\n    + JDK-8336587: failure_handler lldb command times out on\n      macosx-aarch64 core file\n    + JDK-8336827: compiler/vectorization/\n      /TestFloat16VectorConvChain.java timeouts on ppc64 platforms\n      after JDK-8335860\n    + JDK-8337221: CompileFramework: test library to conveniently\n      compile java and jasm sources for fuzzing\n    + JDK-8337299: vmTestbase/nsk/jdb/stop_at/stop_at002/\n      /stop_at002.java failure goes undetected\n    + JDK-8337681: PNGImageWriter uses much more memory than\n      necessary\n    + JDK-8337795: Type annotation attached to incorrect type\n      during class reading\n    + JDK-8337958: Out-of-bounds array access in\n      secondary_super_cache\n    + JDK-8337981: ShenandoahHeap::is_in should check for alive\n      regions\n    + JDK-8337998: CompletionFailure in getEnclosingType attaching\n      type annotations\n    + JDK-8338010: WB_IsFrameDeoptimized miss ResourceMark\n    + JDK-8338064: Give better error for ConcurrentHashTable\n      corruption\n    + JDK-8338136: Hotspot should support multiple large page\n      sizes on Windows\n    + JDK-8338154: Fix -Wzero-as-null-pointer-constant warnings in\n      gtest framework\n    + JDK-8338202: Shenandoah: Improve handshake closure labels\n    + JDK-8338314: JFR: Split JFRCheckpoint VM operation\n    + JDK-8339148: Make os::Linux::active_processor_count() public\n    + JDK-8339288: Improve diagnostic logging\n      runtime/cds/DeterministicDump.java\n    + JDK-8339300: CollectorPolicy.young_scaled_initial_ergo_vm\n      gtest fails on ppc64 based platforms\n    + JDK-8339538: Wrong timeout computations in DnsClient\n    + JDK-8339639: Opensource few AWT PopupMenu tests\n    + JDK-8339678: Update runtime/condy tests to be executed with\n      VM flags\n    + JDK-8339727: Open source several AWT focus tests - series 1\n    + JDK-8339769: Incorrect error message during startup if\n      working directory does not exist\n    + JDK-8339794: Open source closed choice tests #1\n    + JDK-8339810: Clean up the code in sun.tools.jar.Main to\n      properly close resources and use ZipFile during extract\n    + JDK-8339836: Open source several AWT Mouse tests - Batch 1\n    + JDK-8339842: Open source several AWT focus tests - series 2\n    + JDK-8339895: Open source several AWT focus tests - series 3\n    + JDK-8339906: Open source several AWT focus tests - series 4\n    + JDK-8339935: Open source several AWT focus tests - series 5\n    + JDK-8339982: Open source several AWT Mouse tests - Batch 2\n    + JDK-8339984: Open source AWT MenuItem related tests\n    + JDK-8339995: Open source several AWT focus tests - series 6\n    + JDK-8340024: In ClassReader, extract a constant for the\n      superclass supertype_index\n    + JDK-8340077: Open source few Checkbox tests - Set2\n    + JDK-8340084: Open source AWT Frame related tests\n    + JDK-8340143: Open source several Java2D rendering loop tests.\n    + JDK-8340146: ZGC: TestAllocateHeapAt.java should not run\n      with UseLargePages\n    + JDK-8340164: Open source few Component tests - Set1\n    + JDK-8340173: Open source some Component/Panel/EventQueue\n      tests - Set2\n    + JDK-8340176: Replace usage of -noclassgc with -Xnoclassgc in\n      test/jdk/java/lang/management/MemoryMXBean/LowMemoryTest2.java\n    + JDK-8340193: Open source several AWT Dialog tests - Batch 1\n    + JDK-8340228: Open source couple more miscellaneous AWT tests\n    + JDK-8340271: Open source several AWT Robot tests\n    + JDK-8340279: Open source several AWT Dialog tests - Batch 2\n    + JDK-8340332: Open source mixed AWT tests - Set3\n    + JDK-8340366: Open source several AWT Dialog tests - Batch 3\n    + JDK-8340367: Opensource few AWT image tests\n    + JDK-8340393: Open source closed choice tests #2\n    + JDK-8340407: Open source a few more Component related tests\n    + JDK-8340417: Open source some MenuBar tests - Set1\n    + JDK-8340432: Open source some MenuBar tests - Set2\n    + JDK-8340433: Open source closed choice tests #3\n    + JDK-8340437: Open source few more AWT Frame related tests\n    + JDK-8340458: Open source additional Component tests (part 2)\n    + JDK-8340555: Open source DnD tests - Set4\n    + JDK-8340560: Open Source several AWT/2D font and rendering\n      tests\n    + JDK-8340605: Open source several AWT PopupMenu tests\n    + JDK-8340621: Open source several AWT List tests\n    + JDK-8340625: Open source additional Component tests (part 3)\n    + JDK-8340639: Open source few more AWT List tests\n    + JDK-8340713: Open source DnD tests - Set5\n    + JDK-8340784: Remove PassFailJFrame constructor with\n      screenshots\n    + JDK-8340790: Open source several AWT Dialog tests - Batch 4\n    + JDK-8340809: Open source few more AWT PopupMenu tests\n    + JDK-8340874: Open source some of the AWT Geometry/Button\n      tests\n    + JDK-8340907: Open source closed frame tests # 2\n    + JDK-8340966: Open source few Checkbox and Cursor tests - Set1\n    + JDK-8340967: Open source few Cursor tests - Set2\n    + JDK-8340978: Open source few DnD tests - Set6\n    + JDK-8340985: Open source some Desktop related tests\n    + JDK-8341000: Open source some of the AWT Window tests\n    + JDK-8341004: Open source AWT FileDialog related tests\n    + JDK-8341072: Open source several AWT Canvas and Rectangle\n      related tests\n    + JDK-8341128: open source some 2d graphics tests\n    + JDK-8341148: Open source several Choice related tests\n    + JDK-8341162: Open source some of the AWT window test\n    + JDK-8341170: Open source several Choice related tests (part 2)\n    + JDK-8341177: Opensource few List and a Window test\n    + JDK-8341191: Open source few more AWT FileDialog tests\n    + JDK-8341239: Open source closed frame tests # 3\n    + JDK-8341257: Open source few DND tests - Set1\n    + JDK-8341258: Open source few various AWT tests - Set1\n    + JDK-8341278: Open source few TrayIcon tests - Set7\n    + JDK-8341298: Open source more AWT window tests\n    + JDK-8341373: Open source closed frame tests # 4\n    + JDK-8341378: Open source few TrayIcon tests - Set8\n    + JDK-8341447: Open source closed frame tests # 5\n    + JDK-8341535: sun/awt/font/TestDevTransform.java fails with\n      RuntimeException: Different rendering\n    + JDK-8341637: java/net/Socket/UdpSocket.java fails with\n      'java.net.BindException: Address already in use'\n      (macos-aarch64)\n    + JDK-8341779: [REDO BACKPORT] type annotations are not\n      visible to javac plugins across compilation boundaries\n      (JDK-8225377)\n    + JDK-8341972: java/awt/dnd/DnDRemoveFocusOwnerCrashTest.java\n      timed out after JDK-8341257\n    + JDK-8342075: HttpClient: improve HTTP/2 flow control checks\n    + JDK-8342376: More reliable OOM handling in\n      ExceptionDuringDumpAtObjectsInitPhase test\n    + JDK-8342524: Use latch in AbstractButton/bug6298940.java\n      instead of delay\n    + JDK-8342633: javax/management/security/\n      /HashedPasswordFileTest.java creates tmp file in src dir\n    + JDK-8342958: Use jvmArgs consistently in microbenchmarks\n    + JDK-8343019: Primitive caches must use boxed instances from\n      the archive\n    + JDK-8343037: Missing @since tag on JColorChooser.showDialog\n      overload\n    + JDK-8343103: Enable debug logging for vmTestbase/nsk/jvmti/\n      /scenarios/sampling/SP05/sp05t003/TestDescription.java\n    + JDK-8343124: Tests fails with java.lang.IllegalAccessException:\n      class com.sun.javatest.regtest.agent.MainWrapper$MainTask\n      cannot access\n    + JDK-8343144: UpcallLinker::on_entry racingly clears pending\n      exception with GC safepoints\n    + JDK-8343170: java/awt/Cursor/JPanelCursorTest/\n      /JPanelCursorTest.java does not show the default cursor\n    + JDK-8343224: print/Dialog/PaperSizeError.java fails with\n      MediaSizeName is not A4: A4\n    + JDK-8343342: java/io/File/GetXSpace.java fails on Windows\n      with CD-ROM drive\n    + JDK-8343345: Use -jvmArgsPrepend when running\n      microbenchmarks in RunTests.gmk\n    + JDK-8343529: serviceability/sa/ClhsdbWhere.java fails\n      AssertionFailure: Corrupted constant pool\n    + JDK-8343754: Problemlist\n      jdk/jfr/event/oldobject/TestShenandoah.java after JDK-8279016\n    + JDK-8343855: HTTP/2 ConnectionWindowUpdateSender may miss\n      some unprocessed DataFrames from closed streams\n    + JDK-8343891: Test javax/swing/JTabbedPane/\n      /TestJTabbedPaneBackgroundColor.java failed\n    + JDK-8343936: Adjust timeout in test\n      javax/management/monitor/DerivedGaugeMonitorTest.java\n    + JDK-8344316: security/auth/callback/TextCallbackHandler/\n      /Password.java make runnable with JTReg and add the UI\n    + JDK-8344346: java/net/httpclient/ShutdownNow.java fails with\n      java.lang.AssertionError: client was still running, but exited\n      after further delay: timeout should be adjusted\n    + JDK-8344361: Restore null return for invalid services from\n      legacy providers\n    + JDK-8344414: ZGC: Another division by zero in\n      rule_major_allocation_rate\n    + JDK-8344925: translet-name ignored when package-name is also\n      set\n    + JDK-8345133: Test sun/security/tools/jarsigner/\n      /TsacertOptionTest.java failed: Warning found in stdout\n    + JDK-8345134: Test sun/security/tools/jarsigner/\n      /ConciseJarsigner.java failed: unable to find valid\n      certification path to requested target\n    + JDK-8345146: [PPC64] Make intrinsic conversions between bit\n      representations of half precision values and floats\n    + JDK-8345341: Fix incorrect log message in JDI stop002t test\n    + JDK-8345357: test/jdk/javax/swing/JRadioButton/8033699/\n      /bug8033699.java fails in ubuntu22.04\n    + JDK-8345447: test/jdk/javax/swing/JToolBar/4529206/\n      /bug4529206.java fails in ubuntu22.04\n    + JDK-8345547: test/jdk/javax/swing/text/DefaultEditorKit/\n      /4278839/bug4278839.java fails in ubuntu22.04\n    + JDK-8345598: Upgrade NSS binaries for interop tests\n    + JDK-8345625: Better HTTP connections\n    + JDK-8345728: [Accessibility,macOS,Screen Magnifier]:\n      JCheckbox unchecked state does not magnify but works for\n      checked state\n    + JDK-8345838: Remove the\n      appcds/javaldr/AnonVmClassesDuringDump.java test\n    + JDK-8346049: jdk/test/lib/security/timestamp/TsaServer.java\n      warnings\n    + JDK-8346082: Output JVMTI agent information in hserr files\n    + JDK-8346264: 'Total compile time' counter should include\n      time spent in failing/bailout compiles\n    + JDK-8346581: JRadioButton/ButtonGroupFocusTest.java fails in\n      CI on Linux\n    + JDK-8346888: [ubsan] block.cpp:1617:30: runtime error:\n      9.97582e+36 is outside the range of representable values of\n      type 'int'\n    + JDK-8347000: Bug in\n      com/sun/net/httpserver/bugs/B6361557.java test\n    + JDK-8347019: Test javax/swing/JRadioButton/8033699/\n      /bug8033699.java  still fails: Focus is not on Radio Button\n      Single as Expected\n    + JDK-8347083: Incomplete logging in nsk/jvmti/\n      /ResourceExhausted/resexhausted00* tests\n    + JDK-8347126: gc/stress/TestStressG1Uncommit.java gets\n      OOM-killed\n    + JDK-8347173: java/net/DatagramSocket/\n      /InterruptibleDatagramSocket.java fails with virtual thread\n      factory\n    + JDK-8347286: (fs) Remove some extensions from\n      java/nio/file/Files/probeContentType/Basic.java\n    + JDK-8347296: WinInstallerUiTest fails in local test runs if\n      the path to test work directory is longer that regular\n    + JDK-8347373: HTTP/2 flow control checks may count\n      unprocessed data twice\n    + JDK-8347506: Compatible OCSP readtimeout property with OCSP\n      timeout\n    + JDK-8347596: Update HSS/LMS public key encoding\n    + JDK-8347629: Test FailOverDirectExecutionControlTest.java\n      fails with -Xcomp\n    + JDK-8347995: Race condition in jdk/java/net/httpclient/\n      /offline/FixedResponseHttpClient.java\n    + JDK-8348107: test/jdk/java/net/httpclient/\n      /HttpsTunnelAuthTest.java fails intermittently\n    + JDK-8348110: Update LCMS to 2.17\n    + JDK-8348299: Update List/ItemEventTest/ItemEventTest.java\n    + JDK-8348323: Corrupted timezone string in JVM crash log\n    + JDK-8348596: Update FreeType to 2.13.3\n    + JDK-8348597: Update HarfBuzz to 10.4.0\n    + JDK-8348598: Update Libpng to 1.6.47\n    + JDK-8348600: Update PipeWire to 1.3.81\n    + JDK-8348865: JButton/bug4796987.java never runs because\n      Windows XP is unavailable\n    + JDK-8348936: [Accessibility,macOS,VoiceOver] VoiceOver\n      doesn't announce untick on toggling the checkbox with 'space'\n      key on macOS\n    + JDK-8348989: Better Glyph drawing\n    + JDK-8349111: Enhance Swing supports\n    + JDK-8349200: [JMH]\n      time.format.ZonedDateTimeFormatterBenchmark fails\n    + JDK-8349348: Refactor ClassLoaderDeadlock.sh and Deadlock.sh\n      to run fully in java\n    + JDK-8349358: [JMH] Cannot access class\n      jdk.internal.vm.ContinuationScope\n    + JDK-8349492: Update sun/security/pkcs12/\n      /KeytoolOpensslInteropTest.java to use a recent Openssl\n      version\n    + JDK-8349501: Relocate supporting classes in\n      security/testlibrary to test/lib/jdk tree\n    + JDK-8349594: Enhance TLS protocol support\n    + JDK-8349623: [ASAN] Gtest os_linux.glibc_mallinfo_wrapper_vm\n      fails\n    + JDK-8349637: Integer.numberOfLeadingZeros outputs\n      incorrectly in certain cases\n    + JDK-8349751: AIX build failure after upgrade pipewire to\n      1.3.81\n    + JDK-8350201: Out of bounds access on Linux aarch64 in\n      os::print_register_info\n    + JDK-8350211: CTW: Attempt to preload all classes in constant\n      pool\n    + JDK-8350224: Test javax/swing/JComboBox/\n      /TestComboBoxComponentRendering.java fails in ubuntu 23.x and\n      later\n    + JDK-8350260: Improve HTML instruction formatting in\n      PassFailJFrame\n    + JDK-8350313: Include timings for leaving safepoint in\n      safepoint logging\n    + JDK-8350383: Test: add more test case for string compare (UL\n      case)\n    + JDK-8350386: Test TestCodeCacheFull.java fails with option\n      -XX:-UseCodeCacheFlushing\n    + JDK-8350412: [21u] AArch64: Ambiguous frame layout leads to\n      incorrect traces in JFR\n    + JDK-8350483: AArch64: turn on signum intrinsics by default\n      on Ampere CPUs\n    + JDK-8350498: Remove two Camerfirma root CA certificates\n    + JDK-8350546: Several java/net/InetAddress tests fails\n      UnknownHostException\n    + JDK-8350616: Skip ValidateHazardPtrsClosure in non-debug\n      builds\n    + JDK-8350650: Bump update version for OpenJDK: jdk-21.0.8\n    + JDK-8350682: [JMH] vector.IndexInRangeBenchmark failed with\n      IndexOutOfBoundsException for size=1024\n    + JDK-8350786: Some java/lang jtreg tests miss requires\n      vm.hasJFR\n    + JDK-8350924: javax/swing/JMenu/4213634/bug4213634.java fails\n    + JDK-8350991: Improve HTTP client header handling\n    + JDK-8351086: (fc) Make java/nio/channels/FileChannel/\n      /BlockDeviceSize.java test manual\n    + JDK-8351500: G1: NUMA migrations cause crashes in region\n      allocation\n    + JDK-8351665: Remove unused UseNUMA in os_aix.cpp\n    + JDK-8351933: Inaccurate masking of TC subfield decrement in\n      ForkJoinPool\n    + JDK-8352076: [21u] Problem list tests that fail in 21 and\n      would be fixed by 8309622\n    + JDK-8352109: java/awt/Desktop/MailTest.java fails in\n      platforms where Action.MAIL is not supported\n    + JDK-8352302: Test sun/security/tools/jarsigner/\n      /TimestampCheck.java is failing\n    + JDK-8352512: TestVectorZeroCount: counter not reset between\n      iterations\n    + JDK-8352676: Opensource JMenu tests - series1\n    + JDK-8352680: Opensource few misc swing tests\n    + JDK-8352684: Opensource JInternalFrame tests - series1\n    + JDK-8352706: httpclient HeadTest does not run on HTTP2\n    + JDK-8352716: (tz) Update Timezone Data to 2025b\n    + JDK-8352908: Open source several swing tests batch1\n    + JDK-8352942: jdk/jfr/startupargs/TestMemoryOptions.java\n      fails with 32-bit build\n    + JDK-8353070: Clean up and open source couple AWT Graphics\n      related tests (Part 1)\n    + JDK-8353138: Screen capture for test\n      TaskbarPositionTest.java, failure case\n    + JDK-8353190: Use '/native' Run Option for\n      TestAvailableProcessors Execution\n    + JDK-8353237: [AArch64] Incorrect result of\n      VectorizedHashCode intrinsic on Cortex-A53\n    + JDK-8353320: Open source more Swing text tests\n    + JDK-8353446: Open source several AWT Menu tests - Batch 2\n    + JDK-8353475: Open source two Swing DefaultCaret tests\n    + JDK-8353685: Open some JComboBox bugs 4\n    + JDK-8353709: Debug symbols bundle should contain full debug\n      files when building --with-external-symbols-in-bundles=public\n    + JDK-8353787: Increased number of SHA-384-Digest\n      java.util.jar.Attributes$Name instances leading to higher\n      memory footprint\n    + JDK-8353942: Open source Swing Tests - Set 5\n    + JDK-8354255: [jittester] Remove TempDir debug output\n    + JDK-8354530: AIX: sporadic unexpected errno when calling\n      setsockopt in Net.joinOrDrop\n    + JDK-8354554: Open source several clipboard tests batch1\n    + JDK-8354802: MAX_SECS definition is unused in os_linux\n    + JDK-8354893: [REDO BACKPORT] javac crashes while adding type\n      annotations to the return type of a constructor (JDK-8320001)\n    + JDK-8355498: [AIX] Adapt code for C++ VLA rule\n    + JDK-8356053: Test java/awt/Toolkit/Headless/\n      /HeadlessToolkit.java fails by timeout\n    + JDK-8356096: ISO 4217 Amendment 179 Update\n    + JDK-8356571: Re-enable -Wtype-limits for GCC in LCMS\n    + JDK-8357105: C2: compilation fails with 'assert(false)\n      failed: empty program detected during loop optimization'\n    + JDK-8357193: [VS 2022 17.14] Warning C5287 in debugInit.c:\n      enum type mismatch during build\n    + JDK-8359170: Add 2 TLS and 2 CS Sectigo roots\n    + JDK-8360147: Better Glyph drawing redux\n    + JDK-8360406: [21u] Disable logic for attaching type\n      annotations to class files until 8359336 is fixed\n    + JDK-8361672: [21u] Remove designator\n      DEFAULT_PROMOTED_VERSION_PRE=ea for release 21.0.8\n","status":"published","published":"2025-08-04T10:34:34Z","modified":"2026-02-04T03:54:00.667508Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:02666-1","title":"Security update for java-11-openjdk","description":"This update for java-11-openjdk fixes the following issues:\n\nUpgrade to upstream tag jdk-11.0.28+6 (July 2025 CPU):\n\nSecurity fixes:\n\n- CVE-2025-30749: several scenarios can lead to heap corruption (bsc#1246595) \n- CVE-2025-30754: incomplete handshake may lead to weakening TLS protections (bsc#1246598) \n- CVE-2025-30761: Improve scripting supports (bsc#1246580) \n- CVE-2025-50059: Improve HTTP client header handling (bsc#1246575) \n- CVE-2025-50106: Glyph out-of-memory access and crash (bsc#1246584) \n\nChangelog:\n\n    + JDK-8026976: ECParameters, Point does not match field size\n    + JDK-8211400: nsk.share.gc.Memory::getArrayLength returns wrong\n      value\n    + JDK-8231058: VerifyOops crashes with assert(_offset \u003e= 0)\n      failed: offset for non comment?\n    + JDK-8232625: HttpClient redirect policy should be more\n      conservative\n    + JDK-8258483: [TESTBUG] gtest\n      CollectorPolicy.young_scaled_initial_ergo_vm fails if heap is\n      too small\n    + JDK-8293345: SunPKCS11 provider checks on PKCS11 Mechanism are\n      problematic\n    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts\n    + JDK-8301753: AppendFile/WriteFile has differences between make\n      3.81 and 4+\n    + JDK-8303770: Remove Baltimore root certificate expiring in May\n      2025\n    + JDK-8315380: AsyncGetCallTrace crash in frame::safe_for_sender\n    + JDK-8327476: Upgrade JLine to 3.26.1\n    + JDK-8328957: Update PKCS11Test.java to not use hardcoded path\n    + JDK-8331959: Update PKCS#11 Cryptographic Token Interface to\n      v3.1\n    + JDK-8339300: CollectorPolicy.young_scaled_initial_ergo_vm\n      gtest fails on ppc64 based platforms\n    + JDK-8339728: [Accessibility,Windows,JAWS] Bug in the\n      getKeyChar method of the AccessBridge class\n    + JDK-8345133: Test sun/security/tools/jarsigner/\n      /TsacertOptionTest.java failed: Warning found in stdout\n    + JDK-8345625: Better HTTP connections\n    + JDK-8346887: DrawFocusRect() may cause an assertion failure\n    + JDK-8347629: Test FailOverDirectExecutionControlTest.java\n      fails with -Xcomp\n    + JDK-8348110: Update LCMS to 2.17\n    + JDK-8348596: Update FreeType to 2.13.3\n    + JDK-8348598: Update Libpng to 1.6.47\n    + JDK-8348989: Better Glyph drawing\n    + JDK-8349111: Enhance Swing supports\n    + JDK-8349594: Enhance TLS protocol support\n    + JDK-8350469: [11u] Test AbsPathsInImage.java fails\n      - JDK-8239429 public clone\n    + JDK-8350498: Remove two Camerfirma root CA certificates\n    + JDK-8350991: Improve HTTP client header handling\n    + JDK-8351099: Bump update version of OpenJDK: 11.0.28\n    + JDK-8351422: Improve scripting supports\n    + JDK-8352302: Test sun/security/tools/jarsigner/\n      /TimestampCheck.java is failing\n    + JDK-8352716: (tz) Update Timezone Data to 2025b\n    + JDK-8356096: ISO 4217 Amendment 179 Update\n    + JDK-8356571: Re-enable -Wtype-limits for GCC in LCMS\n    + JDK-8359170: Add 2 TLS and 2 CS Sectigo roots\n    + JDK-8360147: Better Glyph drawing redux\n","status":"published","published":"2025-08-04T12:35:33Z","modified":"2026-03-23T04:46:43.376074Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:02667-1","title":"Security update for java-17-openjdk","description":"This update for java-17-openjdk fixes the following issues:\n\nUpgrade to upstream tag jdk-17.0.16+8 (July 2025 CPU):\n\n- CVE-2025-30749: several scenarios can lead to heap corruption (bsc#1246595) \n- CVE-2025-30754: incomplete handshake may lead to weakening TLS protections (bsc#1246598) \n- CVE-2025-50059: Improve HTTP client header handling (bsc#1246575) \n- CVE-2025-50106: Glyph out-of-memory access and crash (bsc#1246584) \n\nChangelog:\n\n    + JDK-4850101: Setting mnemonic to VK_F4 underlines the letter\n      S in a button.\n    + JDK-5074006: Swing JOptionPane shows \u003c/html\u003e tag as a string\n      after newline\n    + JDK-6956385: URLConnection.getLastModified() leaks file\n      handles for jar:file and file: URLs\n    + JDK-8024624: [TEST_BUG] [macosx] CTRL+RIGHT(LEFT) doesn't\n      move selection on next cell in JTable on Aqua L\u0026F\n    + JDK-8042134: JOptionPane bungles HTML messages\n    + JDK-8051591: Test\n      javax/swing/JTabbedPane/8007563/Test8007563.java fails\n    + JDK-8077371: Binary files in JAXP test should be removed\n    + JDK-8183348: Better cleanup for\n      jdk/test/sun/security/pkcs12/P12SecretKey.java\n    + JDK-8196465:\n      javax/swing/JComboBox/8182031/ComboPopupTest.java fails on\n      Linux\n    + JDK-8202100: Merge vm/share/InMemoryJavaCompiler w/\n      jdk/test/lib/compiler/InMemoryJavaCompiler\n    + JDK-8211400: nsk.share.gc.Memory::getArrayLength returns\n      wrong value\n    + JDK-8218474: JComboBox display issue with GTKLookAndFeel\n    + JDK-8224267: JOptionPane message string with 5000+ newlines\n      produces StackOverflowError\n    + JDK-8249831: Test sun/security/mscapi/nonUniqueAliases/\n      /NonUniqueAliases.java is marked with @ignore\n    + JDK-8251505: Use of types in compiler shared code should be\n      consistent.\n    + JDK-8253440: serviceability/sa/TestJhsdbJstackLineNumbers.java\n      failed with 'Didn't find enough line numbers'\n    + JDK-8254786: java/net/httpclient/CancelRequestTest.java\n      failing intermittently\n    + JDK-8256211: assert fired in\n      java/net/httpclient/DependentPromiseActionsTest (infrequent)\n    + JDK-8258483: [TESTBUG] gtest\n      CollectorPolicy.young_scaled_initial_ergo_vm fails if heap is\n      too small\n    + JDK-8269516: AArch64: Assembler cleanups\n    + JDK-8271419: Refactor test code for modifying CDS archive\n      contents\n    + JDK-8276995: Bug in jdk.jfr.event.gc.collection.TestSystemGC\n    + JDK-8277983: Remove unused fields from\n      sun.net.www.protocol.jar.JarURLConnection\n    + JDK-8279884: Use better file for cygwin source permission\n      check\n    + JDK-8279894: javax/swing/JInternalFrame/8020708/bug8020708.java\n      timeouts on Windows 11\n    + JDK-8280468: Crashes in getConfigColormap,\n      getConfigVisualId, XVisualIDFromVisual on Linux\n    + JDK-8280820: Clean up bug8033699 and bug8075609.java tests:\n      regtesthelpers aren't used\n    + JDK-8280991: [XWayland] No displayChanged event after\n      setDisplayMode call\n    + JDK-8281511: java/net/ipv6tests/UdpTest.java fails with\n      checkTime failed\n    + JDK-8282863: java/awt/FullScreen/FullscreenWindowProps/\n      /FullscreenWindowProps.java fails on Windows 10 with HiDPI\n      screen\n    + JDK-8286204: [Accessibility,macOS,VoiceOver] VoiceOver reads\n      the spinner value 10 as 1 when user iterates to 10 for the\n      first time on macOS\n    + JDK-8286789: Test forceEarlyReturn002.java timed out\n    + JDK-8286875: ProgrammableUpcallHandler::on_entry/on_exit\n      access thread fields from native\n    + JDK-8286925: Move JSON parser used in JFR tests to test\n      library\n    + JDK-8287352: DockerTestUtils::execute shows incorrect\n      elapsed time\n    + JDK-8287801: Fix test-bugs related to stress flags\n    + JDK-8288707: javax/swing/JToolBar/4529206/bug4529206.java:\n      setFloating does not work correctly\n    + JDK-8290162: Reset recursion counter missed in fix of\n      JDK-8224267\n    + JDK-8292064: Convert java/lang/management/MemoryMXBean shell\n      tests to java version\n    + JDK-8293503: gc/metaspace/TestMetaspacePerfCounters.java\n      #Epsilon-64 failed assertGreaterThanOrEqual:\n      expected MMM \u003e= NNN\n    + JDK-8294038: Remove 'Classpath' exception from javax/swing\n      tests\n    + JDK-8294155: Exception thrown before awaitAndCheck hangs\n      PassFailJFrame\n    + JDK-8295470: Update openjdk.java.net =\u003e openjdk.org URLs in\n      test code\n    + JDK-8295670: Remove duplication in\n      java/util/Formatter/Basic*.java\n    + JDK-8295804:\n      javax/swing/JFileChooser/JFileChooserSetLocationTest.java\n      failed with 'setLocation() is not working properly'\n    + JDK-8296072: CertAttrSet::encode and DerEncoder::derEncode\n      should write into DerOutputStream\n    + JDK-8296167: test/langtools/tools/jdeps/jdkinternals/\n      /ShowReplacement.java failing after JDK-8296072\n    + JDK-8296920: Regression Test DialogOrient.java fails on MacOS\n    + JDK-8297173: usageTicks and totalTicks should be volatile to\n      ensure that different threads get the latest ticks\n    + JDK-8297242: Use-after-free during library unloading on Linux\n    + JDK-8298061: vmTestbase/nsk/sysdict/vm/stress/btree/btree012/\n      /btree012.java failed with 'fatal error: refcount has gone to\n      zero'\n    + JDK-8298147: Clang warns about pointless comparisons\n    + JDK-8298248: Limit sscanf output width in cgroup file parsers\n    + JDK-8298709: Fix typos in src/java.desktop/ and various test\n      classes of client component\n    + JDK-8298730: Refactor subsystem_file_line_contents and add\n      docs and tests\n    + JDK-8300645: Handle julong values in logging of\n      GET_CONTAINER_INFO macros\n    + JDK-8300658: memory_and_swap_limit() reporting wrong values\n      on systems with swapaccount=0\n    + JDK-8302226: failure_handler native.core should wait for\n      coredump to finish\n    + JDK-8303549: [AIX] TestNativeStack.java is failing with exit\n      value 1\n    + JDK-8303770: Remove Baltimore root certificate expiring in\n      May 2025\n    + JDK-8305010: Test vmTestbase/nsk/jvmti/scenarios/sampling/\n      /SP05/sp05t003/TestDescription.java timed out: thread not\n      suspended\n    + JDK-8305578: X11GraphicsDevice.pGetBounds() is slow in\n      remote X11 sessions\n    + JDK-8306997: C2: 'malformed control flow' assert due to\n      missing safepoint on backedge with a switch\n    + JDK-8307318: Test\n      serviceability/sa/ClhsdbCDSJstackPrintAll.java failed:\n      ArrayIndexOutOfBoundsException\n    + JDK-8308875: java/awt/Toolkit/GetScreenInsetsCustomGC/\n      /GetScreenInsetsCustomGC.java failed with 'Cannot invoke\n      'sun.awt.X11GraphicsDevice.getInsets()' because 'device' is\n      null'\n    + JDK-8309841: Jarsigner should print a warning if an entry is\n      removed\n    + JDK-8310525: DynamicLauncher for JDP test needs to try\n      harder to find a free port\n    + JDK-8312246: NPE when HSDB visits bad oop\n    + JDK-8314120: Add tests for FileDescriptor.sync\n    + JDK-8314236: Overflow in Collections.rotate\n    + JDK-8314246: javax/swing/JToolBar/4529206/bug4529206.java\n      fails intermittently on Linux\n    + JDK-8314320: Mark runtime/CommandLine/ tests as flagless\n    + JDK-8314828: Mark 3 jcmd command-line options test as\n      vm.flagless\n    + JDK-8315484: java/awt/dnd/RejectDragDropActionTest.java\n      timed out\n    + JDK-8315669: Open source several Swing PopupMenu related\n      tests\n    + JDK-8315721: CloseRace.java#id0 fails transiently on libgraal\n    + JDK-8315742: Open source several Swing Scroll related tests\n    + JDK-8315871: Opensource five more Swing regression tests\n    + JDK-8315876: Open source several Swing CSS related tests\n    + JDK-8315951: Open source several Swing HTMLEditorKit related\n      tests\n    + JDK-8315981: Opensource five more random Swing tests\n    + JDK-8316061: Open source several Swing RootPane and Slider\n      related tests\n    + JDK-8316156: ByteArrayInputStream.transferTo causes\n      MaxDirectMemorySize overflow\n    + JDK-8316228: jcmd tests are broken by 8314828\n    + JDK-8316324: Opensource five miscellaneous Swing tests\n    + JDK-8316388: Opensource five Swing component related\n      regression tests\n    + JDK-8316451: 6 java/lang/instrument/PremainClass tests\n      ignore VM flags\n    + JDK-8316452: java/lang/instrument/modules/\n      /AppendToClassPathModuleTest.java ignores VM flags\n    + JDK-8316460: 4 javax/management tests ignore VM flags\n    + JDK-8316497: ColorConvertOp - typo for non-ICC conversions\n      needs one-line fix\n    + JDK-8316629: j.text.DateFormatSymbols setZoneStrings()\n      exception is unhelpful\n    + JDK-8318700: MacOS Zero cannot run gtests due to wrong JVM\n      path\n    + JDK-8318915: Enhance checks in BigDecimal.toPlainString()\n    + JDK-8318962: Update ProcessTools javadoc with suggestions in\n      8315097\n    + JDK-8319572: Test jdk/incubator/vector/LoadJsvmlTest.java\n      ignores VM flags\n    + JDK-8319578: Few java/lang/instrument ignore test.java.opts\n      and accept test.vm.opts only\n    + JDK-8319690: [AArch64] C2 compilation hits\n      offset_ok_for_immed: assert 'c2 compiler bug'\n    + JDK-8320682: [AArch64] C1 compilation fails with 'Field too\n      big for insn'\n    + JDK-8320687: sun.jvmstat.monitor.MonitoredHost\n      .getMonitoredHost() throws unexpected exceptions when invoked\n      concurrently\n    + JDK-8321204: C2: assert(false) failed: node should be in\n      igvn hash table\n    + JDK-8321479: java -D-D crashes\n    + JDK-8321509: False positive in get_trampoline fast path\n      causes crash\n    + JDK-8321713: Harmonize executeTestJvm with\n      create[Limited]TestJavaProcessBuilder\n    + JDK-8321718: ProcessTools.executeProcess calls waitFor\n      before logging\n    + JDK-8321931: memory_swap_current_in_bytes reports 0 as\n      'unlimited'\n    + JDK-8325435: [macos] Menu or JPopupMenu not closed when main\n      window is resized\n    + JDK-8325680: Uninitialised memory in deleteGSSCB of\n      GSSLibStub.c:179\n    + JDK-8325682: Rename nsk_strace.h\n    + JDK-8326389: [test] improve assertEquals failure output\n    + JDK-8328301: Convert Applet test\n      ManualHTMLDataFlavorTest.java to main program\n    + JDK-8328482: Convert and Open source few manual applet test\n      to main based\n    + JDK-8328484: Convert and Opensource few JFileChooser applet\n      test to main\n    + JDK-8328648: Remove applet usage from JFileChooser tests\n      bug4150029\n    + JDK-8328670: Automate and open source few closed manual\n      applet test\n    + JDK-8328673: Convert closed text/html/CSS manual applet test\n      to main\n    + JDK-8329261: G1: interpreter post-barrier x86 code asserts\n      index size of wrong buffer\n    + JDK-8330534: Update nsk/jdwp tests to use driver instead of\n      othervm\n    + JDK-8330598: java/net/httpclient/Http1ChunkedTest.java fails\n      with java.util.MissingFormatArgumentException: Format\n      specifier '%s'\n    + JDK-8331735: UpcallLinker::on_exit races with GC when\n      copying frame anchor\n    + JDK-8333117: Remove support of remote and manual debuggee\n      launchers\n    + JDK-8333680: com/sun/tools/attach/BasicTests.java fails with\n      'SocketException: Permission denied: connect'\n    + JDK-8334560: [PPC64]: postalloc_expand_java_dynamic_call_sched\n      does not copy all fields\n    + JDK-8334644: Automate\n      javax/print/attribute/PageRangesException.java\n    + JDK-8334780: Crash: assert(h_array_list.not_null()) failed:\n      invariant\n    + JDK-8334895: OpenJDK fails to configure on linux aarch64\n      when CDS is disabled after JDK-8331942\n    + JDK-8335662: [AArch64] C1: guarantee(val \u003c (1ULL \u003c\u003c nbits))\n      failed: Field too big for insn\n    + JDK-8335684: Test ThreadCpuTime.java should pause like\n      ThreadCpuTimeArray.java\n    + JDK-8335836: serviceability/jvmti/StartPhase/AllowedFunctions/\n      /AllowedFunctions.java fails with unexpected exit code: 112\n    + JDK-8336587: failure_handler lldb command times out on\n      macosx-aarch64 core file\n    + JDK-8337221: CompileFramework: test library to conveniently\n      compile java and jasm sources for fuzzing\n    + JDK-8337299: vmTestbase/nsk/jdb/stop_at/stop_at002/\n      /stop_at002.java failure goes undetected\n    + JDK-8338154: Fix -Wzero-as-null-pointer-constant warnings in\n      gtest framework\n    + JDK-8339148: Make os::Linux::active_processor_count() public\n    + JDK-8339300: CollectorPolicy.young_scaled_initial_ergo_vm\n      gtest fails on ppc64 based platforms\n    + JDK-8339639: Opensource few AWT PopupMenu tests\n    + JDK-8339678: Update runtime/condy tests to be executed with\n      VM flags\n    + JDK-8339727: Open source several AWT focus tests - series 1\n    + JDK-8339794: Open source closed choice tests #1\n    + JDK-8339810: Clean up the code in sun.tools.jar.Main to\n      properly close resources and use ZipFile during extract\n    + JDK-8339836: Open source several AWT Mouse tests - Batch 1\n    + JDK-8339842: Open source several AWT focus tests - series 2\n    + JDK-8339895: Open source several AWT focus tests - series 3\n    + JDK-8339906: Open source several AWT focus tests - series 4\n    + JDK-8339935: Open source several AWT focus tests - series 5\n    + JDK-8339982: Open source several AWT Mouse tests - Batch 2\n    + JDK-8339984: Open source AWT MenuItem related tests\n    + JDK-8339995: Open source several AWT focus tests - series 6\n    + JDK-8340077: Open source few Checkbox tests - Set2\n    + JDK-8340084: Open source AWT Frame related tests\n    + JDK-8340143: Open source several Java2D rendering loop tests.\n    + JDK-8340164: Open source few Component tests - Set1\n    + JDK-8340173: Open source some Component/Panel/EventQueue\n      tests - Set2\n    + JDK-8340176: Replace usage of -noclassgc with -Xnoclassgc in\n      test/jdk/java/lang/management/MemoryMXBean/LowMemoryTest2.java\n    + JDK-8340193: Open source several AWT Dialog tests - Batch 1\n    + JDK-8340228: Open source couple more miscellaneous AWT tests\n    + JDK-8340271: Open source several AWT Robot tests\n    + JDK-8340279: Open source several AWT Dialog tests - Batch 2\n    + JDK-8340332: Open source mixed AWT tests - Set3\n    + JDK-8340366: Open source several AWT Dialog tests - Batch 3\n    + JDK-8340367: Opensource few AWT image tests\n    + JDK-8340393: Open source closed choice tests #2\n    + JDK-8340407: Open source a few more Component related tests\n    + JDK-8340417: Open source some MenuBar tests - Set1\n    + JDK-8340432: Open source some MenuBar tests - Set2\n    + JDK-8340433: Open source closed choice tests #3\n    + JDK-8340437: Open source few more AWT Frame related tests\n    + JDK-8340458: Open source additional Component tests (part 2)\n    + JDK-8340555: Open source DnD tests - Set4\n    + JDK-8340560: Open Source several AWT/2D font and rendering\n      tests\n    + JDK-8340605: Open source several AWT PopupMenu tests\n    + JDK-8340621: Open source several AWT List tests\n    + JDK-8340625: Open source additional Component tests (part 3)\n    + JDK-8340639: Open source few more AWT List tests\n    + JDK-8340713: Open source DnD tests - Set5\n    + JDK-8340784: Remove PassFailJFrame constructor with\n      screenshots\n    + JDK-8340790: Open source several AWT Dialog tests - Batch 4\n    + JDK-8340809: Open source few more AWT PopupMenu tests\n    + JDK-8340874: Open source some of the AWT Geometry/Button\n      tests\n    + JDK-8340907: Open source closed frame tests # 2\n    + JDK-8340966: Open source few Checkbox and Cursor tests - Set1\n    + JDK-8340967: Open source few Cursor tests - Set2\n    + JDK-8340978: Open source few DnD tests - Set6\n    + JDK-8340985: Open source some Desktop related tests\n    + JDK-8341000: Open source some of the AWT Window tests\n    + JDK-8341004: Open source AWT FileDialog related tests\n    + JDK-8341072: Open source several AWT Canvas and Rectangle\n      related tests\n    + JDK-8341128: open source some 2d graphics tests\n    + JDK-8341148: Open source several Choice related tests\n    + JDK-8341162: Open source some of the AWT window test\n    + JDK-8341170: Open source several Choice related tests (part\n      2)\n    + JDK-8341177: Opensource few List and a Window test\n    + JDK-8341191: Open source few more AWT FileDialog tests\n    + JDK-8341239: Open source closed frame tests # 3\n    + JDK-8341257: Open source few DND tests - Set1\n    + JDK-8341258: Open source few various AWT tests - Set1\n    + JDK-8341278: Open source few TrayIcon tests - Set7\n    + JDK-8341298: Open source more AWT window tests\n    + JDK-8341373: Open source closed frame tests # 4\n    + JDK-8341378: Open source few TrayIcon tests - Set8\n    + JDK-8341447: Open source closed frame tests # 5\n    + JDK-8341535: sun/awt/font/TestDevTransform.java fails with\n      RuntimeException: Different rendering\n    + JDK-8341637: java/net/Socket/UdpSocket.java fails with\n      'java.net.BindException: Address already in use'\n      (macos-aarch64)\n    + JDK-8341972: java/awt/dnd/DnDRemoveFocusOwnerCrashTest.java\n      timed out after JDK-8341257\n    + JDK-8342376: More reliable OOM handling in\n      ExceptionDuringDumpAtObjectsInitPhase test\n    + JDK-8342524: Use latch in AbstractButton/bug6298940.java\n      instead of delay\n    + JDK-8342633: javax/management/security/\n      /HashedPasswordFileTest.java creates tmp file in src dir\n    + JDK-8343037: Missing @since tag on JColorChooser.showDialog\n      overload\n    + JDK-8343103: Enable debug logging for vmTestbase/nsk/jvmti/\n      /scenarios/sampling/SP05/sp05t003/TestDescription.java\n    + JDK-8343124: Tests fails with\n      java.lang.IllegalAccessException: class\n      com.sun.javatest.regtest.agent.MainWrapper$MainTask cannot\n      access\n    + JDK-8343170: java/awt/Cursor/JPanelCursorTest/\n      /JPanelCursorTest.java does not show the default cursor\n    + JDK-8343205: CompileBroker::possibly_add_compiler_threads\n      excessively polls available memory\n    + JDK-8343529: serviceability/sa/ClhsdbWhere.java fails\n      AssertionFailure: Corrupted constant pool\n    + JDK-8343891: Test javax/swing/JTabbedPane/\n      /TestJTabbedPaneBackgroundColor.java failed\n    + JDK-8343936: Adjust timeout in test\n      javax/management/monitor/DerivedGaugeMonitorTest.java\n    + JDK-8344316: security/auth/callback/TextCallbackHandler/\n      /Password.java make runnable with JTReg and add the UI\n    + JDK-8344361: Restore null return for invalid services from\n      legacy providers\n    + JDK-8345133: Test sun/security/tools/jarsigner/\n      /TsacertOptionTest.java failed: Warning found in stdout\n    + JDK-8345134: Test sun/security/tools/jarsigner/\n      /ConciseJarsigner.java failed: unable to find valid\n      certification path to requested target\n    + JDK-8345357: test/jdk/javax/swing/JRadioButton/8033699/\n      /bug8033699.java fails in ubuntu22.04\n    + JDK-8345447: test/jdk/javax/swing/JToolBar/4529206/\n      /bug4529206.java fails in ubuntu22.04\n    + JDK-8345547: test/jdk/javax/swing/text/DefaultEditorKit/\n      /4278839/bug4278839.java fails in ubuntu22.04\n    + JDK-8345598: Upgrade NSS binaries for interop tests\n    + JDK-8345625: Better HTTP connections\n    + JDK-8345728: [Accessibility,macOS,Screen Magnifier]:\n      JCheckbox unchecked state does not magnify but works for\n      checked tate\n    + JDK-8345838: Remove the\n      appcds/javaldr/AnonVmClassesDuringDump.java test\n    + JDK-8346049: jdk/test/lib/security/timestamp/TsaServer.java\n      warnings\n    + JDK-8346581: JRadioButton/ButtonGroupFocusTest.java fails in\n      CI on Linux\n    + JDK-8347000: Bug in\n      com/sun/net/httpserver/bugs/B6361557.java test\n    + JDK-8347019: Test javax/swing/JRadioButton/8033699/\n      /bug8033699.java still fails:  Focus is not on Radio Button\n      Single as Expected\n    + JDK-8347083: Incomplete logging in\n      nsk/jvmti/ResourceExhausted/resexhausted00* tests\n    + JDK-8347126: gc/stress/TestStressG1Uncommit.java gets\n      OOM-killed\n    + JDK-8347267: [macOS]: UnixOperatingSystem.c:67:40: runtime\n      error: division by zero\n    + JDK-8347286: (fs) Remove some extensions from\n      java/nio/file/Files/probeContentType/Basic.java\n    + JDK-8347576: Error output in libjsound has non matching\n      format strings\n    + JDK-8347629: Test FailOverDirectExecutionControlTest.java\n      fails with -Xcomp\n    + JDK-8347911: Limit the length of inflated text chunks\n    + JDK-8347995: Race condition in jdk/java/net/httpclient/\n      /offline/FixedResponseHttpClient.java\n    + JDK-8348107: test/jdk/java/net/httpclient/\n      /HttpsTunnelAuthTest.java fails intermittently\n    + JDK-8348110: Update LCMS to 2.17\n    + JDK-8348299: Update List/ItemEventTest/ItemEventTest.java\n    + JDK-8348596: Update FreeType to 2.13.3\n    + JDK-8348597: Update HarfBuzz to 10.4.0\n    + JDK-8348598: Update Libpng to 1.6.47\n    + JDK-8348600: Update PipeWire to 1.3.81\n    + JDK-8348865: JButton/bug4796987.java never runs because\n      Windows XP is unavailable\n    + JDK-8348936: [Accessibility,macOS,VoiceOver] VoiceOver\n      doesn't announce untick on toggling the checkbox with 'space'\n      key on macOS\n    + JDK-8348989: Better Glyph drawing\n    + JDK-8349039: Adjust exception No type named \u003cThreadType\u003e in\n      database\n    + JDK-8349111: Enhance Swing supports\n    + JDK-8349200: [JMH] time.format.ZonedDateTimeFormatterBenchmark\n      fails\n    + JDK-8349348: Refactor ClassLoaderDeadlock.sh and Deadlock.sh\n      to run fully in java\n    + JDK-8349492: Update sun/security/pkcs12/\n      /KeytoolOpensslInteropTest.java to use a recent Openssl\n      version\n    + JDK-8349501: Relocate supporting classes in\n      security/testlibrary to test/lib/jdk tree\n    + JDK-8349594: Enhance TLS protocol support\n    + JDK-8349751: AIX build failure after upgrade pipewire to\n      1.3.81\n    + JDK-8349974: [JMH,17u] MaskQueryOperationsBenchmark fails\n      java.lang.NoClassDefFoundError\n    + JDK-8350211: CTW: Attempt to preload all classes in constant\n      pool\n    + JDK-8350224: Test javax/swing/JComboBox/\n      /TestComboBoxComponentRendering.java fails in ubuntu 23.x and\n      later\n    + JDK-8350260: Improve HTML instruction formatting in\n      PassFailJFrame\n    + JDK-8350383: Test: add more test case for string compare (UL\n      case)\n    + JDK-8350386: Test TestCodeCacheFull.java fails with option\n      -XX:-UseCodeCacheFlushing\n    + JDK-8350412: [21u] AArch64: Ambiguous frame layout leads to\n      incorrect traces in JFR\n    + JDK-8350498: Remove two Camerfirma root CA certificates\n    + JDK-8350540: [17u,11u] B8312065.java fails Network is\n      unreachable\n    + JDK-8350546: Several java/net/InetAddress tests fails\n      UnknownHostException\n    + JDK-8350616: Skip ValidateHazardPtrsClosure in non-debug\n      builds\n    + JDK-8350651: Bump update version for OpenJDK: jdk-17.0.16\n    + JDK-8350924: javax/swing/JMenu/4213634/bug4213634.java fails\n    + JDK-8350991: Improve HTTP client header handling\n    + JDK-8351086: (fc) Make\n      java/nio/channels/FileChannel/BlockDeviceSize.java test manual\n    + JDK-8352076: [21u] Problem list tests that fail in 21 and\n      would be fixed by 8309622\n    + JDK-8352109: java/awt/Desktop/MailTest.java fails in\n      platforms where Action.MAIL is not supported\n    + JDK-8352302: Test\n      sun/security/tools/jarsigner/TimestampCheck.java is failing\n    + JDK-8352649: [17u] guarantee(is_result_safe ||\n      is_in_asgct()) failed inside AsyncGetCallTrace\n    + JDK-8352676: Opensource JMenu tests - series1\n    + JDK-8352680: Opensource few misc swing tests\n    + JDK-8352684: Opensource JInternalFrame tests - series1\n    + JDK-8352706: httpclient HeadTest does not run on HTTP2\n    + JDK-8352716: (tz) Update Timezone Data to 2025b\n    + JDK-8352908: Open source several swing tests batch1\n    + JDK-8352942: jdk/jfr/startupargs/TestMemoryOptions.java\n      fails with 32-bit build\n    + JDK-8353070: Clean up and open source couple AWT Graphics\n      related tests (Part 1)\n    + JDK-8353138: Screen capture for test\n      TaskbarPositionTest.java, failure case\n    + JDK-8353320: Open source more Swing text tests\n    + JDK-8353446: Open source several AWT Menu tests - Batch 2\n    + JDK-8353475: Open source two Swing DefaultCaret tests\n    + JDK-8353685: Open some JComboBox bugs 4\n    + JDK-8353709: Debug symbols bundle should contain full debug\n      files when building --with-external-symbols-in-bundles=public\n    + JDK-8353714: [17u] Backport of 8347740 incomplete\n    + JDK-8353942: Open source Swing Tests - Set 5\n    + JDK-8354554: Open source several clipboard tests batch1\n    + JDK-8356053: Test java/awt/Toolkit/Headless/\n      /HeadlessToolkit.java fails by timeout\n    + JDK-8356096: ISO 4217 Amendment 179 Update\n    + JDK-8356571: Re-enable -Wtype-limits for GCC in LCMS\n    + JDK-8357105: C2: compilation fails with 'assert(false)\n      failed: empty program detected during loop optimization'\n    + JDK-8357193: [VS 2022 17.14] Warning C5287 in debugInit.c:\n      enum type mismatch during build\n    + JDK-8359170: Add 2 TLS and 2 CS Sectigo roots\n    + JDK-8360147: Better Glyph drawing redux\n    + JDK-8361674: [17u] Remove designator\n      DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.16\n","status":"published","published":"2025-08-04T12:37:26Z","modified":"2026-03-23T04:46:44.155496Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:03236-1","title":"Security update for java-1_8_0-ibm","description":"This update for java-1_8_0-ibm fixes the following issues:\n\nUpdate to Java 8.0 Service Refresh 8 Fix Pack 50.\n\nSecurity issues fixed:\n\n- Oracle July 15 2025 CPU (bsc#1247754).\n- CVE-2025-30749: heap corruption allows unauthenticated attacker with network access to compromise and takeover Java\n  applications that load and run untrusted code (bsc#1246595).\n- CVE-2025-30754: incomplete handshake allows unauthenticated attacker with network access via TLS to gain unauthorized\n  update, insert, delete and read access to sensitive data (bsc#1246598).\n- CVE-2025-30761: issue in the Scripting component allows unauthenticated attacker with network access to gain\n  unauthorized creation, deletion or modification access to critical data (bsc#1246580).\n- CVE-2025-50059: issue in the Networking component allows unauthenticated attacker with network access to gain\n  unauthorized access to critical data (bsc#1246575).\n- CVE-2025-50106: Glyph out-of-memory access allows unauthenticated attacker with network access to compromise and\n  takeover Java applications that load and run untrusted code (bsc#1246584).\n\nOther issues fixed.\n \n- Class Libraries:\n  - Oracle Security Fix 8348989: Better Glyph drawing.\n  - Removal of Baltimore root certificate and TWO CAMERFIRMA root\n    CA certificates from CACERTS.\n  - Update timezone information to the latest TZDATA2025B.\n- Java Virtual Machine:\n  - Assertion failure at copyforwardscheme.cpp.\n- JIT Compiler:\n  - GC assert due to an invalid object reference.\n  - SIGILL from JIT compiled method.\n  - Unexpected behaviour with very large arrays.\n- Security:\n  - Deserialization of a serialized RSAPrivateCrtKey is throwing\n    an exception.\n  - EDDSAsignature fails when doing multiple update.\n  - HTTPS channel binding support.\n  - IBMJCEPlus provider supports post quantum cryptography algorithms\n    ML-KEM (key encapsulation) and ML-DSA (digital signature).\n  - Key certificate management: Extended key usage cannot be set\n    without having key usage extension in certificate request.\n  - MessageDigest.update API does not throw the correct exception.\n  - Oracle Security Fix 8349594: Enhance TLS protocol support.\n  - Problem getting key in PKCS12 keystore on MAC.\n  - TLS support for the EDDSA signature algorithm.\n  - Wrong algorithm name returned for EDDSA keys.\n- z/OS Extentions:\n  - IBMJCEHybridException with hybrid provider in GCM mode.\n\n","status":"published","published":"2025-09-16T09:11:36Z","modified":"2026-03-23T04:50:30.085948Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:03262-1","title":"Security update for java-1_8_0-ibm","description":"This update for java-1_8_0-ibm fixes the following issues:\n\nUpdate to Java 8.0 Service Refresh 8 Fix Pack 50.\n\nSecurity issues fixed:\n\n- Oracle July 15 2025 CPU (bsc#1247754).\n- CVE-2025-30749: heap corruption allows unauthenticated attacker with network access to compromise and takeover Java\n  applications that load and run untrusted code (bsc#1246595).\n- CVE-2025-30754: incomplete handshake allows unauthenticated attacker with network access via TLS to gain unauthorized\n  update, insert, delete and read access to sensitive data (bsc#1246598).\n- CVE-2025-30761: issue in the Scripting component allows unauthenticated attacker with network access to gain\n  unauthorized creation, deletion or modification access to critical data (bsc#1246580).\n- CVE-2025-50059: issue in the Networking component allows unauthenticated attacker with network access to gain\n  unauthorized access to critical data (bsc#1246575).\n- CVE-2025-50106: Glyph out-of-memory access allows unauthenticated attacker with network access to compromise and\n  takeover Java applications that load and run untrusted code (bsc#1246584).\n\nOther issues fixed:\n\n- Class Libraries:\n  - Oracle Security Fix 8348989: Better Glyph drawing.\n  - Removal of Baltimore root certificate and TWO CAMERFIRMA root\n    CA certificates from CACERTS.\n  - Update timezone information to the latest TZDATA2025B.\n- Java Virtual Machine:\n  - Assertion failure at copyforwardscheme.cpp.\n- JIT Compiler:\n  - GC assert due to an invalid object reference.\n  - SIGILL from JIT compiled method.\n  - Unexpected behaviour with very large arrays.\n- Security:\n  - Deserialization of a serialized RSAPrivateCrtKey is throwing\n    an exception.\n  - EDDSAsignature fails when doing multiple update.\n  - HTTPS channel binding support.\n  - IBMJCEPlus provider supports post quantum cryptography algorithms\n    ML-KEM (key encapsulation) and ML-DSA (digital signature).\n  - Key certificate management: Extended key usage cannot be set\n    without having key usage extension in certificate request.\n  - MessageDigest.update API does not throw the correct exception.\n  - Oracle Security Fix 8349594: Enhance TLS protocol support.\n  - Problem getting key in PKCS12 keystore on MAC.\n  - TLS support for the EDDSA signature algorithm.\n  - Wrong algorithm name returned for EDDSA keys.\n- z/OS Extentions:\n  - IBMJCEHybridException with hybrid provider in GCM mode.\n\n","status":"published","published":"2025-09-18T06:42:05Z","modified":"2026-02-04T04:35:49.289309Z","updated_at":"2026-11-02T15:53:57.111474Z"}]},"sources_more":{"osv":6}}