{"id":"CVE-2026-46917","aliases":["ALPINE-CVE-2026-46917","ALSA-2026:42887","ALSA-2026:42895","ALSA-2026:42899","BELL-CVE-2026-46917","BIT-java-2026-46917","BIT-java-min-2026-46917","BIT-jre-2026-46917","CLSA-2026-1785264990","CLSA-2026-1785324019","CLSA-2026-1785328191","CLSA-2026-1785331296","CLSA-2026-1785332252","CLSA-2026-1785494509","CLSA-2026-1786485204","CLSA-2026-1786485878","CLSA-2026-1786526104","DEBIAN-CVE-2026-46917","EUVD-2026-46459","GHSA-x5x7-pvpw-w5hv","MGASA-2026-0395","OESA-2026-3750","OESA-2026-3751","OESA-2026-3752","OESA-2026-3753","OESA-2026-3754","OESA-2026-3818","RHSA-2026:42880","RHSA-2026:42887","RHSA-2026:42895","RHSA-2026:42899","RHSA-2026:46808","RHSA-2026:50281","RHSA-2026:50525","RHSA-2026:52834","RHSA-2026:52948","RLSA-2026:42887","RLSA-2026:42899","SUSE-SU-2026:22944-1","SUSE-SU-2026:22953-1","SUSE-SU-2026:3284-1","SUSE-SU-2026:3331-1","SUSE-SU-2026:3332-1","SUSE-SU-2026:3406-1","SUSE-SU-2026:3453-1","UBUNTU-CVE-2026-46917","USN-8674-1","USN-8676-1","USN-8677-1","USN-8681-1","USN-8689-1","USN-8693-1","USN-8694-1","USN-8695-1","openSUSE-SU-2026:11335-1","openSUSE-SU-2026:11336-1","openSUSE-SU-2026:11337-1","openSUSE-SU-2026:11362-1","openSUSE-SU-2026:11363-1","openSUSE-SU-2026:21440-1","openSUSE-SU-2026:21467-1","openSUSE-SU-2026:21470-1"],"status":"published","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00289,"percentile":0.21751,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-284"],"published":"2026-07-21T21:32:47Z","modified":"2026-11-09T19:15:20Z","fixes":[{"ecosystem":"Alpine:v3.23","package":"openjdk11","fixed_in":["11.0.32_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openjdk11","fixed_in":["11.0.32_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openjdk17","fixed_in":["17.0.20_p8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openjdk17","fixed_in":["17.0.20_p8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openjdk21","fixed_in":["21.0.12_p8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openjdk21","fixed_in":["21.0.12_p8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openjdk25","fixed_in":["25.0.4_p7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openjdk25","fixed_in":["25.0.4_p7-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk-nik-23-17","fixed_in":["23.0.13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk-nik-23-21","fixed_in":["23.1.12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk-nik-25-25","fixed_in":["25.0.4-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk11","fixed_in":["11.0.32_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk11-container-jre","fixed_in":["11.0.32_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk11-lite","fixed_in":["11.0.32_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk11-perf","fixed_in":["11.0.32_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk17","fixed_in":["17.0.20_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk17-container-jre","fixed_in":["17.0.20_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk17-crac","fixed_in":["17.0.20_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk17-lite","fixed_in":["17.0.20_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk21","fixed_in":["21.0.12_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk21-container-jre","fixed_in":["21.0.12_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk21-crac","fixed_in":["21.0.12_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk21-lite","fixed_in":["21.0.12_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk25","fixed_in":["25.0.4_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk25-container-jre","fixed_in":["25.0.4_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk25-lite","fixed_in":["25.0.4_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk26","fixed_in":["26.0.2_p13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk26-container-jre","fixed_in":["26.0.2_p13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk26-lite","fixed_in":["26.0.2_p13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk-nik-23-17","fixed_in":["23.0.13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk-nik-23-21","fixed_in":["23.1.12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk-nik-25-25","fixed_in":["25.0.4-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk11","fixed_in":["11.0.32_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk11-container-jre","fixed_in":["11.0.32_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk11-lite","fixed_in":["11.0.32_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk11-perf","fixed_in":["11.0.32_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk17","fixed_in":["17.0.20_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk17-container-jre","fixed_in":["17.0.20_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk17-crac","fixed_in":["17.0.20_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk17-lite","fixed_in":["17.0.20_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk21","fixed_in":["21.0.12_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk21-container-jre","fixed_in":["21.0.12_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk21-crac","fixed_in":["21.0.12_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk21-lite","fixed_in":["21.0.12_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk25","fixed_in":["25.0.4_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk25-container-jre","fixed_in":["25.0.4_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk25-lite","fixed_in":["25.0.4_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk26","fixed_in":["26.0.2_p13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk26-container-jre","fixed_in":["26.0.2_p13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk26-lite","fixed_in":["26.0.2_p13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk-nik-23-17","fixed_in":["23.0.13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk-nik-23-21","fixed_in":["23.1.12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk-nik-25-25","fixed_in":["25.0.4-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk11","fixed_in":["11.0.32_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk11-container-jre","fixed_in":["11.0.32_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk11-lite","fixed_in":["11.0.32_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk17","fixed_in":["17.0.20_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk17-container-jre","fixed_in":["17.0.20_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk17-crac","fixed_in":["17.0.20_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk17-lite","fixed_in":["17.0.20_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk21","fixed_in":["21.0.12_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk21-container-jre","fixed_in":["21.0.12_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk21-crac","fixed_in":["21.0.12_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk21-lite","fixed_in":["21.0.12_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk25","fixed_in":["25.0.4_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk25-container-jre","fixed_in":["25.0.4_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk25-lite","fixed_in":["25.0.4_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk26","fixed_in":["26.0.2_p13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk26-container-jre","fixed_in":["26.0.2_p13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk26-lite","fixed_in":["26.0.2_p13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk-nik-23-17","fixed_in":["23.0.13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk-nik-23-21","fixed_in":["23.1.12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk-nik-25-25","fixed_in":["25.0.4-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-container-jre","fixed_in":["11.0.32_p11-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-lite","fixed_in":["11.0.32_p11-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-perf","fixed_in":["11.0.32_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-container-jre","fixed_in":["17.0.20_p10-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-crac","fixed_in":["17.0.20_p11-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-lite","fixed_in":["17.0.20_p10-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-container-jre","fixed_in":["21.0.12_p10-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-crac","fixed_in":["21.0.12_p11-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-lite","fixed_in":["21.0.12_p10-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk25-container-jre","fixed_in":["25.0.4_p9-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk25-lite","fixed_in":["25.0.4_p9-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk26-container-jre","fixed_in":["26.0.2_p13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk26-lite","fixed_in":["26.0.2_p13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk-nik-23-17","fixed_in":["23.0.13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk-nik-23-21","fixed_in":["23.1.12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk-nik-25-25","fixed_in":["25.0.4-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-container-jre","fixed_in":["11.0.32_p11-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-lite","fixed_in":["11.0.32_p11-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-perf","fixed_in":["11.0.32_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-container-jre","fixed_in":["17.0.20_p10-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-crac","fixed_in":["17.0.20_p11-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-lite","fixed_in":["17.0.20_p10-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-container-jre","fixed_in":["21.0.12_p10-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-crac","fixed_in":["21.0.12_p11-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-lite","fixed_in":["21.0.12_p10-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk25-container-jre","fixed_in":["25.0.4_p9-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk25-lite","fixed_in":["25.0.4_p9-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk26-container-jre","fixed_in":["26.0.2_p13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk26-lite","fixed_in":["26.0.2_p13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk-nik-23-17","fixed_in":["23.0.13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk-nik-23-21","fixed_in":["23.1.12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk-nik-25-25","fixed_in":["25.0.4-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk11-container-jre","fixed_in":["11.0.32_p11-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk11-lite","fixed_in":["11.0.32_p11-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-container-jre","fixed_in":["17.0.20_p10-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-crac","fixed_in":["17.0.20_p11-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-lite","fixed_in":["17.0.20_p10-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-container-jre","fixed_in":["21.0.12_p10-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-crac","fixed_in":["21.0.12_p11-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-lite","fixed_in":["21.0.12_p10-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk25-container-jre","fixed_in":["25.0.4_p9-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk25-lite","fixed_in":["25.0.4_p9-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk26-container-jre","fixed_in":["26.0.2_p13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk26-lite","fixed_in":["26.0.2_p13-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"java","fixed_in":["11.0.32","17.0.20","21.0.12","25.0.4","26.0.2"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"java-min","fixed_in":["11.0.32","17.0.20","21.0.12","25.0.4","26.0.2"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"jre","fixed_in":["11.0.32","17.0.20","21.0.12","25.0.4","26.0.2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"openjdk-17","fixed_in":["17.0.20+8-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openjdk-21","fixed_in":["21.0.12+8-1~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openjdk-21","fixed_in":["21.0.12+8-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openjdk-25","fixed_in":["25.0.4+7-1~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openjdk-25","fixed_in":["25.0.4+7-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-lts","fixed_in":["11.0.32+9-1ubuntu1~18.04"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-17","fixed_in":["17.0.20+8-1~18.04"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-lts","fixed_in":["11.0.32+9-1ubuntu1~20.04"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-17","fixed_in":["17.0.20+8-1~20.04"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-21","fixed_in":["21.0.12+8-1~20.04"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-17","fixed_in":["17.0.20+8-1~22.04"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-21","fixed_in":["21.0.12+8-1~22.04"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-25","fixed_in":["25.0.4+7-1~22.04"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-lts","fixed_in":["11.0.32+9-1ubuntu1~22.04"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-17","fixed_in":["17.0.20+8-1~24.04"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-21","fixed_in":["21.0.12+8-1~24.04"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-25","fixed_in":["25.0.4+7-1~24.04"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-lts","fixed_in":["11.0.32+9-1ubuntu1~24.04"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.10","package":"openjdk-17","fixed_in":["17.0.20+8-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.10","package":"openjdk-21","fixed_in":["21.0.12+8-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.10","package":"openjdk-25","fixed_in":["25.0.4.1+1-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.10","package":"openjdk-lts","fixed_in":["11.0.32+9-1ubuntu1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-17","fixed_in":["17.0.20+8-1~26.04"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-17-crac","fixed_in":["17.0.20+8-0ubuntu1~26.04"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-21","fixed_in":["21.0.12+8-1~26.04"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-21-crac","fixed_in":["21.0.12+8-0ubuntu1~26.04"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-25","fixed_in":["25.0.4+7-1~26.04"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-26","fixed_in":["26.0.2+10-2~26.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-lts","fixed_in":["11.0.32+9-1ubuntu1~26.04"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.23","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20_p8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20_p8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.12_p8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.12_p8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openjdk25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4_p7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openjdk25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4_p7-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-21-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9.alma.2"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-crypto-adapter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-crypto-adapter-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-crypto-adapter-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-crypto-adapter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-crypto-adapter-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-crypto-adapter-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9.alma.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk-nik-23-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.0.4-r1"},{"fixed":"23.0.13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk-nik-23-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.1.3-r1"},{"fixed":"23.1.12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk-nik-25-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.0.0-r0"},{"fixed":"25.0.4-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.32_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.32_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.32_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk11-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.20.1_p1-r0"},{"fixed":"11.0.32_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.20_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.20_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.13_p13-r0"},{"fixed":"17.0.20_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.20_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.12_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.12_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.5_p12-r0"},{"fixed":"21.0.12_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.12_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2_p13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk26-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2_p13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk26-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2_p13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk-nik-23-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.0.8-r0"},{"fixed":"23.0.13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk-nik-23-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.1.7-r0"},{"fixed":"23.1.12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk-nik-25-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.0.0-r0"},{"fixed":"25.0.4-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.32_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.32_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.32_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk11-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.29_p11-r0"},{"fixed":"11.0.32_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r1"},{"fixed":"17.0.20_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.20_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p13-r1"},{"fixed":"17.0.20_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.20_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r1"},{"fixed":"21.0.12_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.12_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p12-r1"},{"fixed":"21.0.12_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.12_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2_p13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk26-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2_p13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk26-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2_p13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk-nik-23-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.0.4-r1"},{"fixed":"23.0.13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk-nik-23-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.1.3-r1"},{"fixed":"23.1.12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk-nik-25-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.0.0-r0"},{"fixed":"25.0.4-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.32_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.32_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.32_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.20_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.20_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.10_p13-r0"},{"fixed":"17.0.20_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.20_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.12_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.12_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.2_p15-r0"},{"fixed":"21.0.12_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.12_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2_p13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk26-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2_p13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk26-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2_p13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk-nik-23-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.0.4-r1"},{"fixed":"23.0.13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk-nik-23-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.1.3-r1"},{"fixed":"23.1.12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk-nik-25-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.0.0-r0"},{"fixed":"25.0.4-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.32_p11-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.32_p11-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.20.1_p1-r0"},{"fixed":"11.0.32_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.20_p10-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.13_p13-r0"},{"fixed":"17.0.20_p11-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.20_p10-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.12_p10-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.5_p12-r0"},{"fixed":"21.0.12_p11-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.12_p10-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4_p9-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4_p9-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk26-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2_p13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk26-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2_p13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk-nik-23-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.0.8-r0"},{"fixed":"23.0.13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk-nik-23-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.1.7-r0"},{"fixed":"23.1.12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk-nik-25-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.0.0-r0"},{"fixed":"25.0.4-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.32_p11-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.32_p11-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.29_p11-r0"},{"fixed":"11.0.32_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.20_p10-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p13-r1"},{"fixed":"17.0.20_p11-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.20_p10-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.12_p10-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p12-r1"},{"fixed":"21.0.12_p11-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.12_p10-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4_p9-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4_p9-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk26-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2_p13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk26-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2_p13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk-nik-23-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.0.4-r1"},{"fixed":"23.0.13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk-nik-23-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.1.3-r1"},{"fixed":"23.1.12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk-nik-25-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.0.0-r0"},{"fixed":"25.0.4-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.32_p11-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.32_p11-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.20_p10-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.10_p13-r0"},{"fixed":"17.0.20_p11-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.20_p10-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.12_p10-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.2_p15-r0"},{"fixed":"21.0.12_p11-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.12_p10-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4_p9-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4_p9-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk26-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2_p13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk26-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2_p13-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"java","ranges":[{"type":"SEMVER","events":[{"introduced":"9.0.0"},{"fixed":"11.0.32"},{"introduced":"12.0.0"},{"fixed":"17.0.20"},{"introduced":"18.0.0"},{"fixed":"21.0.12"},{"introduced":"22.0.0"},{"fixed":"25.0.4"},{"introduced":"26.0.0"},{"fixed":"26.0.2"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"java-min","ranges":[{"type":"SEMVER","events":[{"introduced":"9.0.0"},{"fixed":"11.0.32"},{"introduced":"12.0.0"},{"fixed":"17.0.20"},{"introduced":"18.0.0"},{"fixed":"21.0.12"},{"introduced":"22.0.0"},{"fixed":"25.0.4"},{"introduced":"26.0.0"},{"fixed":"26.0.2"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"jre","ranges":[{"type":"SEMVER","events":[{"introduced":"9.0.0"},{"fixed":"11.0.32"},{"introduced":"12.0.0"},{"fixed":"17.0.20"},{"introduced":"18.0.0"},{"fixed":"21.0.12"},{"introduced":"22.0.0"},{"fixed":"25.0.4"},{"introduced":"26.0.0"},{"fixed":"26.0.2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-17-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.el9.alma.1.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-21-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.el9.alma.1.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-21-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.el9.alma.1.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-21-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.el9.alma.1.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-21-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.el9.alma.1.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-21-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.el9.alma.1.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-21-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.el9.alma.1.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-21-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.el9.alma.1.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-21-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.el9.alma.1.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-21-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.el9.alma.1.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-21-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.el9.alma.1.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-21-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.el9.alma.1.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-21-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.el9.alma.1.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-21-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.el9.alma.1.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-21-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.el9.alma.1.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-21-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.el9.alma.1.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-21-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.el9.alma.1.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-21-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.el9.alma.1.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-21-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.el9.alma.1.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-21-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.el9.alma.1.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-21-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.el9.alma.1.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-21-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.el9.alma.1.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-21-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.el9.alma.1.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-17-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-17-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-17-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-17-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-17-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-17-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-17-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-17-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-17-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-17-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-17-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-17-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-17-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"java-17-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.el9.tuxcare.els1"}]}],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"openjdk-8-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u502-ga~us1-0ubuntu1~20.04+tuxcare.els1"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"openjdk-8-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u502-ga~us1-0ubuntu1~20.04+tuxcare.els1"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"openjdk-8-jdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u502-ga~us1-0ubuntu1~20.04+tuxcare.els1"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"openjdk-8-jdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u502-ga~us1-0ubuntu1~20.04+tuxcare.els1"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"openjdk-8-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u502-ga~us1-0ubuntu1~20.04+tuxcare.els1"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"openjdk-8-jre-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u502-ga~us1-0ubuntu1~20.04+tuxcare.els1"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"openjdk-8-jre-zero","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u502-ga~us1-0ubuntu1~20.04+tuxcare.els1"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"openjdk-8-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u502-ga~us1-0ubuntu1~20.04+tuxcare.els1"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"openjdk-11-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32+9-0ubuntu1~20.04+tuxcare.els1"}]}],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"openjdk-11-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32+9-0ubuntu1~20.04+tuxcare.els1"}]}],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"openjdk-11-jdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32+9-0ubuntu1~20.04+tuxcare.els1"}]}],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"openjdk-11-jdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32+9-0ubuntu1~20.04+tuxcare.els1"}]}],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"openjdk-11-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32+9-0ubuntu1~20.04+tuxcare.els1"}]}],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"openjdk-11-jre-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32+9-0ubuntu1~20.04+tuxcare.els1"}]}],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"openjdk-11-jre-zero","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32+9-0ubuntu1~20.04+tuxcare.els1"}]}],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"openjdk-11-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32+9-0ubuntu1~20.04+tuxcare.els1"}]}],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32+9-0ubuntu1~18.04.1+tuxcare.els1"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32+9-0ubuntu1~18.04.1+tuxcare.els1"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-jdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32+9-0ubuntu1~18.04.1+tuxcare.els1"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-jdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32+9-0ubuntu1~18.04.1+tuxcare.els1"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32+9-0ubuntu1~18.04.1+tuxcare.els1"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-jre-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32+9-0ubuntu1~18.04.1+tuxcare.els1"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-jre-zero","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32+9-0ubuntu1~18.04.1+tuxcare.els1"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32+9-0ubuntu1~18.04.1+tuxcare.els1"}]}],"bundled":11},{"source":"osv","ecosystem":"Debian:12","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20+8-1~deb12u1"}]}],"versions":["17.0.10+7-1","17.0.10+7-1~deb11u1","17.0.10+7-1~deb12u1","17.0.10+7-2","17.0.10+7-3","17.0.10~6ea-1","17.0.11+9-1","17.0.11+9-1~deb11u1","17.0.11+9-1~deb12u1","17.0.11~6ea-1","17.0.11~7ea-1","17.0.12+7-1","17.0.12+7-2","17.0.12+7-2~deb11u1","17.0.12+7-2~deb12u1","17.0.12~6ea-1","17.0.13+11-1","17.0.13+11-1~deb11u1","17.0.13+11-1~deb12u1","17.0.13+11-2","17.0.13+11-2~deb12u1","17.0.13~6ea-1","17.0.14+7-1","17.0.14+7-1~deb11u1","17.0.14+7-1~deb12u1","17.0.14~6ea-1","17.0.15+6-1","17.0.15+6-1~deb11u1","17.0.15+6-1~deb12u1","17.0.15~4ea-1","17.0.15~5ea-1","17.0.16+8-1","17.0.16+8-1~deb11u1","17.0.16+8-1~deb12u1","17.0.16~5ea-1","17.0.17+10-1","17.0.17+10-1~deb11u1","17.0.17+10-1~deb12u1","17.0.17~5ea-1","17.0.17~8ea-1","17.0.18+8-1","17.0.18+8-1~deb11u1","17.0.18+8-1~deb12u1","17.0.18~7ea-1","17.0.19+10-1","17.0.19+10-1~deb11u1","17.0.19+10-1~deb12u1","17.0.19+10-1~deb12u2","17.0.19~6ea-1","17.0.19~9ea-1","17.0.19~9ea-2","17.0.20+8-1~deb11u1","17.0.20~5ea-1","17.0.20~7ea-1","17.0.6+10-1","17.0.7+7-1","17.0.7+7-1~deb11u1","17.0.7+7-1~deb12u1","17.0.7+7-2","17.0.8+7-1","17.0.8+7-1~deb12u1","17.0.8~6-1","17.0.8~6-2","17.0.8~6-3","17.0.8~6-4","17.0.8~6-5","17.0.9+9-1","17.0.9+9-1~deb11u1","17.0.9+9-1~deb12u1","17.0.9+9-2","17.0.9~4ea-1","17.0.9~6ea-1"]},{"source":"osv","ecosystem":"Debian:13","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.12+8-1~deb13u1"}]}],"versions":["21.0.10+7-1","21.0.10+7-1~deb13u1","21.0.10~4ea-1","21.0.10~6ea-1","21.0.11+10-1","21.0.11+10-1~deb13u1","21.0.11+10-1~deb13u2","21.0.11~5ea-1","21.0.11~6ea-1","21.0.11~8ea-1","21.0.11~9ea-1","21.0.11~9ea-2","21.0.12~5ea-1","21.0.12~7ea-1","21.0.8+9-1","21.0.9+10-1","21.0.9+10-1~deb13u1","21.0.9~5ea-1","21.0.9~8ea-1"]},{"source":"osv","ecosystem":"Debian:14","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.12+8-1"}]}],"versions":["21.0.10+7-1","21.0.10+7-1~deb13u1","21.0.10~4ea-1","21.0.10~6ea-1","21.0.11+10-1","21.0.11+10-1~deb13u1","21.0.11+10-1~deb13u2","21.0.11~5ea-1","21.0.11~6ea-1","21.0.11~8ea-1","21.0.11~9ea-1","21.0.11~9ea-2","21.0.12+8-1~deb13u1","21.0.12~5ea-1","21.0.12~7ea-1","21.0.8+9-1","21.0.9+10-1","21.0.9+10-1~deb13u1","21.0.9~5ea-1","21.0.9~8ea-1"]},{"source":"osv","ecosystem":"Debian:13","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4+7-1~deb13u1"}]}],"versions":["25+36-1","25.0.1+8-1","25.0.1+8-1~deb13u1","25.0.1+8-2","25.0.1+8-3","25.0.2+10-1","25.0.2+10-1~deb13u2","25.0.3+9-1","25.0.3+9-2","25.0.3+9-2~deb13u1","25.0.3~5ea-1","25.0.3~5ea-2","25.0.3~7ea-1","25.0.3~7ea-2","25.0.3~8ea-1","25.0.3~8ea-2","25.0.4~4ea-1","25.0.4~6ea-1","25~32ea-1","25~34ea-1","25~36ea-1"]},{"source":"osv","ecosystem":"Debian:14","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4+7-1"}]}],"versions":["25+36-1","25.0.1+8-1","25.0.1+8-1~deb13u1","25.0.1+8-2","25.0.1+8-3","25.0.2+10-1","25.0.2+10-1~deb13u2","25.0.3+9-1","25.0.3+9-2","25.0.3+9-2~deb13u1","25.0.3~5ea-1","25.0.3~5ea-2","25.0.3~7ea-1","25.0.3~7ea-2","25.0.3~8ea-1","25.0.3~8ea-2","25.0.4+7-1~deb13u1","25.0.4~4ea-1","25.0.4~6ea-1","25~32ea-1","25~34ea-1","25~36ea-1"]},{"source":"osv","ecosystem":"Mageia:10","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.12.1.1-1.mga10"}]}],"bundled":11},{"source":"osv","ecosystem":"Mageia:9","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20.1.1-1.mga9"}]}],"bundled":11},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-17-openjdk-17.0.20.8-4.oe2403sp3"}]}],"bundled":22},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-17-openjdk-17.0.20.8-4.oe2403sp4"}]}],"bundled":22},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-17-openjdk-17.0.20.8-4.oe2003sp4"}]}],"bundled":24},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-17-openjdk-17.0.20.8-4.oe2203sp4"}]}],"bundled":22},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-17-openjdk-17.0.20.8-4.oe2403sp1"}]}],"bundled":22},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"openjdk-11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-11-openjdk-11.0.32.9-1.oe2003sp4"}]}],"bundled":28},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"openjdk-11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-11-openjdk-11.0.32.9-1.oe2203sp4"}]}],"bundled":28},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"openjdk-11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-11-openjdk-11.0.32.9-1.oe2403sp1"}]}],"bundled":28},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"openjdk-11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-11-openjdk-11.0.32.9-1.oe2403sp3"}]}],"bundled":28},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"openjdk-11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-11-openjdk-11.0.32.9-1.oe2403sp4"}]}],"bundled":28},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el7_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el7_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el7_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el7_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el7_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el7_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el7_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el7_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el7_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el7_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el7_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el7_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-javadoc-zip-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el7_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el7_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-jmods-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el7_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el7_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el7_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el7_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el7","package":"java-11-openjdk-static-libs-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el7_9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el8","package":"java-11-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el8"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openjdk_els:11::el9","package":"java-11-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.32.0.9-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"java-17-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-17-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-17-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-17-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-17-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-17-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-17-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-17-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-17-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-17-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-17-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-17-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-17-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-17-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-17-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-21-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-21-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-21-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-21-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-21-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-21-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-21-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-21-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-21-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-21-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-21-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-21-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-21-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-21-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-21-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-21-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-21-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"java-21-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"java-21-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"java-21-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"java-21-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"java-21-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"java-21-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"java-21-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"java-21-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"java-21-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"java-21-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"java-21-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"java-21-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"java-21-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-21-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-21-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-21-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-21-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-21-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-21-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-21-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-21-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-21-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-21-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-21-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-21-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-21-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-21-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-21-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-21-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-21-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-21-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-21-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-21-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-21-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-21-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-21-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"java-21-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.2.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-crypto-adapter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-crypto-adapter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk-crypto-adapter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk-crypto-adapter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-crypto-adapter-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-crypto-adapter-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-crypto-adapter-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-crypto-adapter-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el10_2"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-crypto-adapter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-crypto-adapter-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-crypto-adapter-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-crypto-adapter-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-crypto-adapter-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-portable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-2.0.2.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-portable-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-2.0.2.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-portable-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-2.0.2.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-portable-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-2.0.2.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-portable-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-2.0.2.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-portable-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-2.0.2.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-portable-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-2.0.2.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-portable-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-2.0.2.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-portable-sources","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-2.0.2.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-portable-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-2.0.2.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-portable-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-2.0.2.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-portable-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-2.0.2.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-portable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-portable-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-portable-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-portable-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-portable-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-portable-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-portable-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-portable-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-portable-sources","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-portable-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-portable-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-portable-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-21-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.0.12.0.8-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-1.1.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-crypto-adapter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-1.1.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-crypto-adapter-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-1.1.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-crypto-adapter-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-1.1.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-1.1.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-1.1.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-1.1.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-1.1.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-1.1.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-1.1.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-1.1.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-1.1.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-1.1.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-1.1.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-1.1.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-1.1.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-1.1.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-1.1.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-1.1.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-1.1.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-1.1.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-1.1.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-1.1.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-1.1.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-1.1.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.0.7-1.1.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-ibm-semeru-certified-jdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.el10_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"java-21-ibm-semeru-certified-jdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-1.el10_0"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-ibm-semeru-certified-jdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-ibm-semeru-certified-jdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-ibm-semeru-certified-jdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-ibm-semeru-certified-jdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-21-ibm-semeru-certified-jdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.12.0.8-2.el10_2"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.20.0.8-1.1.el8_10"}]}],"bundled":9},{"source":"osv","ecosystem":"Rocky Linux:9","package":"java-25-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.0.7-1.1.el9_8"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20.0-160000.1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20.0-160000.1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20.0-160000.1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20.0-160000.1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32.0-3.102.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32.0-3.102.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"java-25-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4.0-150700.15.13.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.12.0-150600.3.29.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.12.0-150600.3.29.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.12.0-150600.3.29.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP7","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20.0-150400.3.69.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20.0-150400.3.69.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20.0-150400.3.69.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20.0-150400.3.69.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20.0-150400.3.69.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20.0-150400.3.69.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20.0-150400.3.69.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20.0-150400.3.69.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20.0-150400.3.69.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20.0-150400.3.69.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20.0-150400.3.69.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP7","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32.0-150000.3.141.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32.0-150000.3.141.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32.0-150000.3.141.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32.0-150000.3.141.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32.0-150000.3.141.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32.0-150000.3.141.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32.0-150000.3.141.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32.0-150000.3.141.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32.0-150000.3.141.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32.0-150000.3.141.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32.0-150000.3.141.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32.0-150000.3.141.1"}]}],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8u66-b01-5","8u72-b05-1ubuntu1","8u72-b05-5","8u72-b05-6","8u72-b15-1","8u72-b15-2ubuntu1","8u72-b15-2ubuntu3","8u72-b15-3ubuntu1","8u77-b03-1ubuntu2","8u77-b03-3ubuntu1","8u77-b03-3ubuntu2","8u77-b03-3ubuntu3","8u91-b14-0ubuntu4~16.04.1","8u91-b14-3ubuntu1~16.04.1","8u111-b14-2ubuntu0.16.04.2","8u121-b13-0ubuntu1.16.04.2","8u131-b11-0ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.3","8u151-b12-0ubuntu0.16.04.2","8u162-b12-0ubuntu0.16.04.2","8u171-b11-0ubuntu0.16.04.1","8u181-b13-0ubuntu0.16.04.1","8u181-b13-1ubuntu0.16.04.1","8u191-b12-0ubuntu0.16.04.1","8u191-b12-2ubuntu0.16.04.1","8u212-b03-0ubuntu1.16.04.1","8u222-b10-1ubuntu1~16.04.1","8u232-b09-0ubuntu1~16.04.1","8u242-b08-0ubuntu3~16.04","8u252-b09-1~16.04","8u265-b01-0ubuntu2~16.04","8u272-b10-0ubuntu1~16.04","8u275-b01-0ubuntu1~16.04","8u282-b08-0ubuntu1~16.04","8u292-b10-0ubuntu1~16.04.1","8u312-b07-0ubuntu1~16.04","8u342-b07-0ubuntu1~16.04","8u352-ga-1~16.04","8u362-ga-0ubuntu1~16.04.1","8u372-ga~us1-0ubuntu1~16.04","8u382-ga-1~16.04.1","8u392-ga-1~16.04","8u432-ga~us1-0ubuntu2~16.04.4","8u442-b06~us1-0ubuntu1~16.04","8u452-ga~us1-0ubuntu1~16.04.1","8u462-ga~us1-0ubuntu2~16.04.2","8u472-ga-1~16.04","8u482-ga~us1-0ubuntu1~16.04","8u492-ga~us2-0ubuntu1~16.04.1","8u502-ga~us1-0ubuntu1~16.04","8u504-ga-1ubuntu1~16.04.3","8u512-b09~us1-0ubuntu1~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9~b88-1","9~b101-2ubuntu2","9~b102-1","9~b113-0ubuntu1","9~b114-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32+9-1ubuntu1~18.04"}]}],"versions":["9.0.4+12-2ubuntu4","9.0.4+12-4ubuntu1","10~46-4ubuntu1","10~46-5ubuntu1","10.0.1+10-1ubuntu2","10.0.1+10-3ubuntu1","10.0.2+13-1ubuntu0.18.04.1","10.0.2+13-1ubuntu0.18.04.2","10.0.2+13-1ubuntu0.18.04.3","10.0.2+13-1ubuntu0.18.04.4","11.0.2+9-3ubuntu1~18.04.3","11.0.3+7-1ubuntu2~18.04.1","11.0.4+11-1ubuntu2~18.04.3","11.0.5+10-0ubuntu1.1~18.04","11.0.6+10-1ubuntu1~18.04.1","11.0.7+10-2ubuntu2~18.04","11.0.8+10-0ubuntu1~18.04.1","11.0.9+11-0ubuntu1~18.04.1","11.0.9.1+1-0ubuntu1~18.04","11.0.10+9-0ubuntu1~18.04","11.0.11+9-0ubuntu2~18.04","11.0.13+8-0ubuntu1~18.04","11.0.14+9-0ubuntu2~18.04","11.0.14.1+1-0ubuntu1~18.04","11.0.15+10-0ubuntu0.18.04.1","11.0.16+8-0ubuntu1~18.04","11.0.17+8-1ubuntu2~18.04","11.0.18+10-0ubuntu1~18.04.1","11.0.19+7~us1-0ubuntu1~18.04.1","11.0.20+8-1ubuntu1~18.04","11.0.20.1+1-0ubuntu1~18.04","11.0.21+9-0ubuntu1~18.04","11.0.22+7-0ubuntu2~18.04.1","11.0.23+9-1ubuntu1~18.04.1","11.0.25+9-1ubuntu1~18.04","11.0.26+4-1ubuntu1~18.04","11.0.27+6~us1-0ubuntu1~18.04","11.0.28+6-1ubuntu1~18.04.1","11.0.29+7-1ubuntu1~18.04","11.0.30+7-1ubuntu1~18.04","11.0.31+11-1ubuntu1~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20+8-1~18.04"}]}],"versions":["17+35-1~18.04","17.0.1+12-1~18.04","17.0.2+8-1~18.04","17.0.3+7-0ubuntu0.18.04.1","17.0.4+8-1~18.04","17.0.5+8-2ubuntu1~18.04","17.0.6+10-0ubuntu1~18.04.1","17.0.7+7~us1-0ubuntu1~18.04","17.0.8+7-1~18.04","17.0.8.1+1~us1-0ubuntu1~18.04","17.0.9+9-1~18.04","17.0.10+7-1~18.04.1","17.0.11+9-1~18.04.1","17.0.13+11-2ubuntu1~18.04.2","17.0.14+7-1~18.04","17.0.15+6~us1-0ubuntu1~18.04","17.0.16+8~us1-0ubuntu1~18.04.1","17.0.17+10-1~18.04","17.0.18+8-1~18.04","17.0.19+10-1~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8u144-b01-2","8u151-b12-1","8u162-b12-1","8u171-b11-0ubuntu0.18.04.1","8u181-b13-0ubuntu0.18.04.1","8u181-b13-1ubuntu0.18.04.1","8u191-b12-0ubuntu0.18.04.1","8u191-b12-2ubuntu0.18.04.1","8u212-b03-0ubuntu1.18.04.1","8u222-b10-1ubuntu1~18.04.1","8u232-b09-0ubuntu1~18.04.1","8u242-b08-0ubuntu3~18.04","8u252-b09-1~18.04","8u265-b01-0ubuntu2~18.04","8u272-b10-0ubuntu1~18.04","8u275-b01-0ubuntu1~18.04","8u282-b08-0ubuntu1~18.04","8u292-b10-0ubuntu1~18.04","8u312-b07-0ubuntu1~18.04","8u342-b07-0ubuntu1~18.04","8u352-ga-1~18.04","8u362-ga-0ubuntu1~18.04.1","8u372-ga~us1-0ubuntu1~18.04","8u382-ga-1~18.04.1","8u392-ga-1~18.04","8u402-ga-2ubuntu1~18.04","8u412-ga-1~18.04.1","8u422-b05-1~18.04","8u432-ga~us1-0ubuntu2~18.04","8u442-b06~us1-0ubuntu1~18.04","8u452-ga~us1-0ubuntu1~18.04","8u462-ga~us1-0ubuntu2~18.04.2","8u472-ga-1~18.04","8u482-ga~us1-0ubuntu1~18.04","8u492-ga~us2-0ubuntu1~18.04.1","8u502-ga~us1-0ubuntu1~18.04","8u504-ga-1ubuntu1~18.04.3","8u512-b09~us1-0ubuntu1~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32+9-1ubuntu1~20.04"}]}],"versions":["11.0.5+10-0ubuntu1","11.0.5+10-2ubuntu1","11.0.6+10-1ubuntu1","11.0.6+10-2ubuntu2","11.0.7+9-1ubuntu1","11.0.7+10-2ubuntu1","11.0.7+10-3ubuntu1","11.0.8+10-0ubuntu1~20.04","11.0.9+11-0ubuntu1~20.04","11.0.9.1+1-0ubuntu1~20.04","11.0.10+9-0ubuntu1~20.04","11.0.11+9-0ubuntu2~20.04","11.0.13+8-0ubuntu1~20.04","11.0.14+9-0ubuntu2~20.04","11.0.14.1+1-0ubuntu1~20.04","11.0.15+10-0ubuntu0.20.04.1","11.0.16+8-0ubuntu1~20.04","11.0.17+8-1ubuntu2~20.04","11.0.18+10-0ubuntu1~20.04.1","11.0.19+7~us1-0ubuntu1~20.04.1","11.0.20+8-1ubuntu1~20.04","11.0.20.1+1-0ubuntu1~20.04","11.0.21+9-0ubuntu1~20.04","11.0.22+7-0ubuntu2~20.04.1","11.0.23+9-1ubuntu1~20.04.2","11.0.24+8-1ubuntu3~20.04","11.0.25+9-1ubuntu1~20.04","11.0.26+4-1ubuntu1~20.04","11.0.27+6~us1-0ubuntu1~20.04","11.0.28+6-1ubuntu1~20.04.1","11.0.29+7-1ubuntu1~20.04","11.0.30+7-1ubuntu1~20.04","11.0.31+11-1ubuntu1~20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["13+33-1","13.0.1+9-2","13.0.2+8-1","13.0.2+8-2","13.0.3+3-1ubuntu2","13.0.4+8-1~20.04","13.0.7+5-0ubuntu1~20.04"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["16.0.1+9-1~20.04"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20+8-1~20.04"}]}],"versions":["17+35-1~20.04","17.0.1+12-1~20.04","17.0.2+8-1~20.04","17.0.3+7-0ubuntu0.20.04.1","17.0.4+8-1~20.04","17.0.5+8-2ubuntu1~20.04","17.0.6+10-0ubuntu1~20.04.1","17.0.7+7~us1-0ubuntu1~20.04","17.0.8+7-1~20.04.2","17.0.8.1+1~us1-0ubuntu1~20.04","17.0.9+9-1~20.04","17.0.10+7-1~20.04.1","17.0.11+9-1~20.04.2","17.0.12+7-1ubuntu2~20.04","17.0.13+11-2ubuntu1~20.04","17.0.14+7-1~20.04","17.0.15+6~us1-0ubuntu1~20.04","17.0.16+8~us1-0ubuntu1~20.04.6","17.0.17+10-1~20.04","17.0.18+8-1~20.04","17.0.19+10-1~20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.12+8-1~20.04"}]}],"versions":["21.0.1+12-2~20.04.1","21.0.2+13-1~20.04.1","21.0.3+9-1ubuntu1~20.04.1","21.0.4+7-1ubuntu2~20.04","21.0.5+11-1ubuntu1~20.04","21.0.6+7-1~20.04.1","21.0.7+6~us1-0ubuntu1~20.04","21.0.8+9~us1-0ubuntu1~20.04.1","21.0.9+10-1~20.04","21.0.10+7-1~20.04","21.0.11+10-1~20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8u232-b09-0ubuntu1","8u232-b09-1","8u242-b04-1","8u242-b08-0ubuntu3","8u252-b07-1","8u252-b09-1ubuntu1","8u265-b01-0ubuntu2~20.04","8u272-b10-0ubuntu1~20.04","8u275-b01-0ubuntu1~20.04","8u282-b08-0ubuntu1~20.04","8u292-b10-0ubuntu1~20.04","8u312-b07-0ubuntu1~20.04","8u342-b07-0ubuntu1~20.04","8u352-ga-1~20.04","8u362-ga-0ubuntu1~20.04.1","8u372-ga~us1-0ubuntu1~20.04","8u382-ga-1~20.04.1","8u392-ga-1~20.04","8u402-ga-2ubuntu1~20.04","8u412-ga-1~20.04.1","8u422-b05-1~20.04","8u432-ga~us1-0ubuntu2~20.04","8u442-b06~us1-0ubuntu1~20.04","8u452-ga~us1-0ubuntu1~20.04","8u462-ga~us1-0ubuntu2~20.04.2","8u472-ga-1~20.04","8u482-ga~us1-0ubuntu1~20.04","8u492-ga~us2-0ubuntu1~20.04.1","8u502-ga~us1-0ubuntu1~20.04","8u504-ga-1ubuntu1~20.04.3","8u512-b09~us1-0ubuntu1~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20+8-1~22.04"}]}],"versions":["17+35-1","17.0.1+12-1","17.0.2+8-1","17.0.3+7-0ubuntu0.22.04.1","17.0.4+8-1~22.04","17.0.5+8-2ubuntu1~22.04","17.0.6+10-0ubuntu1~22.04","17.0.7+7~us1-0ubuntu1~22.04.2","17.0.8+7-1~22.04","17.0.8.1+1~us1-0ubuntu1~22.04","17.0.9+9-1~22.04","17.0.10+7-1~22.04.1","17.0.11+9-1~22.04.1","17.0.12+7-1ubuntu2~22.04","17.0.13+11-2ubuntu1~22.04","17.0.14+7-1~22.04.1","17.0.15+6~us1-0ubuntu1~22.04","17.0.16+8~us1-0ubuntu1~22.04.1","17.0.17+10-1~22.04","17.0.18+8-1~22.04.1","17.0.19+10-1~22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["18~15ea-4","18~20ea-1","18~32ea-1","18~36ea-1","18.0.2+9-2~22.04"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.12+8-1~22.04"}]}],"versions":["21.0.1+12-2~22.04","21.0.2+13-1~22.04.1","21.0.3+9-1ubuntu1~22.04.1","21.0.4+7-1ubuntu2~22.04","21.0.5+11-1ubuntu1~22.04","21.0.6+7-1~22.04.1","21.0.7+6~us1-0ubuntu1~22.04","21.0.8+9~us1-0ubuntu1~22.04.1","21.0.9+10-1~22.04","21.0.10+7-1~22.04","21.0.11+10-1~22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4+7-1~22.04"}]}],"versions":["25+36-1~22.04.2","25.0.1+8-1~22.04","25.0.2+10-1~22.04","25.0.3+9-2~22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8u302-b08-0ubuntu2","8u312-b07-0ubuntu1","8u342-b07-0ubuntu1~22.04","8u352-ga-1~22.04","8u362-ga-0ubuntu1~22.04","8u372-ga~us1-0ubuntu1~22.04","8u382-ga-1~22.04.1","8u392-ga-1~22.04","8u402-ga-2ubuntu1~22.04","8u412-ga-1~22.04.1","8u422-b05-1~22.04","8u432-ga~us1-0ubuntu2~22.04","8u442-b06~us1-0ubuntu1~22.04","8u452-ga~us1-0ubuntu1~22.04","8u462-ga~us1-0ubuntu2~22.04.2","8u472-ga-1~22.04","8u482-ga~us1-0ubuntu1~22.04","8u492-ga~us2-0ubuntu1~22.04.1","8u502-ga~us1-0ubuntu1~22.04","8u504-ga-1ubuntu1~22.04.3","8u512-b09~us1-0ubuntu1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32+9-1ubuntu1~22.04"}]}],"versions":["11.0.12+7-0ubuntu3","11.0.13+8-0ubuntu1","11.0.14+9-0ubuntu2","11.0.14.1+1-0ubuntu1","11.0.15+10-0ubuntu0.22.04.1","11.0.16+8-0ubuntu1~22.04","11.0.17+8-1ubuntu2~22.04","11.0.18+10-0ubuntu1~22.04","11.0.19+7~us1-0ubuntu1~22.04.1","11.0.20+8-1ubuntu1~22.04","11.0.20.1+1-0ubuntu1~22.04","11.0.21+9-0ubuntu1~22.04","11.0.22+7-0ubuntu2~22.04.1","11.0.23+9-1ubuntu1~22.04.1","11.0.24+8-1ubuntu3~22.04","11.0.25+9-1ubuntu1~22.04","11.0.26+4-1ubuntu1~22.04","11.0.27+6~us1-0ubuntu1~22.04","11.0.28+6-1ubuntu1~22.04.1","11.0.29+7-1ubuntu1~22.04","11.0.30+7-1ubuntu1~22.04","11.0.31+11-1ubuntu1~22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20+8-1~24.04"}]}],"versions":["17.0.9~6ea-1","17.0.9+9-1","17.0.9+9-2","17.0.10~6ea-1","17.0.10+7-1","17.0.11~7ea-1","17.0.11~7ea-1build1","17.0.11+9-1","17.0.12+7-1ubuntu2~24.04","17.0.13+11-2ubuntu1~24.04","17.0.14+7-1~24.04","17.0.15+6~us1-0ubuntu1~24.04","17.0.16+8~us1-0ubuntu1~24.04.1","17.0.17+10-1~24.04","17.0.18+8-1~24.04.1","17.0.19+10-1~24.04.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.12+8-1~24.04"}]}],"versions":["21+35-1","21.0.1+12-2","21.0.1+12-3","21.0.2+13-1","21.0.2+13-2","21.0.3~7ea-1","21.0.3~7ea-1build1","21.0.3~7ea-1build2","21.0.3+9-1","21.0.3+9-1ubuntu1","21.0.4+7-1ubuntu2~24.04","21.0.5+11-1ubuntu1~24.04","21.0.6+7-1~24.04.1","21.0.7+6~us1-0ubuntu1~24.04","21.0.8+9~us1-0ubuntu1~24.04.1","21.0.9+10-1~24.04","21.0.10+7-1~24.04","21.0.11+10-1~24.04.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4+7-1~24.04"}]}],"versions":["25+36-1~24.04.2","25.0.1+8-1~24.04","25.0.2+10-1~24.04","25.0.3+9-2~24.04.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8u382-ga-1ubuntu1","8u392-ga-1","8u402-ga-1","8u402-ga-2","8u402-ga-2ubuntu1","8u402-ga-2ubuntu6","8u402-ga-2ubuntu7","8u402-ga-8build1","8u412-ga-1~24.04.2","8u422-b05-1~24.04","8u432-ga~us1-0ubuntu2~24.04","8u442-b06~us1-0ubuntu1~24.04","8u452-ga~us1-0ubuntu1~24.04","8u462-ga~us1-0ubuntu2~24.04.2","8u472-ga-1~24.04","8u482-ga~us1-0ubuntu1~24.04","8u492-ga~us2-0ubuntu1~24.04.1","8u502-ga~us1-0ubuntu1~24.04","8u504-ga-1ubuntu1~24.04.3","8u512-b09~us1-0ubuntu1~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32+9-1ubuntu1~24.04"}]}],"versions":["11.0.20+8-1ubuntu1","11.0.21+9-0ubuntu1","11.0.22+7-0ubuntu2","11.0.23~7ea-1ubuntu1","11.0.23~7ea-1ubuntu2","11.0.23+9-1ubuntu1","11.0.24+8-1ubuntu3~24.04.1","11.0.25+9-1ubuntu1~24.04","11.0.26+4-1ubuntu1~24.04","11.0.27+6~us1-0ubuntu1~24.04","11.0.28+6-1ubuntu1~24.04.1","11.0.29+7-1ubuntu1~24.04","11.0.30+7-1ubuntu1~24.04","11.0.31+11-1ubuntu1~24.04.2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20+8-1"}]}],"versions":["17.0.18+8-1","17.0.19+10-1","17.0.20~5ea-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["17.0.18+8-0ubuntu1","17.0.19+10-0ubuntu1","17.0.20+8-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.12+8-1"}]}],"versions":["21.0.11~8ea-1","21.0.11+10-1","21.0.12~5ea-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.0.10+7-0ubuntu1","21.0.11+10-0ubuntu1","21.0.12+8-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4.1+1-1"}]}],"versions":["25.0.3~7ea-2","25.0.3+9-2","25.0.4~4ea-1","25.0.4+7-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8u482-ga~us1-0ubuntu1","8u492-ga~us2-0ubuntu2","8u502-ga~us1-0ubuntu1","8u504-ga-1ubuntu1","8u512-b09~us1-0ubuntu1~26.10.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32+9-1ubuntu1"}]}],"versions":["11.0.30+7-1ubuntu1","11.0.31+11-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20+8-1~26.04"}]}],"versions":["17.0.17~8ea-1","17.0.17+10-1","17.0.18~7ea-1","17.0.18+8-1","17.0.19+10-1~26.04.2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20+8-0ubuntu1~26.04"}]}],"versions":["17.0.16+8-0ubuntu1","17.0.17+10-0ubuntu1","17.0.18+8-0ubuntu1","17.0.19+10-0ubuntu1~26.04.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.12+8-1~26.04"}]}],"versions":["21.0.9~8ea-1","21.0.9+10-1","21.0.10~4ea-1","21.0.10~6ea-1","21.0.10+7-1","21.0.11~5ea-1","21.0.11~8ea-1","21.0.11+10-1~26.04.2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.12+8-0ubuntu1~26.04"}]}],"versions":["21.0.8+9-0ubuntu1","21.0.9+10-0ubuntu1","21.0.10+7-0ubuntu1","21.0.11+10-0ubuntu1~26.04.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4+7-1~26.04"}]}],"versions":["25+36-1","25.0.1+8-1","25.0.1+8-2","25.0.1+8-3","25.0.2+10-1","25.0.3~5ea-2","25.0.3~7ea-2","25.0.3+9-2~26.04.2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.0.2+10-2~26.04.2"}]}],"versions":["26~17ea-1","26~26ea-1","26~28ea-1","26~30ea-1","26~32ea-1","26~34ea-1","26.0.1+8-2~26.04.2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8u462-ga-1","8u472-ga~us1-0ubuntu1","8u472-ga-1","8u482-ga~us1-0ubuntu1","8u492-ga~us2-0ubuntu1~26.04.1","8u502-ga~us1-0ubuntu1~26.04","8u504-ga-1ubuntu1~26.04.3","8u512-b09~us1-0ubuntu1~26.04.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32+9-1ubuntu1~26.04"}]}],"versions":["11.0.28+6-1ubuntu1","11.0.29+7-1ubuntu1","11.0.30+7-1ubuntu1","11.0.31+11-1ubuntu1~26.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32+9-1ubuntu1~18.04"}]}],"versions":["9.0.4+12-2ubuntu4","9.0.4+12-4ubuntu1","10~46-4ubuntu1","10~46-5ubuntu1","10.0.1+10-1ubuntu2","10.0.1+10-3ubuntu1","10.0.2+13-1ubuntu0.18.04.1","10.0.2+13-1ubuntu0.18.04.2","10.0.2+13-1ubuntu0.18.04.3","10.0.2+13-1ubuntu0.18.04.4","11.0.2+9-3ubuntu1~18.04.3","11.0.3+7-1ubuntu2~18.04.1","11.0.4+11-1ubuntu2~18.04.3","11.0.5+10-0ubuntu1.1~18.04","11.0.6+10-1ubuntu1~18.04.1","11.0.7+10-2ubuntu2~18.04","11.0.8+10-0ubuntu1~18.04.1","11.0.9+11-0ubuntu1~18.04.1","11.0.9.1+1-0ubuntu1~18.04","11.0.10+9-0ubuntu1~18.04","11.0.11+9-0ubuntu2~18.04","11.0.13+8-0ubuntu1~18.04","11.0.14+9-0ubuntu2~18.04","11.0.14.1+1-0ubuntu1~18.04","11.0.15+10-0ubuntu0.18.04.1","11.0.16+8-0ubuntu1~18.04","11.0.17+8-1ubuntu2~18.04","11.0.18+10-0ubuntu1~18.04.1","11.0.19+7~us1-0ubuntu1~18.04.1","11.0.20+8-1ubuntu1~18.04","11.0.20.1+1-0ubuntu1~18.04","11.0.21+9-0ubuntu1~18.04","11.0.22+7-0ubuntu2~18.04.1","11.0.23+9-1ubuntu1~18.04.1","11.0.25+9-1ubuntu1~18.04","11.0.26+4-1ubuntu1~18.04","11.0.27+6~us1-0ubuntu1~18.04","11.0.28+6-1ubuntu1~18.04.1","11.0.29+7-1ubuntu1~18.04","11.0.30+7-1ubuntu1~18.04","11.0.31+11-1ubuntu1~18.04.2"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32+9-1ubuntu1~20.04"}]}],"versions":["11.0.5+10-0ubuntu1","11.0.5+10-2ubuntu1","11.0.6+10-1ubuntu1","11.0.6+10-2ubuntu2","11.0.7+9-1ubuntu1","11.0.7+10-2ubuntu1","11.0.7+10-3ubuntu1","11.0.8+10-0ubuntu1~20.04","11.0.9+11-0ubuntu1~20.04","11.0.9.1+1-0ubuntu1~20.04","11.0.10+9-0ubuntu1~20.04","11.0.11+9-0ubuntu2~20.04","11.0.13+8-0ubuntu1~20.04","11.0.14+9-0ubuntu2~20.04","11.0.14.1+1-0ubuntu1~20.04","11.0.15+10-0ubuntu0.20.04.1","11.0.16+8-0ubuntu1~20.04","11.0.17+8-1ubuntu2~20.04","11.0.18+10-0ubuntu1~20.04.1","11.0.19+7~us1-0ubuntu1~20.04.1","11.0.20+8-1ubuntu1~20.04","11.0.20.1+1-0ubuntu1~20.04","11.0.21+9-0ubuntu1~20.04","11.0.22+7-0ubuntu2~20.04.1","11.0.23+9-1ubuntu1~20.04.2","11.0.24+8-1ubuntu3~20.04","11.0.25+9-1ubuntu1~20.04","11.0.26+4-1ubuntu1~20.04","11.0.27+6~us1-0ubuntu1~20.04","11.0.28+6-1ubuntu1~20.04.1","11.0.29+7-1ubuntu1~20.04","11.0.30+7-1ubuntu1~20.04","11.0.31+11-1ubuntu1~20.04.2"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32+9-1ubuntu1~22.04"}]}],"versions":["11.0.12+7-0ubuntu3","11.0.13+8-0ubuntu1","11.0.14+9-0ubuntu2","11.0.14.1+1-0ubuntu1","11.0.15+10-0ubuntu0.22.04.1","11.0.16+8-0ubuntu1~22.04","11.0.17+8-1ubuntu2~22.04","11.0.18+10-0ubuntu1~22.04","11.0.19+7~us1-0ubuntu1~22.04.1","11.0.20+8-1ubuntu1~22.04","11.0.20.1+1-0ubuntu1~22.04","11.0.21+9-0ubuntu1~22.04","11.0.22+7-0ubuntu2~22.04.1","11.0.23+9-1ubuntu1~22.04.1","11.0.24+8-1ubuntu3~22.04","11.0.25+9-1ubuntu1~22.04","11.0.26+4-1ubuntu1~22.04","11.0.27+6~us1-0ubuntu1~22.04","11.0.28+6-1ubuntu1~22.04.1","11.0.29+7-1ubuntu1~22.04","11.0.30+7-1ubuntu1~22.04","11.0.31+11-1ubuntu1~22.04.2"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32+9-1ubuntu1~24.04"}]}],"versions":["11.0.20+8-1ubuntu1","11.0.21+9-0ubuntu1","11.0.22+7-0ubuntu2","11.0.23~7ea-1ubuntu1","11.0.23~7ea-1ubuntu2","11.0.23+9-1ubuntu1","11.0.24+8-1ubuntu3~24.04.1","11.0.25+9-1ubuntu1~24.04","11.0.26+4-1ubuntu1~24.04","11.0.27+6~us1-0ubuntu1~24.04","11.0.28+6-1ubuntu1~24.04.1","11.0.29+7-1ubuntu1~24.04","11.0.30+7-1ubuntu1~24.04","11.0.31+11-1ubuntu1~24.04.2"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32+9-1ubuntu1~26.04"}]}],"versions":["11.0.28+6-1ubuntu1","11.0.29+7-1ubuntu1","11.0.30+7-1ubuntu1","11.0.31+11-1ubuntu1~26.04.2"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20+8-1~18.04"}]}],"versions":["17+35-1~18.04","17.0.1+12-1~18.04","17.0.2+8-1~18.04","17.0.3+7-0ubuntu0.18.04.1","17.0.4+8-1~18.04","17.0.5+8-2ubuntu1~18.04","17.0.6+10-0ubuntu1~18.04.1","17.0.7+7~us1-0ubuntu1~18.04","17.0.8+7-1~18.04","17.0.8.1+1~us1-0ubuntu1~18.04","17.0.9+9-1~18.04","17.0.10+7-1~18.04.1","17.0.11+9-1~18.04.1","17.0.13+11-2ubuntu1~18.04.2","17.0.14+7-1~18.04","17.0.15+6~us1-0ubuntu1~18.04","17.0.16+8~us1-0ubuntu1~18.04.1","17.0.17+10-1~18.04","17.0.18+8-1~18.04","17.0.19+10-1~18.04.2"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20+8-1~20.04"}]}],"versions":["17+35-1~20.04","17.0.1+12-1~20.04","17.0.2+8-1~20.04","17.0.3+7-0ubuntu0.20.04.1","17.0.4+8-1~20.04","17.0.5+8-2ubuntu1~20.04","17.0.6+10-0ubuntu1~20.04.1","17.0.7+7~us1-0ubuntu1~20.04","17.0.8+7-1~20.04.2","17.0.8.1+1~us1-0ubuntu1~20.04","17.0.9+9-1~20.04","17.0.10+7-1~20.04.1","17.0.11+9-1~20.04.2","17.0.12+7-1ubuntu2~20.04","17.0.13+11-2ubuntu1~20.04","17.0.14+7-1~20.04","17.0.15+6~us1-0ubuntu1~20.04","17.0.16+8~us1-0ubuntu1~20.04.6","17.0.17+10-1~20.04","17.0.18+8-1~20.04","17.0.19+10-1~20.04.2"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20+8-1~22.04"}]}],"versions":["17+35-1","17.0.1+12-1","17.0.2+8-1","17.0.3+7-0ubuntu0.22.04.1","17.0.4+8-1~22.04","17.0.5+8-2ubuntu1~22.04","17.0.6+10-0ubuntu1~22.04","17.0.7+7~us1-0ubuntu1~22.04.2","17.0.8+7-1~22.04","17.0.8.1+1~us1-0ubuntu1~22.04","17.0.9+9-1~22.04","17.0.10+7-1~22.04.1","17.0.11+9-1~22.04.1","17.0.12+7-1ubuntu2~22.04","17.0.13+11-2ubuntu1~22.04","17.0.14+7-1~22.04.1","17.0.15+6~us1-0ubuntu1~22.04","17.0.16+8~us1-0ubuntu1~22.04.1","17.0.17+10-1~22.04","17.0.18+8-1~22.04.1","17.0.19+10-1~22.04.2"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20+8-1~24.04"}]}],"versions":["17.0.9~6ea-1","17.0.9+9-1","17.0.9+9-2","17.0.10~6ea-1","17.0.10+7-1","17.0.11~7ea-1","17.0.11~7ea-1build1","17.0.11+9-1","17.0.12+7-1ubuntu2~24.04","17.0.13+11-2ubuntu1~24.04","17.0.14+7-1~24.04","17.0.15+6~us1-0ubuntu1~24.04","17.0.16+8~us1-0ubuntu1~24.04.1","17.0.17+10-1~24.04","17.0.18+8-1~24.04.1","17.0.19+10-1~24.04.2"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20+8-1~26.04"}]}],"versions":["17.0.17~8ea-1","17.0.17+10-1","17.0.18~7ea-1","17.0.18+8-1","17.0.19+10-1~26.04.2"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.12+8-1~20.04"}]}],"versions":["21.0.1+12-2~20.04.1","21.0.2+13-1~20.04.1","21.0.3+9-1ubuntu1~20.04.1","21.0.4+7-1ubuntu2~20.04","21.0.5+11-1ubuntu1~20.04","21.0.6+7-1~20.04.1","21.0.7+6~us1-0ubuntu1~20.04","21.0.8+9~us1-0ubuntu1~20.04.1","21.0.9+10-1~20.04","21.0.10+7-1~20.04","21.0.11+10-1~20.04.2"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.12+8-1~22.04"}]}],"versions":["21.0.1+12-2~22.04","21.0.2+13-1~22.04.1","21.0.3+9-1ubuntu1~22.04.1","21.0.4+7-1ubuntu2~22.04","21.0.5+11-1ubuntu1~22.04","21.0.6+7-1~22.04.1","21.0.7+6~us1-0ubuntu1~22.04","21.0.8+9~us1-0ubuntu1~22.04.1","21.0.9+10-1~22.04","21.0.10+7-1~22.04","21.0.11+10-1~22.04.2"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.12+8-1~24.04"}]}],"versions":["21+35-1","21.0.1+12-2","21.0.1+12-3","21.0.2+13-1","21.0.2+13-2","21.0.3~7ea-1","21.0.3~7ea-1build1","21.0.3~7ea-1build2","21.0.3+9-1","21.0.3+9-1ubuntu1","21.0.4+7-1ubuntu2~24.04","21.0.5+11-1ubuntu1~24.04","21.0.6+7-1~24.04.1","21.0.7+6~us1-0ubuntu1~24.04","21.0.8+9~us1-0ubuntu1~24.04.1","21.0.9+10-1~24.04","21.0.10+7-1~24.04","21.0.11+10-1~24.04.2"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.12+8-1~26.04"}]}],"versions":["21.0.9~8ea-1","21.0.9+10-1","21.0.10~4ea-1","21.0.10~6ea-1","21.0.10+7-1","21.0.11~5ea-1","21.0.11~8ea-1","21.0.11+10-1~26.04.2"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4+7-1~22.04"}]}],"versions":["25+36-1~22.04.2","25.0.1+8-1~22.04","25.0.2+10-1~22.04","25.0.3+9-2~22.04.2"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4+7-1~24.04"}]}],"versions":["25+36-1~24.04.2","25.0.1+8-1~24.04","25.0.2+10-1~24.04","25.0.3+9-2~24.04.2"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4+7-1~26.04"}]}],"versions":["25+36-1","25.0.1+8-1","25.0.1+8-2","25.0.1+8-3","25.0.2+10-1","25.0.3~5ea-2","25.0.3~7ea-2","25.0.3+9-2~26.04.2"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.0.2+10-2~26.04.2"}]}],"versions":["26~17ea-1","26~26ea-1","26~28ea-1","26~30ea-1","26~32ea-1","26~34ea-1","26.0.1+8-2~26.04.2"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20+8-0ubuntu1~26.04"}]}],"versions":["17.0.16+8-0ubuntu1","17.0.17+10-0ubuntu1","17.0.18+8-0ubuntu1","17.0.19+10-0ubuntu1~26.04.1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.12+8-0ubuntu1~26.04"}]}],"versions":["21.0.8+9-0ubuntu1","21.0.9+10-0ubuntu1","21.0.10+7-0ubuntu1","21.0.11+10-0ubuntu1~26.04.1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-25-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4+7-0ubuntu1~26.04"}]}],"versions":["25+36-0ubuntu1","25.0.1+8-0ubuntu1","25.0.2+10-0ubuntu1","25.0.3+9-0ubuntu1~26.04.1"],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32.0-1.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20.0-1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-26-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.0.2.0-1.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.12.0-1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-25-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4.0-1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20.0-160000.1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"java-25-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4.0-160000.1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.12.0-160000.1.1"}]}],"bundled":9}],"products":[{"vendor":"oracle","product":"graalvm"},{"vendor":"oracle","product":"graalvm_for_jdk"},{"vendor":"oracle","product":"jdk"},{"vendor":"oracle","product":"jre"},{"vendor":"oracle corporation","product":"oracle graalvm enterprise edition"},{"vendor":"oracle corporation","product":"oracle graalvm for jdk"},{"vendor":"oracle corporation","product":"oracle java se"}],"references":[{"url":"https://www.oracle.com/security-alerts/cpujul2026.html","tags":["vendor-advisory","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46917","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-x5x7-pvpw-w5hv"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-46917","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:42887","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-41254","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-46917","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-46968","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-47010","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-47021","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-47027","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-47059","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-47063","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-60147","tags":["report"]},{"url":"https://bugzilla.redhat.com/2459420","tags":["report"]},{"url":"https://bugzilla.redhat.com/2502751","tags":["report"]},{"url":"https://bugzilla.redhat.com/2502782","tags":["report"]},{"url":"https://bugzilla.redhat.com/2502783","tags":["report"]},{"url":"https://bugzilla.redhat.com/2502784","tags":["report"]},{"url":"https://bugzilla.redhat.com/2502791","tags":["report"]},{"url":"https://bugzilla.redhat.com/2502792","tags":["report"]},{"url":"https://bugzilla.redhat.com/2502793","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503636","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-42887.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-42887.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:42895","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-42895.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-42895.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-42895.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:42899","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-42899.html","tags":["advisory"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-41254.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-46917.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-46968.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-47010.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-47021.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-47027.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-47059.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-47063.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2026-60147.html","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-42899.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-46917","tags":["advisory"]},{"url":"https://openjdk.org/groups/vulnerability/advisories/2026-07-21","tags":["web","report"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1785264990.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46968","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47010","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47021","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47027","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47057","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47058","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47059","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47063","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-60147","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1785324019.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33416","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41254","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1785328191.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1785331296.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66293","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22003","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22007","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22013","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22016","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22018","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22021","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22695","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22801","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23865","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25646","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33636","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34268","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34282","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1785332252.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1785494509.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1786485204.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1786485878.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1786526104.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-46917","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0395.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=36125","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2026:42889","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:55782","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:42897","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:55788","tags":["web"]},{"url":"https://www.oracle.com/security-alerts/cpujul2026.html#AppendixJAVA","tags":["web"]},{"url":"https://www.oracle.com/security-alerts/cspuaug2026.html#AppendixJAVA","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3750","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-21925","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-21932","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-21933","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-21945","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-60589","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61308","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70907","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3751","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3752","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-53057","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-53066","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3753","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3754","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3818","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-28162","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61748","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22008","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22184","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22693","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-26740","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27171","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:42880","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2459420","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2502751","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2502782","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2502783","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2502784","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2502791","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2502792","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2502793","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2502794","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2502795","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503636","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42880.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-41254","tags":["advisory"]},{"url":"https://abhinavagarwal07.github.io/posts/lcms2-cubesize-overflow/","tags":["article"]},{"url":"https://github.com/mm2/Little-CMS/commit/da6110b1d14abc394633a388209abd5ebedd7ab0","tags":["article"]},{"url":"https://github.com/mm2/Little-CMS/commit/e0641b1828d0a1af5ecb1b11fe22f24fceefd4bc","tags":["article"]},{"url":"https://github.com/mm2/Little-CMS/security/advisories/GHSA-4xp6-rcgg-m9qq","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2026/04/17/16","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-46917","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-46968","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47010","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47021","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47027","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-47057","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47057","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-47058","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47058","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47059","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47063","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-60147","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42887.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42895.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42899.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:46808","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_46808.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:50281","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50281.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:50525","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50525.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:52834","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_52834.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:52948","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503988","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503992","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_52948.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16243","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16243","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16243","tags":["advisory"]},{"url":"https://github.com/eclipse-omr/omr/pull/8348","tags":["article"]},{"url":"https://github.com/eclipse-omr/omr/pull/8349","tags":["article"]},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/195","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16439","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16439","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16439","tags":["advisory"]},{"url":"https://github.com/eclipse-openj9/openj9/pull/24394","tags":["article"]},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/192","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16441","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16441","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16441","tags":["advisory"]},{"url":"https://github.com/eclipse-openj9/openj9/pull/24396","tags":["article"]},{"url":"https://github.com/eclipse-openj9/openj9/security/advisories/GHSA-hcfc-9hjx-2q7f","tags":["article"]},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/194","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2026:42887","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:42899","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622944-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1264994","tags":["report"]},{"url":"https://bugzilla.suse.com/1272223","tags":["report"]},{"url":"https://bugzilla.suse.com/1272224","tags":["report"]},{"url":"https://bugzilla.suse.com/1272225","tags":["report"]},{"url":"https://bugzilla.suse.com/1272227","tags":["report"]},{"url":"https://bugzilla.suse.com/1272228","tags":["report"]},{"url":"https://bugzilla.suse.com/1272235","tags":["report"]},{"url":"https://bugzilla.suse.com/1272236","tags":["report"]},{"url":"https://bugzilla.suse.com/1272237","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46917","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-60147","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622953-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263284-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1267355","tags":["report"]},{"url":"https://bugzilla.suse.com/1272233","tags":["report"]},{"url":"https://bugzilla.suse.com/1272234","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47057","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47058","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263331-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1264398","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263332-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1264397","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263406-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1264396","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263453-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-46917","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8674-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8676-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8677-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8681-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8689-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8693-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8694-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8695-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-41254","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-46968","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-47010","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-47021","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-47027","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-47057","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-47058","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-47059","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-47063","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-60147","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-46917","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2026-07-21T21:32:47.601Z","modified":"2026-07-23T15:19:18.407Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T13:47:06.353366Z"}],"euvd":[{"id":"EUVD-2026-46459","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2026-07-21T21:32:47Z","modified":"2026-07-23T15:19:18Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T18:19:43.108781Z"}],"ghsa":[{"id":"GHSA-x5x7-pvpw-w5hv","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2026-07-22T00:31:11Z","modified":"2026-07-23T18:30:58Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T15:09:43.143268Z"}],"nvd":[{"id":"CVE-2026-46917","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2026-07-21T22:17:01.81Z","modified":"2026-08-03T18:55:54.35Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:12:31.394335Z"}],"osv":[{"id":"ALPINE-CVE-2026-46917","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2026-07-21T22:17:01.81Z","modified":"2026-11-03T06:32:56.418971061Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-03T07:16:26.770911Z"},{"id":"BELL-CVE-2026-46917","status":"published","published":"2026-07-23T06:03:33.94633Z","modified":"2026-08-04T07:15:06.683105697Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:24.391068Z"},{"id":"DEBIAN-CVE-2026-46917","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2026-07-21T22:17:01.81Z","modified":"2026-11-02T22:00:08.753287851Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-03T00:03:07.015763Z"},{"id":"OESA-2026-3750","title":"openjdk-17 security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2026-21925)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N).(CVE-2026-21932)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).(CVE-2026-21933)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-21945)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 2.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2026-22007)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).(CVE-2026-22013)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).(CVE-2026-22016)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-22018)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-22021)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 2.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2026-34268)\n\nA vulnerability exists in the Networking component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. This easily exploitable vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise the affected products. Successful attacks can result in an unauthorized ability to cause a hang or frequently repeatable crash (complete Denial of Service) of Oracle Java SE, Oracle GraalVM for JDK, or Oracle GraalVM Enterprise Edition. This vulnerability can be exploited by using APIs in the specified component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score is 7.5 (Availability impacts).(CVE-2026-34282)\n\nLittle CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.(CVE-2026-41254)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-46917)\n\nVulnerability in Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2026-46968)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2026-47010)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-47021)\n\nVulnerability in Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-47027)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-47059)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2026-47063)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).(CVE-2026-60589)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).(CVE-2026-61308)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.(CVE-2026-70907)","status":"published","published":"2026-09-14T16:33:59Z","modified":"2026-09-13T16:45:49.421665902Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3751","title":"openjdk-17 security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2026-21925)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N).(CVE-2026-21932)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).(CVE-2026-21933)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-21945)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 2.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2026-22007)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).(CVE-2026-22013)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).(CVE-2026-22016)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-22018)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-22021)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 2.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2026-34268)\n\nA vulnerability exists in the Networking component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. This easily exploitable vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise the affected products. Successful attacks can result in an unauthorized ability to cause a hang or frequently repeatable crash (complete Denial of Service) of Oracle Java SE, Oracle GraalVM for JDK, or Oracle GraalVM Enterprise Edition. This vulnerability can be exploited by using APIs in the specified component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score is 7.5 (Availability impacts).(CVE-2026-34282)\n\nLittle CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.(CVE-2026-41254)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-46917)\n\nVulnerability in Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2026-46968)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2026-47010)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-47021)\n\nVulnerability in Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-47027)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-47059)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2026-47063)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).(CVE-2026-60589)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).(CVE-2026-61308)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.(CVE-2026-70907)","status":"published","published":"2026-09-14T16:33:59Z","modified":"2026-09-13T16:45:48.872223662Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3752","title":"openjdk-17 security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data.(CVE-2025-53057)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and  21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).(CVE-2025-53066)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2026-21925)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N).(CVE-2026-21932)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).(CVE-2026-21933)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-21945)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 2.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2026-22007)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).(CVE-2026-22013)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).(CVE-2026-22016)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-22018)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-22021)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 2.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2026-34268)\n\nA vulnerability exists in the Networking component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. This easily exploitable vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise the affected products. Successful attacks can result in an unauthorized ability to cause a hang or frequently repeatable crash (complete Denial of Service) of Oracle Java SE, Oracle GraalVM for JDK, or Oracle GraalVM Enterprise Edition. This vulnerability can be exploited by using APIs in the specified component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score is 7.5 (Availability impacts).(CVE-2026-34282)\n\nLittle CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.(CVE-2026-41254)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-46917)\n\nVulnerability in Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2026-46968)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2026-47010)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-47021)\n\nVulnerability in Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-47027)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-47059)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2026-47063)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).(CVE-2026-60589)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).(CVE-2026-61308)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.(CVE-2026-70907)","status":"published","published":"2026-09-14T16:34:00Z","modified":"2026-09-13T16:45:50.263764811Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3753","title":"openjdk-17 security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2026-21925)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N).(CVE-2026-21932)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).(CVE-2026-21933)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-21945)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 2.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2026-22007)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).(CVE-2026-22013)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).(CVE-2026-22016)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-22018)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-22021)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 2.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2026-34268)\n\nA vulnerability exists in the Networking component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. This easily exploitable vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise the affected products. Successful attacks can result in an unauthorized ability to cause a hang or frequently repeatable crash (complete Denial of Service) of Oracle Java SE, Oracle GraalVM for JDK, or Oracle GraalVM Enterprise Edition. This vulnerability can be exploited by using APIs in the specified component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score is 7.5 (Availability impacts).(CVE-2026-34282)\n\nLittle CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.(CVE-2026-41254)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-46917)\n\nVulnerability in Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2026-46968)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2026-47010)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-47021)\n\nVulnerability in Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-47027)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-47059)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2026-47063)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).(CVE-2026-60589)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).(CVE-2026-61308)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.(CVE-2026-70907)","status":"published","published":"2026-09-14T16:34:00Z","modified":"2026-09-13T16:45:48.813755375Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3754","title":"openjdk-17 security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2026-21925)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N).(CVE-2026-21932)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).(CVE-2026-21933)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-21945)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 2.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2026-22007)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).(CVE-2026-22013)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).(CVE-2026-22016)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-22018)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-22021)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 2.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2026-34268)\n\nA vulnerability exists in the Networking component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. This easily exploitable vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise the affected products. Successful attacks can result in an unauthorized ability to cause a hang or frequently repeatable crash (complete Denial of Service) of Oracle Java SE, Oracle GraalVM for JDK, or Oracle GraalVM Enterprise Edition. This vulnerability can be exploited by using APIs in the specified component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score is 7.5 (Availability impacts).(CVE-2026-34282)\n\nLittle CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.(CVE-2026-41254)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-46917)\n\nVulnerability in Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2026-46968)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2026-47010)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-47021)\n\nVulnerability in Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-47027)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-47059)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2026-47063)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).(CVE-2026-60589)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).(CVE-2026-61308)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.(CVE-2026-70907)","status":"published","published":"2026-09-14T16:34:01Z","modified":"2026-09-13T16:45:48.819443927Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3818","title":"openjdk-11 security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\n\nBuffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (ASan), the program leaks memory in various locations, eventually leading to high memory usage and causing the program to become unresponsive(CVE-2025-28162)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data.(CVE-2025-53057)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and  21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).(CVE-2025-53066)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 21.0.8 and  25; Oracle GraalVM for JDK: 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2025-61748)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2026-21925)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N).(CVE-2026-21932)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).(CVE-2026-21933)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-21945)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 2.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2026-22007)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 2.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2026-22007)\n\nVulnerability in Oracle Java SE (component: Libraries).   The supported version that is affected is Oracle Java SE: 25.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2026-22008)\n\nVulnerability in Oracle Java SE (component: Libraries).   The supported version that is affected is Oracle Java SE: 25.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2026-22008)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).(CVE-2026-22013)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).(CVE-2026-22016)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-22018)\n\nzlib versions up to and including 1.3.1.2 contain a global buffer overflow in the untgz utility. The vulnerability resides in the TGZfname() function, which copies an attacker-supplied archive name from the command-line argument (argv[]) into a fixed-size 1024-byte static global buffer using an unbounded strcpy() call without length validation. Supplying an archive name longer than 1024 bytes results in an out-of-bounds write that can lead to memory corruption, denial of service, and potentially code execution depending on compiler, build flags, architecture, and memory layout. The overflow occurs prior to any archive parsing or validation.(CVE-2026-22184)\n\nHarfBuzz is a text shaping engine. Prior to version 12.3.0, a null pointer dereference vulnerability exists in the SubtableUnicodesCache::create function located in src/hb-ot-cmap-table.hh. The function fails to check if hb_malloc returns NULL before using placement new to construct an object at the returned pointer address. When hb_malloc fails to allocate memory (which can occur in low-memory conditions or when using custom allocators that simulate allocation failures), it returns NULL. The code then attempts to call the constructor on this null pointer using placement new syntax, resulting in undefined behavior and a Segmentation Fault. This issue has been patched in version 12.3.0.(CVE-2026-22693)\n\nA buffer overflow vulnerability (CWE-120) exists in giflib version 5.2.2. The vulnerability originates from the EGifGCBToExtension function, which fails to validate that the size of the input buffer is less than the size of the output buffer when processing a specially crafted Graphics Control Extension (GCE) block. This leads to overwriting an existing allocated GCE block. A remote attacker can exploit this vulnerability to cause a denial of service (DoS) and potentially affect the confidentiality, integrity, and availability of the system. Proof-of-concept (PoC) code has been publicly disclosed on GitHub.(CVE-2026-26740)\n\nzlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.(CVE-2026-27171)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 2.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2026-34268)\n\nLittle CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.(CVE-2026-41254)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-46917)\n\nVulnerability in Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2026-46968)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2026-47010)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-47021)\n\nVulnerability in Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-47027)\n\nVulnerability in Oracle Java SE (component: Scripting).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf and  11.0.31. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-47057)\n\nVulnerability in Oracle Java SE (component: Scripting).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf and  11.0.31. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2026-47058)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2026-47059)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2026-47063)","status":"published","published":"2026-09-14T16:34:41Z","modified":"2026-09-13T16:57:26.968237018Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"RHSA-2026:42880","title":"Red Hat Security Advisory: Java 11 OpenJDK ELS Security Update","status":"published","published":"2026-07-23T10:14:15Z","modified":"2026-10-10T10:10:37Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:42887","title":"Red Hat Security Advisory: java-17-openjdk security update","status":"published","published":"2026-07-23T10:14:16Z","modified":"2026-10-10T10:10:38Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:42895","title":"Red Hat Security Advisory: java-21-openjdk security update","status":"published","published":"2026-07-23T10:14:17Z","modified":"2026-10-10T10:10:39Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:42899","title":"Red Hat Security Advisory: java-25-openjdk security update","status":"published","published":"2026-07-31T10:14:29Z","modified":"2026-10-10T10:10:39Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:46808","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-07-28T10:13:54Z","modified":"2026-10-10T10:11:27Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:50281","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-08-05T10:37:35Z","modified":"2026-10-10T10:12:40Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:50525","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-08-05T10:37:40Z","modified":"2026-10-10T10:12:44Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:52834","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-08-11T10:12:02Z","modified":"2026-10-10T10:13:17Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:52948","title":"Red Hat Security Advisory: java-21-ibm-semeru-certified-jdk security update","status":"published","published":"2026-08-11T10:12:06Z","modified":"2026-10-10T10:13:19Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RLSA-2026:42887","title":"Important: java-17-openjdk security update","description":"The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.\n\nSecurity Fix(es):\n\n* JDK: Enhance TLS certificate handling (CVE-2026-46968)\n\n* JDK: Improve DTLS handshaking (CVE-2026-46917)\n\n* JDK: Enhance JPEG handling (CVE-2026-47010)\n\n* JDK: Enhance XBM image support (CVE-2026-47021)\n\n* JDK: Enhance Jar file processing (CVE-2026-47027)\n\n* JDK: Improve certification checking (CVE-2026-60147)\n\n* JDK: Enhance AWT ImagingLib (CVE-2026-47059)\n\n* JDK: Enhance Jar handling (CVE-2026-47063)\n\n* JDK: Update LCMS to 2.19 (CVE-2026-41254)\n\nEnhancement(s):\n\n* For the last couple of years, OpenJDK has used a single build shared among multiple RPMs and a tarball available on the customer portal.  The single \"portable\" build has a release number ('p') and each RPM has its own release number ('r').  However, the RPM naming only showed the RPM release number, while the version output from the build showed the portable release number, making it unclear that they were different numbers.  From this release onwards, a release field of the form 'p.r' is always used for RPMs and the version output shows 'p'. (Rocky Linux-212474, Rocky Linux-212475, Rocky Linux-212476, Rocky Linux-212477, Rocky Linux-212478, Rocky Linux-212479, Rocky Linux-212480, Rocky Linux-212481)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-26T06:01:06.6678Z","modified":"2026-07-26T06:30:05.308270476Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:42899","title":"Important: java-25-openjdk security update","description":"The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit.\n\nSecurity Fix(es):\n\n* JDK: Enhance TLS certificate handling (CVE-2026-46968)\n\n* JDK: Improve DTLS handshaking (CVE-2026-46917)\n\n* JDK: Enhance JPEG handling (CVE-2026-47010)\n\n* JDK: Enhance XBM image support (CVE-2026-47021)\n\n* JDK: Enhance Jar file processing (CVE-2026-47027)\n\n* JDK: Improve certification checking (CVE-2026-60147)\n\n* JDK: Enhance AWT ImagingLib (CVE-2026-47059)\n\n* JDK: Enhance Jar handling (CVE-2026-47063)\n\n* JDK: Update LCMS to 2.19 (CVE-2026-41254)\n\nEnhancement(s):\n\n* For the last couple of years, OpenJDK has used a single build shared among multiple RPMs and a tarball available on the customer portal.  The single \"portable\" build has a release number ('p') and each RPM has its own release number ('r').  However, the RPM naming only showed the RPM release number, while the version output from the build showed the portable release number, making it unclear that they were different numbers.  From this release onwards, a release field of the form 'p.r' is always used for RPMs and the version output shows 'p'. (Rocky Linux-211046, Rocky Linux-211048)\n\nBug Fix(es):\n\n* The performance of the Math.pow function regressed between OpenJDK 8 and OpenJDK 11.  This was due to an absence of constant folding when applicable (for example, Math.pow(2,1) being replaced by 2).  This release reintroduces this optimization.  (Rocky Linux-211050, Rocky Linux-211052)\n* On Rocky Linux 9 systems, the alternatives list a JDK and architecture pair (for example, \"java-11-openjdk.x86_64\") followed by the path to the binary in brackets.  Rocky Linux 10 systems have a simpler format that just lists the path.  Because the OpenJDK 25 packages for Rocky Linux 9 were originally based on those from Rocky Linux 10, they used the simpler format.  With this release, the format for OpenJDK 25 packages on Rocky Linux 9 is updated to be closer to other JDKs on that platform. (Rocky Linux-212650)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-31T12:03:48.999773Z","modified":"2026-07-31T12:30:04.88732431Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"UBUNTU-CVE-2026-46917","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2026-07-21T22:17:00Z","modified":"2026-11-09T19:15:20.760000797Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-09T19:38:09.278998Z"},{"id":"ALSA-2026:42887","title":"Important: java-17-openjdk security update","description":"The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  \n\nSecurity Fix(es):  \n\n  * JDK: Enhance TLS certificate handling (CVE-2026-46968)\n  * JDK: Improve DTLS handshaking (CVE-2026-46917)\n  * JDK: Enhance JPEG handling (CVE-2026-47010)\n  * JDK: Enhance XBM image support (CVE-2026-47021)\n  * JDK: Enhance Jar file processing (CVE-2026-47027)\n  * JDK: Improve certification checking (CVE-2026-60147)\n  * JDK: Enhance AWT ImagingLib (CVE-2026-47059)\n  * JDK: Enhance Jar handling (CVE-2026-47063)\n  * JDK: Update LCMS to 2.19 (CVE-2026-41254)\n\n\nEnhancement(s):  \n\n  * For the last couple of years, OpenJDK has used a single build shared among multiple RPMs and a tarball available on the customer portal. The single \"portable\" build has a release number ('p') and each RPM has its own release number ('r'). However, the RPM naming only showed the RPM release number, while the version output from the build showed the portable release number, making it unclear that they were different numbers. From this release onwards, a release field of the form 'p.r' is always used for RPMs and the version output shows 'p'. (AlmaLinux-212474, AlmaLinux-212475, AlmaLinux-212476, AlmaLinux-212477, AlmaLinux-212478, AlmaLinux-212479, AlmaLinux-212480, AlmaLinux-212481)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-22T00:00:00Z","modified":"2026-10-29T11:15:04.969262385Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:42895","title":"Important: java-21-openjdk security update","description":"The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  \n\nSecurity Fix(es):  \n\n  * JDK: Enhance TLS certificate handling (CVE-2026-46968)\n  * JDK: Improve DTLS handshaking (CVE-2026-46917)\n  * JDK: Enhance JPEG handling (CVE-2026-47010)\n  * JDK: Enhance XBM image support (CVE-2026-47021)\n  * JDK: Enhance Jar file processing (CVE-2026-47027)\n  * JDK: Improve certification checking (CVE-2026-60147)\n  * JDK: Enhance AWT ImagingLib (CVE-2026-47059)\n  * JDK: Enhance Jar handling (CVE-2026-47063)\n  * JDK: Update LCMS to 2.19 (CVE-2026-41254)\n\n\nEnhancement(s):  \n\n  * For the last couple of years, OpenJDK has used a single build shared among multiple RPMs and a tarball available on the customer portal. The single \"portable\" build has a release number ('p') and each RPM has its own release number ('r'). However, the RPM naming only showed the RPM release number, while the version output from the build showed the portable release number, making it unclear that they were different numbers. From this release onwards, a release field of the form 'p.r' is always used for RPMs and the version output shows 'p'. (AlmaLinux-212337, AlmaLinux-212338, AlmaLinux-212339, AlmaLinux-212340, AlmaLinux-212342, AlmaLinux-212343)\n\n\nBug Fix(es):  \n\n  * In previous releases, the RPM did not correctly own the subdirectories used for documentation in /usr/share/doc and /usr/share/javadoc. This is fixed in this release, so these subdirectories will be removed when the package is uninstalled. (AlmaLinux-212353, AlmaLinux-212359, AlmaLinux-212360, AlmaLinux-212361)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-22T00:00:00Z","modified":"2026-10-29T11:32:02.194398517Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:42899","title":"Important: java-25-openjdk security update","description":"The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit.  \n\nSecurity Fix(es):  \n\n  * JDK: Enhance TLS certificate handling (CVE-2026-46968)\n  * JDK: Improve DTLS handshaking (CVE-2026-46917)\n  * JDK: Enhance JPEG handling (CVE-2026-47010)\n  * JDK: Enhance XBM image support (CVE-2026-47021)\n  * JDK: Enhance Jar file processing (CVE-2026-47027)\n  * JDK: Improve certification checking (CVE-2026-60147)\n  * JDK: Enhance AWT ImagingLib (CVE-2026-47059)\n  * JDK: Enhance Jar handling (CVE-2026-47063)\n  * JDK: Update LCMS to 2.19 (CVE-2026-41254)\n\n\nEnhancement(s):  \n\n  * For the last couple of years, OpenJDK has used a single build shared among multiple RPMs and a tarball available on the customer portal. The single \"portable\" build has a release number ('p') and each RPM has its own release number ('r'). However, the RPM naming only showed the RPM release number, while the version output from the build showed the portable release number, making it unclear that they were different numbers. From this release onwards, a release field of the form 'p.r' is always used for RPMs and the version output shows 'p'. (AlmaLinux-211046, AlmaLinux-211048)\n\n\nBug Fix(es):  \n\n  * The performance of the Math.pow function regressed between OpenJDK 8 and OpenJDK 11. This was due to an absence of constant folding when applicable (for example, Math.pow(2,1) being replaced by 2). This release reintroduces this optimization. (AlmaLinux-211050, AlmaLinux-211052)\n  * On AlmaLinux 9 systems, the alternatives list a JDK and architecture pair (for example, \"java-11-openjdk.x86_64\") followed by the path to the binary in brackets. AlmaLinux 10 systems have a simpler format that just lists the path. Because the OpenJDK 25 packages for AlmaLinux 9 were originally based on those from AlmaLinux 10, they used the simpler format. With this release, the format for OpenJDK 25 packages on AlmaLinux 9 is updated to be closer to other JDKs on that platform. (AlmaLinux-212650)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-22T00:00:00Z","modified":"2026-10-29T11:32:35.879822671Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"BIT-java-2026-46917","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2026-08-17T05:48:04.064Z","modified":"2026-09-08T08:47:57.600149071Z","updated_at":"2026-11-02T15:28:31.42203Z"},{"id":"BIT-java-min-2026-46917","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2026-08-17T05:48:04.925Z","modified":"2026-09-08T08:47:56.443979517Z","updated_at":"2026-11-02T15:28:31.42203Z"},{"id":"BIT-jre-2026-46917","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","status":"published","published":"2026-08-17T05:48:17.683Z","modified":"2026-09-08T08:48:05.950782515Z","updated_at":"2026-11-02T15:28:31.782692Z"},{"id":"CLSA-2026-1785264990","title":"java-11-openjdk: Fix of 10 CVEs","description":"- Upgrade to openjdk-11.0.32+9 (GA). The following CVEs were fixed:\n- CVE-2026-47063: enhance jar handling\n- CVE-2026-46917: improve DTLS handshaking\n- CVE-2026-47027: enhance jar file processing\n- CVE-2026-47021: enhance XBM image support\n- CVE-2026-60147: improve certification checking\n- CVE-2026-46968: enhance TLS certificate handling\n- CVE-2026-47010: enhance JPEG handling\n- CVE-2026-47059: enhance AWT ImagingLib\n- CVE-2026-47057: improve Nashorn index handling\n- CVE-2026-47058: enhance DataView implementation\n- Rebase FIPS patch from the rh-openjdk fips branch (06df8f9bd4) for 11.0.32","status":"published","published":"2026-07-28T18:56:50Z","modified":"2026-10-26T09:43:19.127423211Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1785324019","title":"java-17-openjdk: Fix of 10 CVEs","description":"- Update to jdk-17.0.20+8 (GA)\n- CVE-2026-41254: fix integer overflow in the bundled Little CMS CubeSize\n  function that could lead to information disclosure or denial of service\n  when processing crafted colour profiles (bundled LCMS updated to 2.19.1)\n- CVE-2026-46917: improve DTLS handshaking\n- CVE-2026-46968: enhance TLS certificate handling\n- CVE-2026-47010: enhance JPEG handling\n- CVE-2026-47021: enhance XBM image support\n- CVE-2026-47027: enhance Jar file processing\n- CVE-2026-47059: enhance AWT ImagingLib\n- CVE-2026-47063: enhance Jar handling\n- CVE-2026-60147: improve certification checking","status":"published","published":"2026-08-27T10:59:22Z","modified":"2026-10-26T09:30:30.202337564Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1785328191","title":"java-21-openjdk: Fix of 10 CVEs","description":"- Update to jdk-21.0.12+8 (GA)\n- CVE-2026-41254: Little CMS integer overflow in CubeSize (bundled LCMS updated to 2.19.1)\n- CVE-2026-46917: Improve DTLS handshaking\n- CVE-2026-46968: Enhance TLS certificate handling\n- CVE-2026-47010: Enhance JPEG handling\n- CVE-2026-47021: Enhance XBM image support\n- CVE-2026-47027: Enhance Jar file processing\n- CVE-2026-47059: Enhance AWT ImagingLib\n- CVE-2026-47063: Enhance Jar handling\n- CVE-2026-60147: Improve certification checking","status":"published","published":"2026-07-30T09:57:17Z","modified":"2026-10-26T09:31:23.345535641Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1785331296","title":"java-11-openjdk: Fix of 25 CVEs","description":"- Upgrade to openjdk-11.0.32+9 (GA). The following CVEs were fixed:\n- CVE-2026-47063: enhance jar handling\n- CVE-2026-46917: improve DTLS handshaking\n- CVE-2026-47027: enhance jar file processing\n- CVE-2026-47021: enhance XBM image support\n- CVE-2026-60147: improve certification checking\n- CVE-2026-46968: enhance TLS certificate handling\n- CVE-2026-47010: enhance JPEG handling\n- CVE-2026-47059: enhance AWT ImagingLib\n- CVE-2026-47057: improve Nashorn index handling\n- CVE-2026-47058: enhance DataView implementation\n- Rebase FIPS patch from the rh-openjdk fips branch (06df8f9bd4) for 11.0.32","status":"published","published":"2026-08-19T19:05:50Z","modified":"2026-10-26T09:43:44.150879561Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1785332252","title":"java-11-openjdk: Fix of 25 CVEs","description":"- Upgrade to openjdk-11.0.32+9 (GA). The following CVEs were fixed:\n- CVE-2026-47063: enhance jar handling\n- CVE-2026-46917: improve DTLS handshaking\n- CVE-2026-47027: enhance jar file processing\n- CVE-2026-47021: enhance XBM image support\n- CVE-2026-60147: improve certification checking\n- CVE-2026-46968: enhance TLS certificate handling\n- CVE-2026-47010: enhance JPEG handling\n- CVE-2026-47059: enhance AWT ImagingLib\n- CVE-2026-47057: improve Nashorn index handling\n- CVE-2026-47058: enhance DataView implementation\n- Rebase FIPS patch from the rh-openjdk fips branch (06df8f9bd4) for 11.0.32","status":"published","published":"2026-08-25T13:26:41Z","modified":"2026-10-26T09:43:15.928287619Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1785494509","title":"java-17-openjdk: Fix of 9 CVEs","description":"- Update to jdk-17.0.20+8 (GA)\n- CVE-2026-41254: Little CMS integer overflow in CubeSize (bundled LCMS updated to 2.19.1)\n- CVE-2026-46917: Improve DTLS handshaking\n- CVE-2026-46968: Enhance TLS certificate handling\n- CVE-2026-47010: Enhance JPEG handling\n- CVE-2026-47021: Enhance XBM image support\n- CVE-2026-47027: Enhance Jar file processing\n- CVE-2026-47059: Enhance AWT ImagingLib\n- CVE-2026-47063: Enhance Jar handling\n- CVE-2026-60147: Improve certification checking","status":"published","published":"2026-07-31T10:42:07Z","modified":"2026-10-26T09:31:23.633083163Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"CLSA-2026-1786485204","title":"Fix CVE(s): CVE-2026-47057, CVE-2026-47058, CVE-2026-47063","description":"   * OpenJDK 8u502 release, build 7 (Oracle July 2026 CPU).\n     Release notes:\n     https://openjdk.org/groups/vulnerability/advisories/2026-07-21\n     - Security fixes (8u502):\n       + CVE-2026-41254: 2D integer overflow in Little CMS CubeSize\n       + CVE-2026-46968: JSSE TLS certificate handling\n       + CVE-2026-47010: ImageIO JPEG handling\n       + CVE-2026-47021: 2D XBM image support\n       + CVE-2026-47027: Security Jar file processing\n       + CVE-2026-47057: Scripting Nashorn index handling\n       + CVE-2026-47058: Scripting DataView implementation\n       + CVE-2026-47059: 2D AWT ImagingLib\n       + CVE-2026-47063: Security Jar handling\n       + CVE-2026-60147: Security certification checking\n     (CVE-2026-46917 from the same advisory does not affect the 8u train\n      per the OpenJDK 2026-07-21 risk matrix.)\n   * debian/rules: bump gh_tag to jdk8u502-ga, version_dash_buildnr to\n     502-b07, gh_tag_aarch32 to jdk8u502-b06-aarch32-20260710.\n   * Refresh orig tarball from Ubuntu archive\n     (openjdk-8_8u502-ga~us1.orig.tar.gz,\n      sha1 553d02f135b9c68cf95a2daf0e5db367e4e0569b,\n      size 67975803 bytes; source: archive.ubuntu.com openjdk-8 8u502-ga~us1).\n   * Refresh Ubuntu quilt patches for u502 context:\n     - zero-sh.diff (upstream added a RISCV branch to os::dll_load; the\n       ZERO_SH branch and #error list are re-anchored after it)\n     - gcc14.diff (upstream adopted the UINT8** freeArray signature in\n       imageioJPEG.c, so that hunk is dropped; parse_manifest.c retained)\n     All 48 quilt patches apply cleanly (0 rejects).\n   * Ref: ELSCVE-167684, ELSCVE-167634, ELSCVE-167656","status":"published","published":"2026-08-11T21:53:38Z","modified":"2026-10-26T09:43:57.050924779Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"CLSA-2026-1786485878","title":"Fix CVE(s): CVE-2026-25646, CVE-2026-47057, CVE-2026-47058, CVE-2026-47063","description":"   * OpenJDK 11.0.32 release, build 9.\n     - CVE-2026-41254: 2D component, fix integer overflow in Little CMS CubeSize\n     - CVE-2026-46917: JSSE component, improve DTLS handshaking\n     - CVE-2026-46968: JSSE component, enhance TLS certificate handling\n     - CVE-2026-47010: ImageIO component, enhance JPEG handling\n     - CVE-2026-47021: 2D component, enhance XBM image support\n     - CVE-2026-47027: Security component, enhance Jar file processing\n     - CVE-2026-47057: Scripting component, improve Nashorn index handling\n     - CVE-2026-47058: Scripting component, enhance DataView implementation\n     - CVE-2026-47059: 2D component, enhance AWT ImagingLib\n     - CVE-2026-47063: Security component, enhance Jar handling\n     - CVE-2026-60147: Security component, improve certification checking\n     - OpenJDK vulnerability advisory:\n       https://openjdk.org/groups/vulnerability/advisories/2026-07-21\n   * Refresh debian/patches/libpcsclite-dlopen.diff against the upstream\n     macOS Big Sur dynamic linker cache changes in PlatformPCSC.java.","status":"published","published":"2026-10-21T07:00:47Z","modified":"2026-10-26T09:43:40.826720584Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"CLSA-2026-1786526104","title":"Fix CVE(s): CVE-2026-47057, CVE-2026-47058, CVE-2026-47063","description":"   * OpenJDK 11.0.32 release, build 9.\n     - CVE-2026-41254: 2D component\n     - CVE-2026-46917: JSSE component\n     - CVE-2026-46968: JSSE component\n     - CVE-2026-47010: ImageIO component\n     - CVE-2026-47021: 2D component\n     - CVE-2026-47027: Security component\n     - CVE-2026-47057: Scripting component, improve Nashorn index handling\n     - CVE-2026-47058: Scripting component, enhance DataView implementation\n     - CVE-2026-47059: 2D component\n     - CVE-2026-47063: Security component, enhance Jar handling\n     - CVE-2026-60147: Security component\n     - OpenJDK vulnerability advisory:\n       https://openjdk.org/groups/vulnerability/advisories/2026-07-21\n   * d/p/libpcsclite-dlopen.diff: Refresh patch.","status":"published","published":"2026-08-12T09:15:19Z","modified":"2026-10-26T09:43:35.144844437Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"MGASA-2026-0395","title":"Updated java-21-openjdk \u0026 java-17-openjdk packages fix security vulnerabilities","description":"Enhance TLS certificate handling. (CVE-2026-46968)\nImprove DTLS handshaking. (CVE-2026-46917)\nEnhance JPEG handling. (CVE-2026-47010)\nEnhance XBM image support. (CVE-2026-47021)\nEnhance Jar file processing. (CVE-2026-47027)\nImprove certification checking. (CVE-2026-60147)\nEnhance AWT ImagingLib. (CVE-2026-47059)\nEnhance Jar handling. (CVE-2026-47063)\nImprove Resource Resolving. (CVE-2026-60589)\nEnhance HTTP Connections. (CVE-2026-61308)\nEnhance TLS server. (CVE-2026-70907)\n","status":"published","published":"2026-09-12T03:59:30Z","modified":"2026-09-12T04:12:22.28421601Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:11335-1","title":"java-11-openjdk-11.0.32.0-1.1 on GA media","description":"These are all security issues fixed in the java-11-openjdk-11.0.32.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-22T00:00:00Z","modified":"2026-07-23T09:45:08.255251772Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:11336-1","title":"java-17-openjdk-17.0.20.0-1.1 on GA media","description":"These are all security issues fixed in the java-17-openjdk-17.0.20.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-22T00:00:00Z","modified":"2026-07-23T09:45:08.238339981Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:11337-1","title":"java-26-openjdk-26.0.2.0-1.1 on GA media","description":"These are all security issues fixed in the java-26-openjdk-26.0.2.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-22T00:00:00Z","modified":"2026-07-23T09:45:08.310184791Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:11362-1","title":"java-21-openjdk-21.0.12.0-1.1 on GA media","description":"These are all security issues fixed in the java-21-openjdk-21.0.12.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-24T00:00:00Z","modified":"2026-07-25T18:24:56.632510159Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:11363-1","title":"java-25-openjdk-25.0.4.0-1.1 on GA media","description":"These are all security issues fixed in the java-25-openjdk-25.0.4.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-24T00:00:00Z","modified":"2026-07-25T18:24:56.584072788Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:21440-1","title":"Security update for java-17-openjdk","description":"This update for java-17-openjdk fixes the following issues\n\n- Upgrade to upstream tag jdk-17.0.20+8 (July 2026 CPU)\n- CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994).\n- CVE-2026-46917: partial denial of service via TLS (bsc#1272223).\n- CVE-2026-46968: unauthorized creation, deletion or modification access to critical data (bsc#1272224).\n- CVE-2026-47010: unauthorized update, insert or delete access (bsc#1272225).\n- CVE-2026-47021: partial denial of service via multiple network protocols (bsc#1272227).\n- CVE-2026-47027: partial denial of service via multiple network protocols (bsc#1272228).\n- CVE-2026-47059: partial denial of service via multiple network protocols (bsc#1272235).\n- CVE-2026-47063: unauthorized creation, deletion or modification access to critical data (bsc#1272236).\n- CVE-2026-60147: unauthorized update, insert or delete access (bsc#1272237).\n","status":"published","published":"2026-07-24T08:43:19Z","modified":"2026-07-26T18:24:09.31222039Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"openSUSE-SU-2026:21467-1","title":"Security update for java-25-openjdk","description":"This update for java-25-openjdk fixes the following issues:\n\n- CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994).\n- CVE-2026-46917: partial denial of service via TLS (bsc#1272223).\n- CVE-2026-46968: unauthorized creation, deletion or modification access to critical data (bsc#1272224).\n- CVE-2026-47010: unauthorized update, insert or delete access (bsc#1272225).\n- CVE-2026-47021: partial denial of service via multiple network protocols (bsc#1272227).\n- CVE-2026-47027: partial denial of service via multiple network protocols (bsc#1272228).\n- CVE-2026-47059: partial denial of service via multiple network protocols (bsc#1272235).\n- CVE-2026-47063: unauthorized creation, deletion or modification access to critical data (bsc#1272236).\n- CVE-2026-60147: unauthorized update, insert or delete access (bsc#1272237).\n\nChanges for java-25-openjdk:\n\n- Update to upstream tag jdk-25.0.4+7 (July 2026 CPU):\n\n + JDK-7184899: Test sun/java2d/X11SurfaceData/\n /SharedMemoryPixmapsTest/SharedMemoryPixmapsTest.sh fail\n + JDK-8015444: java/awt/Focus/KeyStrokeTest.java sometimes\n fails\n + JDK-8064922: [macos] Test javax/swing/JTabbedPane/4624207/\n /bug4624207.java fails\n + JDK-8068293: [TEST_BUG] Test closed/com/sun/java/swing/plaf/\n /motif/InternalFrame/4150591/bug4150591.java fails with\n GTKLookAndFeel\n + JDK-8068310: [TEST_BUG] Test javax/swing/JColorChooser/\n /Test4234761.java fails with GTKL\u0026F\n + JDK-8144124: [macosx] The tabs can't be aligned when we\n pressing the key of 'R','B','L','C' or 'T'.\n + JDK-8203004: UnixMultiResolutionSplashTest.java fails on\n Ubuntu16.04\n + JDK-8213530: Test java/awt/Modal/ToFront/\n /DialogToFrontModeless1Test.java fails on Linux\n + JDK-8221451: PIT: sun/java2d/X11SurfaceData/\n /SharedMemoryPixmapsTest/SharedMemoryPixmapsTest.sh fails\n + JDK-8225787: java/awt/Window/GetScreenLocation/\n /GetScreenLocationTest.java fails on Ubuntu\n + JDK-8241066: Shenandoah: fix or cleanup SH::do_full_collection\n + JDK-8261743: Shenandoah: enable String deduplication with\n compact heuristics\n + JDK-8264851: Shenandoah: Rework control loop mechanics to use\n timed waits\n + JDK-8278102: containers/docker/TestJcmd.java failed with\n \"RuntimeException: Could not find specified process\"\n + JDK-8279196: Test: jdk/jfr/event/gc/stacktrace/\n /TestG1OldAllocationPendingStackTrace.java timed out\n + JDK-8297191: [macos] Printing a page range with starting\n page \u003e 1 results in missing pages\n + JDK-8298823: [macos] java/awt/Mouse/EnterExitEvents/\n /DragWindowTest.java continues to fail with \"No MouseReleased\n event on label!\"\n + JDK-8319326: GC: Make TestParallelRefProc use\n createTestJavaProcessBuilder\n + JDK-8319540: GC: Make TestSelectDefaultGC use\n + JDK-8321303: Intermittent open/test/jdk/java/awt/\n /KeyboardFocusmanager/ConsumeNextMnemonicKeyTypedTest/\n /ConsumeNextMnemonicKeyTypedTest.java failure on Linux\n + JDK-8321687: Test vmTestbase/nsk/jvmti/scenarios/contention/\n /TC03/tc03t002/TestDescription.java failed:\n JVMTI_ERROR_THREAD_NOT_ALIVE\n + JDK-8323792: ThreadSnapshot::initialize can cause assert in\n Thread::check_for_dangling_thread_pointer (possibility of\n dangling Thread pointer)\n + JDK-8325482: Test that distinct seeds produce distinct traces\n for compiler stress flags\n + JDK-8335355: Shenandoah: Fix race condition in gc/shenandoah/\n /mxbeans/TestPauseNotifications.java\n + JDK-8339526: C2: store incorrectly removed for clone()\n transformed to series of loads/stores\n + JDK-8340182: Java HttpClient does not follow default retry\n limit of 3 retries\n + JDK-8341735: Rewrite the build/AbsPathsInImage.java test to\n not load the entire file at once\n + JDK-8344345: test/hotspot/gtest/x86/x86-asmtest.py has\n trailing whitespaces\n + JDK-8345631: TestRegionSamplingLogging.java\n #generational-rotation intermittent fails\n + JDK-8347167: Reduce allocation in\n com.sun.net.httpserver.Headers::normalize\n + JDK-8347938: Add Support for the Latest ML-KEM and ML-DSA\n Private Key Encodings\n + JDK-8351010: Test java/io/File/GetXSpace.java failed: / usable\n space 56380809216 \u003e free space 14912244940\n + JDK-8352914: Shenandoah: Change definition of\n ShenandoahSharedValue to int32_t to leverage platform atomics\n + JDK-8353115: GenShen: mixed evacuation candidate regions need\n accurate live_data\n + JDK-8354650: [PPC64] Try to reduce register definitions\n + JDK-8355339: Test java/io/File/GetCanonicalPath.java failed:\n The specified network name is no longer available\n + JDK-8357086: os::xxx functions returning memory size should\n return size_t\n + JDK-8358600: Template-Framework Library: Template for\n TestFramework test class\n + JDK-8358772: Template-Framework Library: Primitive Types\n + JDK-8359083: Test jdkCheckHtml.java should report\n SkippedException rather than report fails when miss tidy\n + JDK-8359223: HttpClient: Remove leftovers from the\n SecurityManager cleanup\n + JDK-8359412: Template-Framework Library: Operations and\n Expressions\n + JDK-8359433: The final modifier on Windows L\u0026F internal UI\n classes prevents extending them in apps\n + JDK-8361339: Test gc/shenandoah/TestLargeObjectAlignment.java\n #generational fails on macOS aarch64 with OOM: Java heap space\n + JDK-8361606: ConsumeNextMnemonicKeyTypedTest.java fails on\n Windows: character typed with VK_A: a\n + JDK-8361699: C2: assert(can_reduce_phi(n-\u003eas_Phi())) failed:\n Sanity: previous reducible Phi is no longer reducible before\n SUT\n + JDK-8361726: Shenandoah: More detailed evacuation\n instrumentation\n + JDK-8362428: Update IANA Language Subtag Registry to Version\n 2025-08-25\n + JDK-8363943: ARM32: Represent Registers as values\n + JDK-8363949: Incorrect jtreg header in\n MonitorWithDeadObjectTest.java\n + JDK-8363986: Heap region in CDS archive is not at\n deterministic address\n + JDK-8364315: Remove unused xml files from test/jaxp/javax/xml/\n /jaxp/functional/javax/xml/transform/xmlfiles\n + JDK-8364657: Crash for SecureRandom.generateSeed(0) on Windows\n x86-64\n + JDK-8364927: Add @requires annotation to\n TestReclaimStringsLeaksMemory.java\n + JDK-8365057: Add support for java.util.concurrent lock\n information to Thread.dump_to_file\n + JDK-8365379: SU3.applyInsets may produce wrong results\n + JDK-8365423: [macos26] java/awt/MenuBar/8007006/\n /bug8007006.java fails on macOS 26\n + JDK-8365424: [macos26] java/awt/Frame/DisposeTest.java fails\n on macOS 26\n + JDK-8365623: test/jdk/sun/security/pkcs11/tls/ tests skipped\n without skip exception\n + JDK-8365625: Can't change accelerator colors in Windows L\u0026F\n + JDK-8365792: GenShen: assertion \"Generations aren't\n reconciled\"\n + JDK-8366692: Several gc/shenandoah tests timed out\n + JDK-8366695: Test sun/jvmstat/monitor/MonitoredVm/\n /MonitorVmStartTerminate.java timed out\n + JDK-8366852: java/awt/Choice/ChoiceMouseWheelTest/\n /ChoiceMouseWheelTest.java test is failing\n + JDK-8367096: jdk/open/test/jdk/sun/security/pkcs11/ rsa, ec,\n config, secmod and sslecc tests are skipping but showing as\n pass\n + JDK-8367450: Shenandoah: Log the composition of the collection\n set\n + JDK-8367451: GenShen: Remove the option to compute age census\n during evacuation\n + JDK-8367473: Shenandoah: Make the detailed evacuation metrics\n a runtime diagnostic option\n + JDK-8367485: os::physical_memory is broken in 32-bit JVMs when\n running on 64-bit OSes\n + JDK-8367531: Template Framework: use scopes and tokens instead\n of misbehaving immediate-return-queries\n + JDK-8367646: [GenShen] Control thread may overwrite gc\n cancellation cause set by mutator\n + JDK-8367708: GenShen: Reduce total evacuation burden\n + JDK-8367709: GenShen: Dirty cards for objects that get\n promoted by safepoint that intervenes between allocation and\n stores\n + JDK-8367722: [GenShen] ShenandoahEvacuationStats is always\n empty\n + JDK-8367949: JFR: MethodTrace double-counts methods that catch\n their own exceptions\n + JDK-8368001: java/text/Format/NumberFormat/\n /NumberRoundTrip.java timed out\n + JDK-8368015: Shenandoah: fix error in computation of average\n allocation rate\n + JDK-8368041: Enhance TLS certificate handling\n + JDK-8368159: Significant performance overhead when started\n with jdwp agent and unattached debugger\n + JDK-8368181: ProblemList java/awt/Dialog/ModalExcludedTest/\n /ModalExcludedTest.java\n + JDK-8368307: Shenandoah: get_next_bit_impl should special case\n weak and strong mark bits\n + JDK-8368499: GenShen: Do not collect age census during evac\n when adaptive tenuring is disabled\n + JDK-8368501: Shenandoah: GC progress evaluation does not use\n generation\n + JDK-8368524: Tests are skipped and shown as passed in test/\n /jdk/sun/security/pkcs11/Cipher/KeyWrap\n + JDK-8368681: Shenandoah: Add documentation comments for\n ShenandoahAllocationRate\n + JDK-8369128: ProblemList jdk/jfr/event/profiling/\n /TestCPUTimeSampleQueueAutoSizes.java in Xcomp configs\n + JDK-8369132: Disable vmTestbase/gc/vector/CircularListLow and\n LinearListLow with SerialGC\n + JDK-8369133: Disable gc/g1/TestShrinkAuxiliaryDataRunner.java\n with UseLargePages option\n + JDK-8369251: Opensource few tests\n + JDK-8369561: sun/java2d/OpenGL/DrawBitmaskImage.java#id0:\n Incorrect color for first pixel (actual=ff000000)\n + JDK-8369683: Exclude runtime/Monitor/\n /MonitorWithDeadObjectTest.java#DumpThreadsBeforeDetach on\n Alpine Linux debug\n + JDK-8369736: Add management interface for AOT cache creation\n + JDK-8369817: [TESTBUG] EmptyPath::toString is ignored\n + JDK-8369912: [TESTBUG] testlibrary_tests/template_framework/\n /examples/TestExpressions.java fails with ArithmeticException:\n / by zero - forgot to respect Expression.info\n + JDK-8369950: TLS connection to IPv6 address fails with BCJSSE\n due to IllegalArgumentException\n + JDK-8370370: Add still more cases to WorstCaseTests\n + JDK-8370489: Some compiler tests miss the @key randomness\n + JDK-8370502: C2: segfault while adding node to IGVN worklist\n + JDK-8370521: GenShen: Various code cleanup related to\n promotion\n + JDK-8370939: C2: SIGSEGV in SafePointNode::verify_input when\n processing MH call from\n Compile::process_late_inline_calls_no_inline()\n + JDK-8371284: GenShen: Avoid unnecessary card marking\n + JDK-8371381: [Shenandoah] Setting ergo flags should use\n FLAG_SET_ERGO\n + JDK-8371503: RETAIN_IMAGE_AFTER_TEST do not work for some\n tests\n + JDK-8371792: Refactor barrier loop tests out of TestIfMinMax\n + JDK-8371893: [macOS] use dead_strip linker option to reduce\n binary size\n + JDK-8372272: Hotspot shared lib loading - add load attempts to\n Events::log\n + JDK-8372351: Add 2 WISeKey roots\n + JDK-8372380: Make hs_err reporting more robust for unattached\n threads\n + JDK-8372513: Shenandoah: ShenandoahMaxRegionSize can produce\n an unaligned heap alignment\n + JDK-8372851: Modify java/io/File/GetXSpace.java to print path\n on failure of native call\n + JDK-8372861: Genshen: Override parallel_region_stride of\n ShenandoahResetBitmapClosure to a reasonable value for better\n parallelism\n + JDK-8373039: Remove Incorrect Asserts in\n shenandoahScanRemembered\n + JDK-8373120: Virtual thread stuck in BLOCKED state\n + JDK-8373239: Test java/awt/print/PrinterJob/PageRanges.java\n fails with incorrect selection of printed pages\n + JDK-8373275: Improve DTLS handshaking\n + JDK-8373515: Migrate \"test/jdk/java/net/httpclient/\" to\n null-safe \"SimpleSSLContext\" methods\n + JDK-8373579: Problem list compiler/runtime/Test7196199.java\n + JDK-8373650: Test \"javax/swing/JMenuItem/6458123/\n /ManualBug6458123.java\" fails because the check icons are not\n aligned properly as expected\n + JDK-8373676: Test javax/net/ssl/HttpsURLConnection/\n /SubjectAltNameIP.java fails on a machine without IPV6\n + JDK-8373690: Unexpected Keystore message using\n jdk.crypto.disabledAlgorithms\n + JDK-8373714: Shenandoah: Register heuristic penalties\n following a degenerated GC\n + JDK-8373718: jdk/internal/misc/VM/RuntimeArguments.java test\n fails in Virtual threads mode\n + JDK-8373796: Refactor java/net/httpclient/\n /ThrowingPublishers*.java tests to use JUnit5\n + JDK-8373847: Test javax/swing/JMenuItem/MenuItemTest/\n /bug6197830.java failed because The test case automatically\n fails when clicking any items in the \"Nothing\" menu in all\n four windows (Left-to-right)-Menu Item Test and\n (Right-to-left)-Menu Item Test\n + JDK-8373866: Refactor java/net/httpclient/\n /ThrowingSubscribers*.java tests to use JUnit5\n + JDK-8373893: Refactor networking http server tests to use\n JUnit\n + JDK-8373913: Refactor serialization tests to use JUnit\n + JDK-8373928: 4 Dangling pointer defect groups in java.c\n + JDK-8374001: sun/security/ skip without Exceptions\n + JDK-8374058: Enhance JPEG handling\n + JDK-8374168: Resolve disabled warnings in JDWP agent\n + JDK-8374304: MultiResolutionSplashTest.java fails in CI:\n \"Image with wrong resolution is used for splash screen!\"\n + JDK-8374322: TestMemoryWithSubgroups.java fails Permission\n denied\n + JDK-8374343: Fix SIGSEGV when lib/modules is unreadable\n + JDK-8374449: Shenandoah: Leaf locks used by Shenandoah need\n lower ranks\n + JDK-8374506: Incorrect positioning of arrow icon in parent\n JMenu in Windows L\u0026F\n + JDK-8374712: AOTMappedHeapWriter::relocate_field_in_buffer\n should use CompressedOops::narrow_oop_cast\n + JDK-8374727: Audio configuration Platform class - use nio for\n getting endianness of the underlying platform\n + JDK-8374744: Enable dumping of APX EGPRs (R16--R31) in JVM\n fatal error logs\n + JDK-8374769: PPC: MASM::pop_cont_fastpath() should reset\n _cont_fastpath if SP == _cont_fastpath\n + JDK-8374888: Implement internal test cache to help\n UserIterCount test performance\n + JDK-8374998: Failing os::write - remove bad file\n + JDK-8375065: Update LCMS to 2.18\n + JDK-8375177: Gtest\n os_linux.decoder_get_source_info_valid_vm fails with\n -ffunction-sections\n + JDK-8375294: (fs) Files.copy can fail with EOPNOTSUPP when\n copy_file_range not supported\n + JDK-8376031: HttpsURLConnection.getServerCertificates() throws\n \"java.lang.IllegalStateException: connection not yet open\" for\n the HEAD method\n + JDK-8376104: C2 crashes in PhiNode::Ideal(PhaseGVN*, bool)\n accessing NULL pointer\n + JDK-8376151: Test javax/swing/JFileChooser/4966171/\n /bug4966171.java is failing with OOME\n + JDK-8376152: Test javax/sound/sampled/Clip/bug5070081.java\n timed out then completed\n + JDK-8376185: NoSuchFieldError thrown after a record with type\n annotation retransformed\n + JDK-8376233: Clean up code in Desktop native peer\n + JDK-8376287: Crashes when using -XX:ObjArrayMarkingStride=0\n + JDK-8376402: Dependencies::print_statistics() and\n AbstractClassHierarchyWalker::print_statistics() are not\n called from PRODUCT code\n + JDK-8376684: Compile OpenJDK in headless mode without required\n X11 libraries\n + JDK-8376956: Add JVMTI phase entering/setting to hserr event\n log\n + JDK-8376969: Shenandoah: GC state getters should be inlineable\n + JDK-8376970: Shenandoah: Verifier should do basic verification\n before touching oops\n + JDK-8377158: Enhance XBM image support\n + JDK-8377167: javax/imageio/ReadAbortTest.java throw NPE when\n x11 unavailable\n + JDK-8377498: Improve HttpServer handling\n + JDK-8377512: AOT cache creation fails with invalid native\n pointer\n + JDK-8377602: Create automated test for PageRange\n + JDK-8377727: Ghost caret and focus appear in non-editable\n text fields\n + JDK-8377833: Enhance Jar file processing\n + JDK-8377907: (process) Race in ProcessBuilder can cause JVM\n hangs\n + JDK-8377910: Minor cleanup of java/io/FileDescriptor/\n /Sharing.java\n + JDK-8377932: AOT cache is not rejected when JAR file has\n changed\n + JDK-8377944: LowMemoryTest2.java#id1 intermittent fails OOME:\n Metaspace\n + JDK-8377949: TestZRelocationSetEvent.java intermittent fails\n OOME\n + JDK-8378083: Mark shenandoah/generational/\n /TestOldGrowthTriggers.java as flagless\n + JDK-8378201: [OGL] glXMakeContextCurrent() drops the buffers\n of the unbound drawable\n + JDK-8378417: Printing All pages results in NPE for 1.1\n PrintJob\n + JDK-8378561: Mark gc/shenandoah/compiler/\n /TestLinkToNativeRBP.java as /native\n + JDK-8378687: Improve delegation of HttpURLConnection\n + JDK-8378727: [macOS] Missing dispatch_release for semaphores\n in CDesktopPeer\n + JDK-8378746: ZGC: jdk/jfr/event/gc/detailed/\n /TestZRelocationSetGroupEvent.java intermittent OOME\n + JDK-8378764: fileStream::fileSize() fails for \u003e2GB files on\n Windows\n + JDK-8378774: Bump update version for OpenJDK: jdk-25.0.4\n + JDK-8378810: Enable missing FFM test via jtreg requires for\n RISC-V\n + JDK-8378836: Enable linktime-gc by default on Linux ppc64le\n + JDK-8378878: Refactor java/nio/channels/\n /AsynchronousSocketChannel test to use JUnit\n + JDK-8378888: jdk/incubator/vector/\n /Float16OperationsBenchmark.java uses wrong package name\n + JDK-8379021: Shenandoah: Speedup ShenandoahSimpleBitMapTest\n + JDK-8379202: Support linktime-gc on Linux with clang\n + JDK-8379416: AIX build fails if system (not GNU) date tool is\n in PATH\n + JDK-8379425: Windows and macOS should not allow unsupported\n headless-only build\n + JDK-8379457: Test EATests.java#id0 ERROR: monitor list errors:\n error_cnt=1\n + JDK-8379464: Enable missing stack walking test via jtreg\n requires for RISC-V\n + JDK-8379499: [AIX] headless-only build of libjawt.so fails\n + JDK-8379515: draft-ietf-lamps-kyber-certificates is now\n RFC 9935\n + JDK-8380011: Path-to-gcroots search should not trigger stack\n overflows\n + JDK-8380041: PPC: remove POWER6 remnants\n + JDK-8380222: Refactor test/jdk/java/lang/Character TestNG\n tests to JUnit\n + JDK-8380316: Test runtime/os/AvailableProcessors.java fails\n Invalid argument\n + JDK-8380409: JVM crashes when -XX:AOTMode=create uses\n app.aotconf generated with JVMTI agent\n + JDK-8380428: ProblemList containers/docker/\n /TestJcmdWithSideCar.java on linux-all\n + JDK-8380431: Shenandoah: Concurrent modification of\n stack-chunk objects during evacuation\n + JDK-8380474: Crash SEGV in ThreadIdTable::lazy_initialize\n after JDK-8323792\n + JDK-8380565: PPC64: deoptimization stub should save vector\n registers\n + JDK-8380663: Update jcmd man page to include AOT.end_recording\n diagnostic command\n + JDK-8380672: Improve certification checking\n + JDK-8380846: GenShen: Remove the experimental option to\n disable adaptive tenuring\n + JDK-8380947: Add pull request template\n + JDK-8381039: Enhance AWT ImagingLib\n + JDK-8381049: Enhance Jar handling\n + JDK-8381205: GHA: Upgrade Node.js 20 to 24\n + JDK-8381315: compiler/vectorapi/TestVectorReallocation.java\n fails with -XX:UseAVX=1 after JDK-8380565\n + JDK-8381382: Shenandoah: assert(capacity \u003e 0) failed: free\n regions must have allocation capacity\n + JDK-8381519: Enhance Der Value Handling\n + JDK-8381796: Enhance Certificate parsing\n + JDK-8381871: GenShen: ShenandoahGCHeuristics flag not reset\n after ignoring non-adaptive value\n + JDK-8381935: Improve numChunks range in the PPC64 CallAranger\n + JDK-8381937: Make exceptions in\n Java_sun_security_mscapi_CKeyPairGenerator generateCKeyPair\n more specific\n + JDK-8382018: test/jdk/java/nio/file/spi/\n /SetDefaultProvider.java leaves a directory in /tmp\n + JDK-8382020: Time Zone Abbreviation Not Localized for\n Non-English Locales\n + JDK-8382035: [ubsan] Under UBSAN builds, disable tests that\n rely on simulated JVM crashes\n + JDK-8382090: Remove .rej and .orig from .gitignore\n + JDK-8382242: JFR: Metadata reconstruction invalidates\n ConstantMap for java.lang.String\n + JDK-8382295: Shenandoah: wrong denominator in full gc summary\n + JDK-8382395: Disable stringop-overflow in\n shenandoahGenerationalHeap.cpp\n + JDK-8382419: Add missed @key randomness after JDK-8370489\n + JDK-8382522: Disable stringop-overflow in\n safepointMechanism.cpp\n + JDK-8382740: JFR: Disable jdk.OldObjectSample event for\n generational ZGC\n + JDK-8382878: RISC-V: Missing InlineSkippedInstructionsCounter\n in ZGC barriers stubs\n + JDK-8382932: [25u] Test java/lang/instrument/\n /RetransformRecordTypeAnn/TestRetransformRecord.java‎ fails\n with compilation error\n + JDK-8383161: [PPC64]\n MachCallDynamicJavaNode::ret_addr_offset() needs adaptation\n for COH\n + JDK-8383175: (tz) Update Timezone Data to 2026b\n + JDK-8383183: Shenandoah: Mangle trashed regions up to top\n instead of end\n + JDK-8383354: Update LCMS to 2.19.1\n + JDK-8383473: Follow on from tzdata2026b time change to\n include temporary hack BC time change\n + JDK-8383601: RISC-V:\n ShenandoahBarrierSetAssembler::load_reference_barrier calls\n \"weak\" on \"phantom\" path\n + JDK-8383630: Fix iteration in tests doing class redefinition\n + JDK-8384043: [REDO] Incorrect handling of Hawaii_Aleutian\n metazone\n + JDK-8384158: GHA: Downgrade Windows GHA runners to\n windows-2022 temporarily\n + JDK-8384163: (so) SocketChannel.connect and finishConnect()\n exception messages could be improved\n + JDK-8384223: RISC-V: entry_barrier_offset should consider\n UseZtso\n + JDK-8384486: NTLM tests fail on Windows 11 and Windows Server\n 2025\n + JDK-8384495: Update Libpng to 1.6.58\n + JDK-8384540: [25u, 21u, 17u] Update GHA JDKs after Apr/26\n updates\n + JDK-8384815: SelectOneKeyOutOfMany and PreferredKey fail after\n expired test certificate\n + JDK-8384902: Update GIFlib to 6.1.3\n + JDK-8385390: Update FreeType to 2.14.3\n + JDK-8385490: Update HarfBuzz to 14.2.0\n + JDK-8386551: Windows build broken because of MSys2/Make update\n","status":"published","published":"2026-07-28T16:12:30Z","modified":"2026-07-30T17:15:07.327128123Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"openSUSE-SU-2026:21470-1","title":"Security update for java-21-openjdk","description":"This update for java-21-openjdk fixes the following issues:\n\n- CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994).\n- CVE-2026-46917: partial denial of service via TLS (bsc#1272223).\n- CVE-2026-46968: unauthorized creation, deletion or modification access to critical data (bsc#1272224).\n- CVE-2026-47010: unauthorized update, insert or delete access (bsc#1272225).\n- CVE-2026-47021: partial denial of service via multiple network protocols (bsc#1272227).\n- CVE-2026-47027: partial denial of service via multiple network protocols (bsc#1272228).\n- CVE-2026-47059: partial denial of service via multiple network protocols (bsc#1272235).\n- CVE-2026-47063: unauthorized creation, deletion or modification access to critical data (bsc#1272236).\n- CVE-2026-60147: unauthorized update, insert or delete access (bsc#1272237).\n\nChanges for java-21-openjdk:\n\n- Update to upstream tag jdk-21.0.12+8 (July 2026 CPU):\n\n + JDK-7184899: Test sun/java2d/X11SurfaceData/\n /SharedMemoryPixmapsTest/SharedMemoryPixmapsTest.sh fail\n + JDK-8015444: java/awt/Focus/KeyStrokeTest.java sometimes fails\n + JDK-8064922: [macos] Test javax/swing/JTabbedPane/4624207/\n /bug4624207.java fails\n + JDK-8068293: [TEST_BUG] Test closed/com/sun/java/swing/plaf/\n /motif/InternalFrame/4150591/bug4150591.java fails with\n GTKLookAndFeel\n + JDK-8068310: [TEST_BUG] Test javax/swing/JColorChooser/\n /Test4234761.java fails with GTKL\u0026F\n + JDK-8068378: [TEST_BUG]The java/awt/Modal/PrintDialogsTest/\n /PrintDialogsTest.java instruction need to update\n + JDK-8129418: JShell: better highlighting of errors in imports\n on demand\n + JDK-8144124: [macosx] The tabs can't be aligned when we\n pressing the key of 'R','B','L','C' or 'T'.\n + JDK-8183336: Better cleanup for jdk/test/java/lang/module/\n /customfs/ModulesInCustomFileSystem.java\n + JDK-8203004: UnixMultiResolutionSplashTest.java fails on\n Ubuntu16.04\n + JDK-8212084: G1: Implement UseGCOverheadLimit\n + JDK-8213530: Test java/awt/Modal/ToFront/\n /DialogToFrontModeless1Test.java fails on Linux\n + JDK-8221451: PIT: sun/java2d/X11SurfaceData/\n /SharedMemoryPixmapsTest/SharedMemoryPixmapsTest.sh fails\n + JDK-8225787: java/awt/Window/GetScreenLocation/\n /GetScreenLocationTest.java fails on Ubuntu\n + JDK-8255463: java/nio/channels/spi/SelectorProvider/\n /inheritedChannel/InheritedChannelTest.java failed with\n ThreadTimeoutException\n + JDK-8274082: Wrong test name in jtreg run tag for\n java/awt/print/PrinterJob/SwingUIText.java\n + JDK-8277444: Data race between\n JvmtiClassFileReconstituter::copy_bytecodes and class linking\n + JDK-8278102: containers/docker/TestJcmd.java failed with\n \"RuntimeException: Could not find specified process\"\n + JDK-8286258: [Accessibility,macOS,VoiceOver] VoiceOver reads\n the spinner value wrong and sometime partially\n + JDK-8286865: vmTestbase/vm/mlvm/meth/stress/jni/nativeAndMH/\n /Test.java fails with Out of space in CodeCache\n + JDK-8293484: AArch64:\n TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails on CPU\n with SHA512 feature support\n + JDK-8297191: [macos] Printing a page range with starting\n page \u003e 1 results in missing pages\n + JDK-8298783: java/lang/ref/FinalizerHistogramTest.java failed\n with \"RuntimeException: MyObject is not found in test output\"\n + JDK-8298823: [macos] java/awt/Mouse/EnterExitEvents/\n /DragWindowTest.java continues to fail with \"No MouseReleased\n event on label!\"\n + JDK-8299304: Test \"java/awt/print/PrinterJob/\n /PageDialogTest.java\" fails on macOS 13 x64 because the Page\n Dialog blocks the Toolkit\n + JDK-8310645: CancelledResponse.java does not use HTTP/2 when\n testing the HttpClient\n + JDK-8311538: CDS InternSharedString test fails on huge pages\n host - cannot find shared string\n + JDK-8315588: JShell does not accept underscore from JEP 443\n even with --enable-preview\n + JDK-8318365: Test runtime/cds/appcds/sharedStrings/\n /InternSharedString.java fails after JDK-8311538\n + JDK-8318662: Refactor some jdk/java/net/httpclient/http2 tests\n to JUnit\n + JDK-8319326: GC: Make TestParallelRefProc use\n createTestJavaProcessBuilder\n + JDK-8319540: GC: Make TestSelectDefaultGC use\n + JDK-8320677: Printer tests use invalid '@run main/manual=yesno\n + JDK-8321303: Intermittent open/test/jdk/java/awt/\n /KeyboardFocusmanager/ConsumeNextMnemonicKeyTypedTest/\n /ConsumeNextMnemonicKeyTypedTest.java failure on Linux\n + JDK-8321687: Test vmTestbase/nsk/jvmti/scenarios/contention/\n /TC03/tc03t002/TestDescription.java failed:\n JVMTI_ERROR_THREAD_NOT_ALIVE\n + JDK-8322532: JShell : Unnamed variable issue\n + JDK-8323089: networkaddress.cache.ttl is not a system property\n + JDK-8323545: java/awt/GraphicsDevice/CheckDisplayModes.java\n fails with \"exit code: 133\"\n + JDK-8323672: Suppress unwanted autoconf added flags in CC and\n CXX\n + JDK-8323792: ThreadSnapshot::initialize can cause assert in\n Thread::check_for_dangling_thread_pointer (possibility of\n dangling Thread pointer)\n + JDK-8326458: Menu mnemonics don't toggle in Windows LAF when\n F10 is pressed\n + JDK-8328300: Convert PrintDialogsTest.java from Applet to main\n program\n + JDK-8329273: C2 SuperWord: Some basic MemorySegment IR tests\n + JDK-8330704: Clean up non-standard use of /** comments in some\n langtools tests\n + JDK-8330806: test/hotspot/jtreg/compiler/c1/\n /TestLargeMonitorOffset.java fails on ARM32\n + JDK-8332495: java/util/logging/LoggingDeadlock2.java fails\n with AssertionError: Some tests failed\n + JDK-8333729: C2 SuperWord: remove some @requires usages in\n test/hotspot/jtreg/compiler/loopopts/superword\n + JDK-8334928: Test sun/security/ssl/SSLSocketImpl/\n /ReuseAddr.java failed: java.net.BindException: Address\n already in use\n + JDK-8338103: Stabilize and open source a Swing OGL\n ButtonResizeTest\n + JDK-8338554: Fix inconsistencies in javadoc/doclet/\n /testLinkOption/TestRedirectLinks.java\n + JDK-8338883: Show warning when CreateCoredumpOnCrash set, but\n core dump will not happen\n + JDK-8339233: Test javax/swing/JButton/\n /SwingButtonResizeTestWithOpenGL.java#id failed: Button\n renderings are different after window resize\n + JDK-8339638: Update vmTestbase/nsk/jvmti/*Field*Watch tests to\n use virtual thread factory\n + JDK-8339879: Open some dialog awt tests\n + JDK-8339975: Open some dialog awt tests 2\n + JDK-8340140: Open some dialog awt tests 3\n + JDK-8340336: Open some checkbox awt tests\n + JDK-8340494: Open some dialog awt tests 4\n + JDK-8340818: Add a new jtreg test root to test the generated\n documentation\n + JDK-8340851: Open some TextArea awt tests\n + JDK-8340987: Open some TextArea awt tests 1\n + JDK-8341055: Open some TextArea awt tests 2\n + JDK-8341292: Open some TextArea awt tests 3\n + JDK-8341376: Open some TextArea awt tests 4\n + JDK-8341427: JFR: Adjust object sampler span handling\n + JDK-8341436: containers/docker/TestJcmdWithSideCar.java takes\n needlessly long to run\n + JDK-8341833: incomplete snippet from loaded files from command\n line is ignored\n + JDK-8342401: [TESTBUG] javax/swing/JSpinner/8223788/\n /JSpinnerButtonFocusTest.java test fails in ubuntu 22.04 on\n SBR Hosts\n + JDK-8342836: Automatically determine that a test in the docs\n test root is requested\n + JDK-8344128: Regression: make help broken after JDK-8340818\n + JDK-8345618: javax/swing/text/Caret/8163124/\n /CaretFloatingPointAPITest.java leaves Caret is not complete\n + JDK-8346154: [XWayland] Some tests fail intermittently in the\n CI, but not locally\n + JDK-8346683: Problem list automated tests that fail on macOS15\n + JDK-8347836: Disabled PopupMenu shows shortcuts on Mac\n + JDK-8349084: Update vectors used in several PQC benchmarks\n + JDK-8349192: jvmti/scenarios/contention/TC05/tc05t001 fails:\n ERROR: tc05t001.cpp, 281: (waitedThreadCpuTime -\n waitThreadCpuTime) \u003c (EXPECTED_ACCURACY * 1000000)\n + JDK-8349533: Refactor validator tests shell files to java\n + JDK-8349699: XSL transform fails with certain UTF-8 characters\n on 1024 byte boundaries\n + JDK-8349959: Test CR6740048.java passes unexpectedly missing\n CR6740048.xsd\n + JDK-8350749: Upgrade JLine to 3.29.0\n + JDK-8350808: Small typos in JShell method SnippetEvent\n .toString()\n + JDK-8352020: [CompileFramework] enable compilation for\n VectorAPI\n + JDK-8352147: G1: TestEagerReclaimHumongousRegionsClearMarkBits\n test takes very long\n + JDK-8352149: Test java/awt/Frame/MultiScreenTest.java fails:\n Window list is empty\n + JDK-8352431: java/net/httpclient/EmptyAuthenticate.java uses\n \"localhost\"\n + JDK-8352685: Opensource JInternalFrame tests - series2\n + JDK-8352733: Improve RotFontBoundsTest test\n + JDK-8352877: Opensource Several Font related tests - Batch 1\n + JDK-8353124: java/lang/Thread/virtual/stress/Skynet.java#Z\n times out on macosx-x64-debug\n + JDK-8353488: Open some JComboBox bugs 3\n + JDK-8353552: Opensource Several Font related tests - Batch 3\n + JDK-8354163: Open source Swing tests Batch 1\n + JDK-8354695: Open source several swing tests batch7\n + JDK-8354900: javax/swing/AbstractButton/bug4133768.java\n failing on macosx-aarch64\n + JDK-8354910: Output by java.io.IO or System.console()\n corrupted for some non-ASCII characters\n + JDK-8355048: ProblemList TestGlyphVectorLayout.java on all\n platforms\n + JDK-8355179: Reinstate javax/swing/JScrollBar/4865918/\n /bug4865918.java headful and macos run\n + JDK-8355332: Fix failing semi-manual test EDT issue\n + JDK-8355371: NegativeArraySizeException in print methods in IO\n or System.console() in JShell\n + JDK-8355443: [java.io] Use @requires tag instead of exiting\n based on File.separatorChar value\n + JDK-8356695: java/lang/StringBuilder/HugeCapacity.java failing\n with OOME\n + JDK-8356868: Not all cgroup parameters are made available\n + JDK-8357062: Update Public Suffix List to 823beb1\n + JDK-8357082: Stabilize and add debug logs to CopyAreaOOB.java\n + JDK-8357086: os::xxx functions returning memory size should\n return size_t\n + JDK-8357280: (bf) Remove @requires tags from java/nio/Buffer/\n /LimitDirectMemory[NegativeTest].java\n + JDK-8357390: java/awt/Toolkit/ScreenInsetsTest/\n /ScreenInsetsTest.java Test failing on Ubuntu 24.04 Vm Hosts\n used by Oracle's internal CI system\n + JDK-8358058: sun/java2d/OpenGL/DrawImageBg.java Test fails\n intermittently\n + JDK-8359364: java/net/URL/EarlyOrDelayedParsing test fails\n + JDK-8359472: JVM crashes when attaching a dynamic agent before\n JVMTI_PHASE_LIVE\n + JDK-8359978: Test javax/net/ssl/SSLSocket/Tls13PacketSize.java\n failed again with java.net.SocketException: An established\n connection was aborted by the software in your host machine\n + JDK-8360160: ubuntu-22-04 machine is failing client tests\n + JDK-8360395: sun/security/tools/keytool/i18n.java user country\n is current user location instead of the language\n + JDK-8360562: sun/security/tools/keytool/i18n.java add an\n ability to add comment for failures\n + JDK-8360702: runtime/Thread/AsyncExceptionTest.java timed out\n + JDK-8360882: Tests throw SkippedException when they should\n fail\n + JDK-8361106: [TEST] com/sun/net/httpserver/Test9.java fails\n with java.nio.file.FileSystemException\n + JDK-8361606: ConsumeNextMnemonicKeyTypedTest.java fails on\n Windows: character typed with VK_A: a\n + JDK-8361894: sun/security/krb5/config/native/\n /TestDynamicStore.java ensure that the test is run with sudo\n + JDK-8362428: Update IANA Language Subtag Registry to Version\n 2025-08-25\n + JDK-8363943: ARM32: Represent Registers as values\n + JDK-8363949: Incorrect jtreg header in\n MonitorWithDeadObjectTest.java\n + JDK-8364190: JFR: RemoteRecordingStream withers don't work\n + JDK-8364315: Remove unused xml files from test/jaxp/javax/xml/\n /jaxp/functional/javax/xml/transform/xmlfiles\n + JDK-8364756: JFR: Improve slow tests\n + JDK-8364927: Add @requires annotation to\n TestReclaimStringsLeaksMemory.java\n + JDK-8365379: SU3.applyInsets may produce wrong results\n + JDK-8365398: TEST_BUG: java/rmi/transport/checkLeaseInfoLeak/\n /CheckLeaseLeak.java failing intermittently\n + JDK-8365423: [macos26] java/awt/MenuBar/8007006/\n /bug8007006.java fails on macOS 26\n + JDK-8365424: [macos26] java/awt/Frame/DisposeTest.java fails\n on macOS 26\n + JDK-8365623: test/jdk/sun/security/pkcs11/tls/ tests skipped\n without skip exception\n + JDK-8365625: Can't change accelerator colors in Windows L\u0026F\n + JDK-8365776: Convert JShell tests to use JUnit instead of\n TestNG\n + JDK-8365861: test/jdk/sun/security/pkcs11/Provider/ tests\n skipped without SkippedException\n + JDK-8365863: /test/jdk/sun/security/pkcs11/Cipher tests skip\n without SkippedException\n + JDK-8365893: test/jdk/java/lang/Thread/virtual/JfrEvents.java\n failing intermittently\n + JDK-8366031: Mark com/sun/nio/sctp/SctpChannel/\n /CloseDescriptors.java as intermittent\n + JDK-8366182: Some PKCS11Tests are being skipped when they\n shouldn't\n + JDK-8366369: Add @requires linux for GTK L\u0026F tests\n + JDK-8366852: java/awt/Choice/ChoiceMouseWheelTest/\n /ChoiceMouseWheelTest.java test is failing\n + JDK-8367096: jdk/open/test/jdk/sun/security/pkcs11/ rsa, ec,\n config, secmod and sslecc tests are skipping but showing as\n pass\n + JDK-8367485: os::physical_memory is broken in 32-bit JVMs when\n running on 64-bit OSes\n + JDK-8367784: java/awt/Focus/InitialFocusTest/\n /InitialFocusTest1.java failed with Wrong focus owner\n + JDK-8368029: Several tests in httpserver/simpleserver should\n throw SkipException\n + JDK-8368041: Enhance TLS certificate handling\n + JDK-8368181: ProblemList java/awt/Dialog/ModalExcludedTest/\n /ModalExcludedTest.java\n + JDK-8368335: Refactor the rest of Locale TestNG based tests to\n JUnit\n + JDK-8368498: Use JUnit instead of TestNG for jdk_text tests\n + JDK-8368524: Tests are skipped and shown as passed in\n test/jdk/sun/security/pkcs11/Cipher/KeyWrap\n + JDK-8368551: Core dump warning may be confusing\n + JDK-8368625: com/sun/net/httpserver/\n /ServerStopTerminationTest.java fails intermittently\n + JDK-8368670: Deadlock in JFR on event register + class load\n + JDK-8368754: runtime/cds/appcds/SignedJar.java log regex is\n too strict\n + JDK-8368866: compiler/codecache/stress/\n /UnexpectedDeoptimizationTest.java intermittent timed out\n + JDK-8368885: NMT CommandLine tests can check for error better\n + JDK-8368892: Make JEditorPane/TestBrowserBGColor.java headless\n + JDK-8369251: Opensource few tests\n + JDK-8369335: Two sun/java2d/OpenGL tests fail on Windows\n after JDK-8358058\n + JDK-8369516: Delete duplicate imaging test\n + JDK-8369561: sun/java2d/OpenGL/DrawBitmaskImage.java#id0:\n Incorrect color for first pixel (actual=ff000000)\n + JDK-8369683: Exclude runtime/Monitor/\n /MonitorWithDeadObjectTest.java#DumpThreadsBeforeDetach on\n Alpine Linux debug\n + JDK-8369851: Remove darcy author tags from langtools tests\n + JDK-8369950: TLS connection to IPv6 address fails with BCJSSE\n due to IllegalArgumentException\n + JDK-8370378: Some compiler tests inadvertently exclude\n particular platforms\n + JDK-8370489: Some compiler tests miss the @key randomness\n + JDK-8370492: [Linux] Update cpu shares to cpu.weight mapping\n function\n + JDK-8370511: test/jdk/javax/swing/JSlider/bug4382876.java does\n not release previously pressed keys\n + JDK-8370732: Use WhiteBox.getWhiteBox().fullGC() to provoking\n gc for nsk/jvmti tests\n + JDK-8370905: Update vm.defmeth tests to use virtual threads\n + JDK-8370942: test/jdk/java/security/Provider/NewInstance.java\n and /test/jdk/java/security/cert/CertStore/NoLDAP.java may\n skip without notifying\n + JDK-8371262: sun/security/pkcs11/Cipher/KeyWrap tests may\n silently skip\n + JDK-8371349: Update NSS library to 3.117\n + JDK-8371364: Refactor javax/swing/JFileChooser/\n /FileSizeCheck.java to use Util.findComponent()\n + JDK-8371365: Update javax/swing/JFileChooser/bug4759934.java\n to use Util.findComponent()\n + JDK-8371366: java/net/httpclient/whitebox/\n /RawChannelTestDriver.java fails intermittently in jtreg\n timeout\n + JDK-8371383: Test sun/security/tools/jarsigner/\n /DefaultOptions.java failed due to\n CertificateNotYetValidException\n + JDK-8371503: RETAIN_IMAGE_AFTER_TEST do not work for some\n tests\n + JDK-8371895: Lower GCTimeLimit in TestUseGCOverheadLimit.java\n + JDK-8371967: Add Visual Studio 2026 to build toolchain for\n Windows\n + JDK-8372120: Add missing sound keyword to MIDI tests\n + JDK-8372272: Hotspot shared lib loading - add load attempts to\n Events::log\n + JDK-8372351: Add 2 WISeKey roots\n + JDK-8372609: Bug4944439 does not enforce locale correctly\n + JDK-8372661: Add a null-safe static factory method to\n \"jdk.test.lib.net.SimpleSSLContext\"\n + JDK-8373101: JdkClient and JdkServer test classes ignore\n namedGroups field\n + JDK-8373239: Test java/awt/print/PrinterJob/PageRanges.java\n fails with incorrect selection of printed pages\n + JDK-8373275: Improve DTLS handshaking\n + JDK-8373537: Migrate \"test/jdk/com/sun/net/httpserver/\" to\n null-safe \"SimpleSSLContext\" methods\n + JDK-8373593: Support latest VS2026 MSC_VER in\n abstract_vm_version.cpp\n + JDK-8373623: Refactor Serialization tests for Records to JUnit\n + JDK-8373632: Some sound tests failing in CI due to lack of\n sound key\n + JDK-8373650: Test \"javax/swing/JMenuItem/6458123/\n /ManualBug6458123.java\" fails because the check icons are not\n aligned properly as expected\n + JDK-8373690: Unexpected Keystore message using\n jdk.crypto.disabledAlgorithms\n + JDK-8373704: Improve \"SocketException: Protocol family\n unavailable\" message\n + JDK-8373716: Refactor further java/util tests from TestNG to\n + JDK-8373793: TestDynamicStore.java '/manual' disables use of\n '/timeout'\n + JDK-8373796: Refactor java/net/httpclient/\n /ThrowingPublishers*.java tests to use JUnit5\n + JDK-8373807: test/jdk/java/net/httpclient/websocket/\n /DummyWebSocketServer.java getURI() uses \"localhost\"\n + JDK-8373832: Test java/lang/invoke/TestVHInvokerCaching.java\n tests nothing\n + JDK-8373847: Test javax/swing/JMenuItem/MenuItemTest/\n /bug6197830.java failed because The test case automatically\n fails when clicking any items in the \"Nothing\" menu in all\n four windows (Left-to-right)-Menu Item Test and\n (Right-to-left)-Menu Item Test\n + JDK-8373866: Refactor java/net/httpclient/\n /ThrowingSubscribers*.java tests to use JUnit5\n + JDK-8373869: Refactor java/net/httpclient/\n /ThrowingPushPromises*.java tests to use JUnit5\n + JDK-8373928: 4 Dangling pointer defect groups in java.c\n + JDK-8373931: Test javax/sound/sampled/Clip/\n /AutoCloseTimeCheck.java timed out\n + JDK-8374058: Enhance JPEG handling\n + JDK-8374304: MultiResolutionSplashTest.java fails in CI:\n \"Image with wrong resolution is used for splash screen!\"\n + JDK-8374322: TestMemoryWithSubgroups.java fails Permission\n denied\n + JDK-8374434: Several JShell tests report JUnit discovery\n warnings\n + JDK-8374506: Incorrect positioning of arrow icon in parent\n JMenu in Windows L\u0026F\n + JDK-8374711: Hotspot runtime/CommandLine/OptionsValidation/\n /TestOptionsWithRanges fails without printing the option name\n + JDK-8374769: PPC: MASM::pop_cont_fastpath() should reset\n _cont_fastpath if SP == _cont_fastpath\n + JDK-8374888: Implement internal test cache to help\n UserIterCount test performance\n + JDK-8374998: Failing os::write - remove bad file\n + JDK-8375065: Update LCMS to 2.18\n + JDK-8375080: The tools/jpackage/windows/Win8365790Test.java\n may fail with ClassNotFoundException: jtreg.SkippedException\n + JDK-8375231: Refactor util/ServiceLoader tests to use JUnit\n + JDK-8375232: Refactor util/StringJoiner tests to use JUnit\n + JDK-8375233: Refactor util/Vector tests to use JUnit\n + JDK-8375742: Test java/lang/invoke/MethodHandleProxies/\n /Driver.java does not run Unnamed.java\n + JDK-8376031: HttpsURLConnection.getServerCertificates() throws\n \"java.lang.IllegalStateException: connection not yet open\" for\n the HEAD method\n + JDK-8376151: Test javax/swing/JFileChooser/4966171/\n /bug4966171.java is failing with OOME\n + JDK-8376152: Test javax/sound/sampled/Clip/bug5070081.java\n timed out then completed\n + JDK-8376233: Clean up code in Desktop native peer\n + JDK-8376889: Enhance JfrRecorder::on_create_vm_3() assert\n output\n + JDK-8377158: Enhance XBM image support\n + JDK-8377167: javax/imageio/ReadAbortTest.java throw NPE when\n x11 unavailable\n + JDK-8377347: jdk/jfr/event/gc/detailed/\n /TestZAllocationStallEvent.java intermittent OOME\n + JDK-8377498: Improve HttpServer handling\n + JDK-8377602: Create automated test for PageRange\n + JDK-8377727: Ghost caret and focus appear in non-editable text\n fields\n + JDK-8377833: Enhance Jar file processing\n + JDK-8377910: Minor cleanup of java/io/FileDescriptor/\n /Sharing.java\n + JDK-8377944: LowMemoryTest2.java#id1 intermittent fails OOME:\n Metaspace\n + JDK-8378113: Add sun/java2d/OpenGL/ScaleParamsOOB.java to the\n ProblemList.txt file\n + JDK-8378201: [OGL] glXMakeContextCurrent() drops the buffers\n of the unbound drawable\n + JDK-8378353: [PPC64] StringCoding.countPositives causes errors\n when the length is not a proper 32 bit int\n + JDK-8378417: Printing All pages results in NPE for 1.1\n PrintJob\n + JDK-8378561: Mark gc/shenandoah/compiler/\n /TestLinkToNativeRBP.java as /native\n + JDK-8378687: Improve delegation of HttpURLConnection\n + JDK-8378775: Bump update version for OpenJDK: jdk-21.0.12\n + JDK-8378802: [21u] backport changes to TKit.java by\n JDK-8352419\n + JDK-8378810: Enable missing FFM test via jtreg requires for\n RISC-V\n + JDK-8378878: Refactor java/nio/channels/\n /AsynchronousSocketChannel test to use JUnit\n + JDK-8379464: Enable missing stack walking test via jtreg\n requires for RISC-V\n + JDK-8380011: Path-to-gcroots search should not trigger stack\n overflows\n + JDK-8380222: Refactor test/jdk/java/lang/Character TestNG\n tests to JUnit\n + JDK-8380316: Test runtime/os/AvailableProcessors.java fails\n Invalid argument\n + JDK-8380428: ProblemList containers/docker/\n /TestJcmdWithSideCar.java on linux-all\n + JDK-8380474: Crash SEGV in ThreadIdTable::lazy_initialize\n after JDK-8323792\n + JDK-8380565: PPC64: deoptimization stub should save vector\n registers\n + JDK-8380672: Improve certification checking\n + JDK-8380947: Add pull request template\n + JDK-8381039: Enhance AWT ImagingLib\n + JDK-8381049: Enhance Jar handling\n + JDK-8381205: GHA: Upgrade Node.js 20 to 24\n + JDK-8381315: compiler/vectorapi/TestVectorReallocation.java\n fails with -XX:UseAVX=1 after JDK-8380565\n + JDK-8381519: Enhance Der Value Handling\n + JDK-8381796: Enhance Certificate parsing\n + JDK-8382018: test/jdk/java/nio/file/spi/\n /SetDefaultProvider.java leaves a directory in /tmp\n + JDK-8382242: JFR: Metadata reconstruction invalidates\n ConstantMap for java.lang.String\n + JDK-8382419: Add missed @key randomness after JDK-8370489\n + JDK-8383175: (tz) Update Timezone Data to 2026b\n + JDK-8383185: [21u] Backport of JDK-8382925 causes test failure\n in SetDefaultProvider\n + JDK-8383354: Update LCMS to 2.19.1\n + JDK-8383473: Follow on from tzdata2026b time change to include\n temporary hack BC time change\n + JDK-8383601: RISC-V:\n ShenandoahBarrierSetAssembler::load_reference_barrier calls\n \"weak\" on \"phantom\" path\n + JDK-8383630: Fix iteration in tests doing class redefinition\n + JDK-8384158: GHA: Downgrade Windows GHA runners to\n windows-2022 temporarily\n + JDK-8384486: NTLM tests fail on Windows 11 and Windows Server\n 2025\n + JDK-8384495: Update Libpng to 1.6.58\n + JDK-8384540: [25u, 21u, 17u] Update GHA JDKs after Apr/26\n updates\n + JDK-8384815: SelectOneKeyOutOfMany and PreferredKey fail after\n expired test certificate\n + JDK-8384902: Update GIFlib to 6.1.3\n + JDK-8385390: Update FreeType to 2.14.3\n + JDK-8385490: Update HarfBuzz to 14.2.0\n + JDK-8386551: Windows build broken because of MSys2/Make update\n","status":"published","published":"2026-07-28T20:35:22Z","modified":"2026-07-30T17:15:09.32571521Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:22944-1","title":"Security update for java-17-openjdk","description":"This update for java-17-openjdk fixes the following issues\n\n- Upgrade to upstream tag jdk-17.0.20+8 (July 2026 CPU)\n- CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994).\n- CVE-2026-46917: partial denial of service via TLS (bsc#1272223).\n- CVE-2026-46968: unauthorized creation, deletion or modification access to critical data (bsc#1272224).\n- CVE-2026-47010: unauthorized update, insert or delete access (bsc#1272225).\n- CVE-2026-47021: partial denial of service via multiple network protocols (bsc#1272227).\n- CVE-2026-47027: partial denial of service via multiple network protocols (bsc#1272228).\n- CVE-2026-47059: partial denial of service via multiple network protocols (bsc#1272235).\n- CVE-2026-47063: unauthorized creation, deletion or modification access to critical data (bsc#1272236).\n- CVE-2026-60147: unauthorized update, insert or delete access (bsc#1272237).\n","status":"published","published":"2026-07-24T08:27:03Z","modified":"2026-07-29T18:24:22.237861776Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:22953-1","title":"Security update for java-17-openjdk","description":"This update for java-17-openjdk fixes the following issues\n\n- Upgrade to upstream tag jdk-17.0.20+8 (July 2026 CPU)\n- CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994).\n- CVE-2026-46917: partial denial of service via TLS (bsc#1272223).\n- CVE-2026-46968: unauthorized creation, deletion or modification access to critical data (bsc#1272224).\n- CVE-2026-47010: unauthorized update, insert or delete access (bsc#1272225).\n- CVE-2026-47021: partial denial of service via multiple network protocols (bsc#1272227).\n- CVE-2026-47027: partial denial of service via multiple network protocols (bsc#1272228).\n- CVE-2026-47059: partial denial of service via multiple network protocols (bsc#1272235).\n- CVE-2026-47063: unauthorized creation, deletion or modification access to critical data (bsc#1272236).\n- CVE-2026-60147: unauthorized update, insert or delete access (bsc#1272237).\n","status":"published","published":"2026-07-24T08:27:03Z","modified":"2026-07-29T18:24:23.586246835Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:3284-1","title":"Security update for java-11-openjdk","description":"This update for java-11-openjdk fixes the following issues\n\nUpgrade to upstream tag jdk-11.0.32+9 (July 2026 CPU).\n\nSecurity issues fixed:\n\n- CVE-2026-41254: lcms: information disclosure and denial of service via integer overflow in `CubeSize` (bsc#1264994).\n- CVE-2026-46917: unauthenticated attacker with network access via TLS can cause a partial denial of service\n  (bsc#1272223).\n- CVE-2026-46968: unauthenticated attacker with network access via TLS can gain unauthorized creation, deletion or\n  modification access to critical data(bsc#1272224).\n- CVE-2026-47010: unauthenticated attacker with network access via multiple protocols can gain unauthorized update,\n  insert or delete access to some data (bsc#1272225).\n- CVE-2026-47021: unauthenticated attacker with network access via multiple protocols can cause a partial denial of\n  service (bsc#1272227).\n- CVE-2026-47027: unauthenticated attacker with network access via multiple protocols can cause a partial denial of\n  service (bsc#1272228).\n- CVE-2026-47057: unauthenticated attacker with network access via multiple protocols can cause a hang or frequently\n  repeatable crash  (bsc#1272233).\n- CVE-2026-47058: unauthenticated attacker with network access via multiple protocols can gain unauthorized creation,\n  deletion or modification access to critical data (bsc#1272234).\n- CVE-2026-47059: unauthenticated attacker with network access via multiple protocols can cause a partial denial of\n  service (bsc#1272235).\n- CVE-2026-47063: unauthenticated attacker with network access via multiple protocols can gain unauthorized creation,\n  deletion or modification access to critical data (bsc#1272236).\n- CVE-2026-60147: unauthenticated attacker with network access via multiple protocols can gain unauthorized update,\n  insert, delete and read access to some(bsc#1272237).\n\nOther updates and bugfixes:\n\n- Errors from update-alternatives when installing java-25-openjdk (bsc#1267355).\n- Upgrade to upstream tag jdk-11.0.32+9 (July 2026 CPU):\n   + JDK-8200566: DistributionPointFetcher fails to fetch CRLs if\n     the DistributionPoints field contains more than one\n     DistributionPoint and the first one fails\n   + JDK-8242314: use reproducible random in vmTestbase shared code\n   + JDK-8252412: [macos11] system dynamic libraries removed from\n     filesystem\n   + JDK-8275405: Linking error for classes with lambda template\n     parameters and virtual functions\n   + JDK-8275843: Random crashes while the UI code is executed\n   + JDK-8286562: GCC 12 reports some compiler warnings\n   + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java\n     fails new assert: assert((uint)t \u003c T_CONFLICT + 1) failed:\n     invalid type #\n   + JDK-8292177: InitialSecurityProperty JFR event\n   + JDK-8293691: converting a defined BasicType value to a string\n     should not crash the VM\n   + JDK-8298730: Refactor subsystem_file_line_contents and add\n     docs and tests\n   + JDK-8314555: Build with mawk fails on Windows\n   + JDK-8323672: Suppress unwanted autoconf added flags in CC and\n     CXX\n   + JDK-8324243: Compilation failures in java.desktop module with\n     gcc 14\n   + JDK-8325766: Extend CertificateBuilder to create trust and end\n     entity certificates programmatically\n   + JDK-8327071: [Testbug] g-tests for cgroup leave files in /tmp\n     on linux\n   + JDK-8336498: [macos] [build]: install-file macro may run into\n     permission denied error\n   + JDK-8342858: Make target mac-jdk-bundle fails on chmod command\n   + JDK-8347740: java/io/File/createTempFile/SpecialTempFile.java\n     failing\n   + JDK-8347811: Container detection code for cgroups v2 should\n     use cgroup.controllers\n   + JDK-8349988: Change cgroup version detection logic to not\n     depend on /proc/cgroups\n   + JDK-8350749: Upgrade JLine to 3.29.0\n   + JDK-8351359: OperatingSystemMXBean: values from getCpuLoad and\n     getProcessCpuLoad are stale after 24.8 days (Windows)\n   + JDK-8353714: [17u] Backport of 8347740 incomplete\n   + JDK-8354878: File Leak in\n     CgroupSubsystemFactory::determine_type of\n     cgroupSubsystem_linux.cpp:300\n   + JDK-8355077: Compiler error at splashscreen_gif.c due to\n     unterminated string initialization\n   + JDK-8363966: GHA: Switch cross-compiling sysroots to Debian\n     trixie\n   + JDK-8365098: make/RunTests.gmk generates a wrong path to test\n      artifacts on Alpine\n   + JDK-8365660: test/jdk/sun/security/pkcs11/KeyAgreement/ tests\n     skipped without SkipExceprion\n   + JDK-8366159: SkippedException is treated as a pass for\n     pkcs11/KeyStore, pkcs11/SecretKeyFactory and\n     pkcs11/SecureRandom\n   + JDK-8367766: [11u] src/jdk.crypto.ec/share/native/libsunec/\n     /impl/mpi.c:321:3: error: 'tmp.dp' may be used uninitialized\n   + JDK-8368041: Enhance TLS certificate handling\n   + JDK-8368670: Deadlock in JFR on event register + class load\n   + JDK-8369032: Add test to ensure serialized ICC_Profile stores\n     only necessary optional data\n   + JDK-8369506: Bytecode rewriting causes Java heap corruption on\n     AArch64\n   + JDK-8371559: Intermittent timeouts in test\n     javax/net/ssl/Stapling/HttpsUrlConnClient.java\n   + JDK-8372351: Add 2 WISeKey roots\n   + JDK-8373275: Improve DTLS handshaking\n   + JDK-8374058: Enhance JPEG handling\n   + JDK-8374888: Implement internal test cache to help\n     UserIterCount test performance\n   + JDK-8375065: Update LCMS to 2.18\n   + JDK-8377158: Enhance XBM image support\n   + JDK-8377167: javax/imageio/ReadAbortTest.java throw NPE when\n     x11 unavailable\n   + JDK-8377498: Improve HttpServer handling\n   + JDK-8377833: Enhance Jar file processing\n   + JDK-8378218: MSYS2 reports cygwin triplet causing bash\n     configure failure\n   + JDK-8378631: Update Zlib Data Compression Library to Version\n     1.3.2\n   + JDK-8378687: Improve delegation of HttpURLConnection\n   + JDK-8378823: AIX build fails after zlib updated by JDK-8378631\n   + JDK-8379685: Bump update version of OpenJDK: 11.0.32\n   + JDK-8380672: Improve certification checking\n   + JDK-8380947: Add pull request template\n   + JDK-8381039: Enhance AWT ImagingLib\n   + JDK-8381049: Enhance Jar handling\n   + JDK-8381185: Improve Nashorn index handling\n   + JDK-8381195: Enhance Dataview Implementation\n   + JDK-8381519: Enhance Der Value Handling\n   + JDK-8381551: DisabledCurve test fails on Windows after\n     disabling SHA1\n   + JDK-8381796: Enhance Certificate parsing\n   + JDK-8383175: (tz) Update Timezone Data to 2026b\n   + JDK-8383354: Update LCMS to 2.19.1\n   + JDK-8383473: Follow on from tzdata2026b time change to include\n     temporary hack BC time change\n   + JDK-8384158: GHA: Downgrade Windows GHA runners to\n     windows-2022 temporarily\n   + JDK-8384495: Update Libpng to 1.6.58\n   + JDK-8384902: Update GIFlib to 6.1.3\n   + JDK-8386551: Windows build broken because of MSys2/Make update\n   + JDK-8387976: [11u] Remove designator\n     DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.32\n- Make post scripts less noisy (bsc#1267355).\n- Use libalternatives instead of update-alternatives for distributions where libalternatives is available.\n","status":"published","published":"2026-07-27T13:50:22Z","modified":"2026-07-28T10:00:10.441159473Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3331-1","title":"Security update for java-25-openjdk","description":"This update for java-25-openjdk fixes the following issues:\n\nUpdate to upstream tag jdk-25.0.4+7 (July 2026 CPU).\n\nSecurity issues fixed:\n\n- CVE-2026-41254: lcms: information disclosure and denial of service via integer overflow in `CubeSize` (bsc#1264994).\n- CVE-2026-46917: unauthenticated attacker with network access via TLS can cause a partial denial of service\n  (bsc#1272223).\n- CVE-2026-46968: unauthenticated attacker with network access via TLS can gain unauthorized creation, deletion or\n  modification access to critical data(bsc#1272224).\n- CVE-2026-47010: unauthenticated attacker with network access via multiple protocols can gain unauthorized update,\n  insert or delete access to some data (bsc#1272225).\n- CVE-2026-47021: unauthenticated attacker with network access via multiple protocols can cause a partial denial of\n  service (bsc#1272227).\n- CVE-2026-47027: unauthenticated attacker with network access via multiple protocols can cause a partial denial of\n  service (bsc#1272228).\n- CVE-2026-47059: unauthenticated attacker with network access via multiple protocols can cause a partial denial of\n  service (bsc#1272235).\n- CVE-2026-47063: unauthenticated attacker with network access via multiple protocols can gain unauthorized creation,\n  deletion or modification access to critical data (bsc#1272236).\n- CVE-2026-60147: unauthenticated attacker with network access via multiple protocols can gain unauthorized update,\n  insert, delete and read access to some(bsc#1272237).\n\nOther updates and bugfixes:\n\n- Errors from update-alternatives when installing java-25-openjdk (bsc#1267355).\n- Make post scripts less noisy (bsc#1267355).\n- Use libalternatives instead of update-alternatives for distributions where libalternatives is available.\n- Update to upstream tag jdk-25.0.4+7 (July 2026 CPU):    \n    + JDK-7184899: Test sun/java2d/X11SurfaceData/\n      /SharedMemoryPixmapsTest/SharedMemoryPixmapsTest.sh fail\n    + JDK-8015444: java/awt/Focus/KeyStrokeTest.java sometimes\n      fails\n    + JDK-8064922: [macos] Test javax/swing/JTabbedPane/4624207/\n      /bug4624207.java fails\n    + JDK-8068293: [TEST_BUG] Test closed/com/sun/java/swing/plaf/\n      /motif/InternalFrame/4150591/bug4150591.java fails with\n      GTKLookAndFeel\n    + JDK-8068310: [TEST_BUG] Test javax/swing/JColorChooser/\n      /Test4234761.java fails with GTKL\u0026F\n    + JDK-8144124: [macosx] The tabs can't be aligned when we\n      pressing the key of 'R','B','L','C' or 'T'.\n    + JDK-8203004: UnixMultiResolutionSplashTest.java fails on\n      Ubuntu16.04\n    + JDK-8213530: Test java/awt/Modal/ToFront/\n      /DialogToFrontModeless1Test.java fails on Linux\n    + JDK-8221451: PIT: sun/java2d/X11SurfaceData/\n      /SharedMemoryPixmapsTest/SharedMemoryPixmapsTest.sh fails\n    + JDK-8225787: java/awt/Window/GetScreenLocation/\n      /GetScreenLocationTest.java fails on Ubuntu\n    + JDK-8241066: Shenandoah: fix or cleanup SH::do_full_collection\n    + JDK-8261743: Shenandoah: enable String deduplication with\n      compact heuristics\n    + JDK-8264851: Shenandoah: Rework control loop mechanics to use\n      timed waits\n    + JDK-8278102: containers/docker/TestJcmd.java failed with\n      'RuntimeException: Could not find specified process'\n    + JDK-8279196: Test: jdk/jfr/event/gc/stacktrace/\n      /TestG1OldAllocationPendingStackTrace.java timed out\n    + JDK-8297191: [macos] Printing a page range with starting\n      page \u003e 1 results in missing pages\n    + JDK-8298823: [macos] java/awt/Mouse/EnterExitEvents/\n      /DragWindowTest.java continues to fail with 'No MouseReleased\n      event on label!'\n    + JDK-8319326: GC: Make TestParallelRefProc use\n      createTestJavaProcessBuilder\n    + JDK-8319540: GC: Make TestSelectDefaultGC use\n      createTestJavaProcessBuilder\n    + JDK-8321303: Intermittent open/test/jdk/java/awt/\n      /KeyboardFocusmanager/ConsumeNextMnemonicKeyTypedTest/\n      /ConsumeNextMnemonicKeyTypedTest.java failure on Linux\n    + JDK-8321687: Test vmTestbase/nsk/jvmti/scenarios/contention/\n      /TC03/tc03t002/TestDescription.java failed:\n      JVMTI_ERROR_THREAD_NOT_ALIVE\n    + JDK-8323792: ThreadSnapshot::initialize can cause assert in\n      Thread::check_for_dangling_thread_pointer (possibility of\n      dangling Thread pointer)\n    + JDK-8325482: Test that distinct seeds produce distinct traces\n      for compiler stress flags\n    + JDK-8335355: Shenandoah: Fix race condition in gc/shenandoah/\n      /mxbeans/TestPauseNotifications.java\n    + JDK-8339526: C2: store incorrectly removed for clone()\n      transformed to series of loads/stores\n    + JDK-8340182: Java HttpClient does not follow default retry\n      limit of 3 retries\n    + JDK-8341735: Rewrite the build/AbsPathsInImage.java test to\n      not load the entire file at once\n    + JDK-8344345: test/hotspot/gtest/x86/x86-asmtest.py has\n      trailing whitespaces\n    + JDK-8345631: TestRegionSamplingLogging.java\n      #generational-rotation intermittent fails\n    + JDK-8347167: Reduce allocation in\n      com.sun.net.httpserver.Headers::normalize\n    + JDK-8347938: Add Support for the Latest ML-KEM and ML-DSA\n      Private Key Encodings\n    + JDK-8351010: Test java/io/File/GetXSpace.java failed: / usable\n      space 56380809216 \u003e free space 14912244940\n    + JDK-8352914: Shenandoah: Change definition of\n      ShenandoahSharedValue to int32_t to leverage platform atomics\n    + JDK-8353115: GenShen: mixed evacuation candidate regions need\n      accurate live_data\n    + JDK-8354650: [PPC64] Try to reduce register definitions\n    + JDK-8355339: Test java/io/File/GetCanonicalPath.java failed:\n      The specified network name is no longer available\n    + JDK-8357086: os::xxx functions returning memory size should\n      return size_t\n    + JDK-8358600: Template-Framework Library: Template for\n      TestFramework test class\n    + JDK-8358772: Template-Framework Library: Primitive Types\n    + JDK-8359083: Test jdkCheckHtml.java should report\n      SkippedException rather than report fails when miss tidy\n    + JDK-8359223: HttpClient: Remove leftovers from the\n      SecurityManager cleanup\n    + JDK-8359412: Template-Framework Library: Operations and\n      Expressions\n    + JDK-8359433: The final modifier on Windows L\u0026F internal UI\n      classes prevents extending them in apps\n    + JDK-8361339: Test gc/shenandoah/TestLargeObjectAlignment.java\n      #generational fails on macOS aarch64 with OOM: Java heap space\n    + JDK-8361606: ConsumeNextMnemonicKeyTypedTest.java fails on\n      Windows: character typed with VK_A: a\n    + JDK-8361699: C2: assert(can_reduce_phi(n-\u003eas_Phi())) failed:\n      Sanity: previous reducible Phi is no longer reducible before\n      SUT\n    + JDK-8361726: Shenandoah: More detailed evacuation\n      instrumentation\n    + JDK-8362428: Update IANA Language Subtag Registry to Version\n      2025-08-25\n    + JDK-8363943: ARM32: Represent Registers as values\n    + JDK-8363949: Incorrect jtreg header in\n      MonitorWithDeadObjectTest.java\n    + JDK-8363986: Heap region in CDS archive is not at\n      deterministic address\n    + JDK-8364315: Remove unused xml files from test/jaxp/javax/xml/\n      /jaxp/functional/javax/xml/transform/xmlfiles\n    + JDK-8364657: Crash for SecureRandom.generateSeed(0) on Windows\n      x86-64\n    + JDK-8364927: Add @requires annotation to\n      TestReclaimStringsLeaksMemory.java\n    + JDK-8365057: Add support for java.util.concurrent lock\n      information to Thread.dump_to_file\n    + JDK-8365379: SU3.applyInsets may produce wrong results\n    + JDK-8365423: [macos26] java/awt/MenuBar/8007006/\n      /bug8007006.java fails on macOS 26\n    + JDK-8365424: [macos26] java/awt/Frame/DisposeTest.java fails\n      on macOS 26\n    + JDK-8365623: test/jdk/sun/security/pkcs11/tls/ tests skipped\n      without skip exception\n    + JDK-8365625: Can't change accelerator colors in Windows L\u0026F\n    + JDK-8365792: GenShen: assertion 'Generations aren't\n      reconciled'\n    + JDK-8366692: Several gc/shenandoah tests timed out\n    + JDK-8366695: Test sun/jvmstat/monitor/MonitoredVm/\n      /MonitorVmStartTerminate.java timed out\n    + JDK-8366852: java/awt/Choice/ChoiceMouseWheelTest/\n      /ChoiceMouseWheelTest.java test is failing\n    + JDK-8367096: jdk/open/test/jdk/sun/security/pkcs11/ rsa, ec,\n      config, secmod and sslecc tests are skipping but showing as\n      pass\n    + JDK-8367450: Shenandoah: Log the composition of the collection\n      set\n    + JDK-8367451: GenShen: Remove the option to compute age census\n      during evacuation\n    + JDK-8367473: Shenandoah: Make the detailed evacuation metrics\n      a runtime diagnostic option\n    + JDK-8367485: os::physical_memory is broken in 32-bit JVMs when\n      running on 64-bit OSes\n    + JDK-8367531: Template Framework: use scopes and tokens instead\n      of misbehaving immediate-return-queries\n    + JDK-8367646: [GenShen] Control thread may overwrite gc\n      cancellation cause set by mutator\n    + JDK-8367708: GenShen: Reduce total evacuation burden\n    + JDK-8367709: GenShen: Dirty cards for objects that get\n      promoted by safepoint that intervenes between allocation and\n      stores\n    + JDK-8367722: [GenShen] ShenandoahEvacuationStats is always\n      empty\n    + JDK-8367949: JFR: MethodTrace double-counts methods that catch\n      their own exceptions\n    + JDK-8368001: java/text/Format/NumberFormat/\n      /NumberRoundTrip.java timed out\n    + JDK-8368015: Shenandoah: fix error in computation of average\n      allocation rate\n    + JDK-8368041: Enhance TLS certificate handling\n    + JDK-8368159: Significant performance overhead when started\n      with jdwp agent and unattached debugger\n    + JDK-8368181: ProblemList java/awt/Dialog/ModalExcludedTest/\n      /ModalExcludedTest.java\n    + JDK-8368307: Shenandoah: get_next_bit_impl should special case\n      weak and strong mark bits\n    + JDK-8368499: GenShen: Do not collect age census during evac\n      when adaptive tenuring is disabled\n    + JDK-8368501: Shenandoah: GC progress evaluation does not use\n      generation\n    + JDK-8368524: Tests are skipped and shown as passed in test/\n      /jdk/sun/security/pkcs11/Cipher/KeyWrap\n    + JDK-8368681: Shenandoah: Add documentation comments for\n      ShenandoahAllocationRate\n    + JDK-8369128: ProblemList jdk/jfr/event/profiling/\n      /TestCPUTimeSampleQueueAutoSizes.java in Xcomp configs\n    + JDK-8369132: Disable vmTestbase/gc/vector/CircularListLow and\n      LinearListLow with SerialGC\n    + JDK-8369133: Disable gc/g1/TestShrinkAuxiliaryDataRunner.java\n      with UseLargePages option\n    + JDK-8369251: Opensource few tests\n    + JDK-8369561: sun/java2d/OpenGL/DrawBitmaskImage.java#id0:\n      Incorrect color for first pixel (actual=ff000000)\n    + JDK-8369683: Exclude runtime/Monitor/\n      /MonitorWithDeadObjectTest.java#DumpThreadsBeforeDetach on\n      Alpine Linux debug\n    + JDK-8369736: Add management interface for AOT cache creation\n    + JDK-8369817: [TESTBUG] EmptyPath::toString is ignored\n    + JDK-8369912: [TESTBUG] testlibrary_tests/template_framework/\n      /examples/TestExpressions.java fails with ArithmeticException:\n      / by zero - forgot to respect Expression.info\n    + JDK-8369950: TLS connection to IPv6 address fails with BCJSSE\n      due to IllegalArgumentException\n    + JDK-8370370: Add still more cases to WorstCaseTests\n    + JDK-8370489: Some compiler tests miss the @key randomness\n    + JDK-8370502: C2: segfault while adding node to IGVN worklist\n    + JDK-8370521: GenShen: Various code cleanup related to\n      promotion\n    + JDK-8370939: C2: SIGSEGV in SafePointNode::verify_input when\n      processing MH call from\n      Compile::process_late_inline_calls_no_inline()\n    + JDK-8371284: GenShen: Avoid unnecessary card marking\n    + JDK-8371381: [Shenandoah] Setting ergo flags should use\n      FLAG_SET_ERGO\n    + JDK-8371503: RETAIN_IMAGE_AFTER_TEST do not work for some\n      tests\n    + JDK-8371792: Refactor barrier loop tests out of TestIfMinMax\n    + JDK-8371893: [macOS] use dead_strip linker option to reduce\n      binary size\n    + JDK-8372272: Hotspot shared lib loading - add load attempts to\n      Events::log\n    + JDK-8372351: Add 2 WISeKey roots\n    + JDK-8372380: Make hs_err reporting more robust for unattached\n      threads\n    + JDK-8372513: Shenandoah: ShenandoahMaxRegionSize can produce\n      an unaligned heap alignment\n    + JDK-8372851: Modify java/io/File/GetXSpace.java to print path\n      on failure of native call\n    + JDK-8372861: Genshen: Override parallel_region_stride of\n      ShenandoahResetBitmapClosure to a reasonable value for better\n      parallelism\n    + JDK-8373039: Remove Incorrect Asserts in\n      shenandoahScanRemembered\n    + JDK-8373120: Virtual thread stuck in BLOCKED state\n    + JDK-8373239: Test java/awt/print/PrinterJob/PageRanges.java\n      fails with incorrect selection of printed pages\n    + JDK-8373275: Improve DTLS handshaking\n    + JDK-8373515: Migrate 'test/jdk/java/net/httpclient/' to\n      null-safe 'SimpleSSLContext' methods\n    + JDK-8373579: Problem list compiler/runtime/Test7196199.java\n    + JDK-8373650: Test 'javax/swing/JMenuItem/6458123/\n      /ManualBug6458123.java' fails because the check icons are not\n      aligned properly as expected\n    + JDK-8373676: Test javax/net/ssl/HttpsURLConnection/\n      /SubjectAltNameIP.java fails on a machine without IPV6\n    + JDK-8373690: Unexpected Keystore message using\n      jdk.crypto.disabledAlgorithms\n    + JDK-8373714: Shenandoah: Register heuristic penalties\n      following a degenerated GC\n    + JDK-8373718: jdk/internal/misc/VM/RuntimeArguments.java test\n      fails in Virtual threads mode\n    + JDK-8373796: Refactor java/net/httpclient/\n      /ThrowingPublishers*.java tests to use JUnit5\n    + JDK-8373847: Test javax/swing/JMenuItem/MenuItemTest/\n      /bug6197830.java failed because The test case automatically\n      fails when clicking any items in the “Nothing” menu in all\n      four windows (Left-to-right)-Menu Item Test and\n      (Right-to-left)-Menu Item Test\n    + JDK-8373866: Refactor java/net/httpclient/\n      /ThrowingSubscribers*.java tests to use JUnit5\n    + JDK-8373893: Refactor networking http server tests to use\n      JUnit\n    + JDK-8373913: Refactor serialization tests to use JUnit\n    + JDK-8373928: 4 Dangling pointer defect groups in java.c\n    + JDK-8374001: sun/security/ skip without Exceptions\n    + JDK-8374058: Enhance JPEG handling\n    + JDK-8374168: Resolve disabled warnings in JDWP agent\n    + JDK-8374304: MultiResolutionSplashTest.java fails in CI:\n      'Image with wrong resolution is used for splash screen!'\n    + JDK-8374322: TestMemoryWithSubgroups.java fails Permission\n      denied\n    + JDK-8374343: Fix SIGSEGV when lib/modules is unreadable\n    + JDK-8374449: Shenandoah: Leaf locks used by Shenandoah need\n      lower ranks\n    + JDK-8374506: Incorrect positioning of arrow icon in parent\n      JMenu in Windows L\u0026F\n    + JDK-8374712: AOTMappedHeapWriter::relocate_field_in_buffer\n      should use CompressedOops::narrow_oop_cast\n    + JDK-8374727: Audio configuration Platform class - use nio for\n      getting endianness of the underlying platform\n    + JDK-8374744: Enable dumping of APX EGPRs (R16–R31) in JVM\n      fatal error logs\n    + JDK-8374769: PPC: MASM::pop_cont_fastpath() should reset\n      _cont_fastpath if SP == _cont_fastpath\n    + JDK-8374888: Implement internal test cache to help\n      UserIterCount test performance\n    + JDK-8374998: Failing os::write - remove bad file\n    + JDK-8375065: Update LCMS to 2.18\n    + JDK-8375177: Gtest\n      os_linux.decoder_get_source_info_valid_vm fails with\n      -ffunction-sections\n    + JDK-8375294: (fs) Files.copy can fail with EOPNOTSUPP when\n      copy_file_range not supported\n    + JDK-8376031: HttpsURLConnection.getServerCertificates() throws\n      'java.lang.IllegalStateException: connection not yet open' for\n      the HEAD method\n    + JDK-8376104: C2 crashes in PhiNode::Ideal(PhaseGVN*, bool)\n      accessing NULL pointer\n    + JDK-8376151: Test javax/swing/JFileChooser/4966171/\n      /bug4966171.java is failing with OOME\n    + JDK-8376152: Test javax/sound/sampled/Clip/bug5070081.java\n      timed out then completed\n    + JDK-8376185: NoSuchFieldError thrown after a record with type\n      annotation retransformed\n    + JDK-8376233: Clean up code in Desktop native peer\n    + JDK-8376287: Crashes when using -XX:ObjArrayMarkingStride=0\n    + JDK-8376402: Dependencies::print_statistics() and\n      AbstractClassHierarchyWalker::print_statistics() are not\n      called from PRODUCT code\n    + JDK-8376684: Compile OpenJDK in headless mode without required\n      X11 libraries\n    + JDK-8376956: Add JVMTI phase entering/setting to hserr event\n      log\n    + JDK-8376969: Shenandoah: GC state getters should be inlineable\n    + JDK-8376970: Shenandoah: Verifier should do basic verification\n      before touching oops\n    + JDK-8377158: Enhance XBM image support\n    + JDK-8377167: javax/imageio/ReadAbortTest.java throw NPE when\n      x11 unavailable\n    + JDK-8377498: Improve HttpServer handling\n    + JDK-8377512: AOT cache creation fails with invalid native\n      pointer\n    + JDK-8377602: Create automated test for PageRange\n    + JDK-8377727: Ghost caret and focus appear in non‑editable\n      text fields\n    + JDK-8377833: Enhance Jar file processing\n    + JDK-8377907: (process) Race in ProcessBuilder can cause JVM\n      hangs\n    + JDK-8377910: Minor cleanup of java/io/FileDescriptor/\n      /Sharing.java\n    + JDK-8377932: AOT cache is not rejected when JAR file has\n      changed\n    + JDK-8377944: LowMemoryTest2.java#id1 intermittent fails OOME:\n      Metaspace\n    + JDK-8377949: TestZRelocationSetEvent.java intermittent fails\n      OOME\n    + JDK-8378083: Mark shenandoah/generational/\n      /TestOldGrowthTriggers.java as flagless\n    + JDK-8378201: [OGL] glXMakeContextCurrent() drops the buffers\n      of the unbound drawable\n    + JDK-8378417: Printing All pages results in NPE for 1.1\n      PrintJob\n    + JDK-8378561: Mark gc/shenandoah/compiler/\n      /TestLinkToNativeRBP.java as /native\n    + JDK-8378687: Improve delegation of HttpURLConnection\n    + JDK-8378727: [macOS] Missing dispatch_release for semaphores\n      in CDesktopPeer\n    + JDK-8378746: ZGC: jdk/jfr/event/gc/detailed/\n      /TestZRelocationSetGroupEvent.java intermittent OOME\n    + JDK-8378764: fileStream::fileSize() fails for \u003e2GB files on\n      Windows\n    + JDK-8378774: Bump update version for OpenJDK: jdk-25.0.4\n    + JDK-8378810: Enable missing FFM test via jtreg requires for\n      RISC-V\n    + JDK-8378836: Enable linktime-gc by default on Linux ppc64le\n    + JDK-8378878: Refactor java/nio/channels/\n      /AsynchronousSocketChannel test to use JUnit\n    + JDK-8378888: jdk/incubator/vector/\n      /Float16OperationsBenchmark.java uses wrong package name\n    + JDK-8379021: Shenandoah: Speedup ShenandoahSimpleBitMapTest\n    + JDK-8379202: Support linktime-gc on Linux with clang\n    + JDK-8379416: AIX build fails if system (not GNU) date tool is\n      in PATH\n    + JDK-8379425: Windows and macOS should not allow unsupported\n      headless-only build\n    + JDK-8379457: Test EATests.java#id0 ERROR: monitor list errors:\n      error_cnt=1\n    + JDK-8379464: Enable missing stack walking test via jtreg\n      requires for RISC-V\n    + JDK-8379499: [AIX] headless-only build of libjawt.so fails\n    + JDK-8379515: draft-ietf-lamps-kyber-certificates is now\n      RFC 9935\n    + JDK-8380011: Path-to-gcroots search should not trigger stack\n      overflows\n    + JDK-8380041: PPC: remove POWER6 remnants\n    + JDK-8380222: Refactor test/jdk/java/lang/Character TestNG\n      tests to JUnit\n    + JDK-8380316: Test runtime/os/AvailableProcessors.java fails\n      Invalid argument\n    + JDK-8380409: JVM crashes when -XX:AOTMode=create uses\n      app.aotconf generated with JVMTI agent\n    + JDK-8380428: ProblemList containers/docker/\n      /TestJcmdWithSideCar.java on linux-all\n    + JDK-8380431: Shenandoah: Concurrent modification of\n      stack-chunk objects during evacuation\n    + JDK-8380474: Crash SEGV in ThreadIdTable::lazy_initialize\n      after JDK-8323792\n    + JDK-8380565: PPC64: deoptimization stub should save vector\n      registers\n    + JDK-8380663: Update jcmd man page to include AOT.end_recording\n      diagnostic command\n    + JDK-8380672: Improve certification checking\n    + JDK-8380846: GenShen: Remove the experimental option to\n      disable adaptive tenuring\n    + JDK-8380947: Add pull request template\n    + JDK-8381039: Enhance AWT ImagingLib\n    + JDK-8381049: Enhance Jar handling\n    + JDK-8381205: GHA: Upgrade Node.js 20 to 24\n    + JDK-8381315: compiler/vectorapi/TestVectorReallocation.java\n      fails with -XX:UseAVX=1 after JDK-8380565\n    + JDK-8381382: Shenandoah: assert(capacity \u003e 0) failed: free\n      regions must have allocation capacity\n    + JDK-8381519: Enhance Der Value Handling\n    + JDK-8381796: Enhance Certificate parsing\n    + JDK-8381871: GenShen: ShenandoahGCHeuristics flag not reset\n      after ignoring non-adaptive value\n    + JDK-8381935: Improve numChunks range in the PPC64 CallAranger\n    + JDK-8381937: Make exceptions in\n      Java_sun_security_mscapi_CKeyPairGenerator generateCKeyPair\n      more specific\n    + JDK-8382018: test/jdk/java/nio/file/spi/\n      /SetDefaultProvider.java leaves a directory in /tmp\n    + JDK-8382020: Time Zone Abbreviation Not Localized for\n      Non-English Locales\n    + JDK-8382035: [ubsan] Under UBSAN builds, disable tests that\n      rely on simulated JVM crashes\n    + JDK-8382090: Remove .rej and .orig from .gitignore\n    + JDK-8382242: JFR: Metadata reconstruction invalidates\n      ConstantMap for java.lang.String\n    + JDK-8382295: Shenandoah: wrong denominator in full gc summary\n    + JDK-8382395: Disable stringop-overflow in\n      shenandoahGenerationalHeap.cpp\n    + JDK-8382419: Add missed @key randomness after JDK-8370489\n    + JDK-8382522: Disable stringop-overflow in\n      safepointMechanism.cpp\n    + JDK-8382740: JFR: Disable jdk.OldObjectSample event for\n      generational ZGC\n    + JDK-8382878: RISC-V: Missing InlineSkippedInstructionsCounter\n      in ZGC barriers stubs\n    + JDK-8382932: [25u] Test java/lang/instrument/\n      /RetransformRecordTypeAnn/TestRetransformRecord.java‎ fails\n      with compilation error\n    + JDK-8383161: [PPC64]\n      MachCallDynamicJavaNode::ret_addr_offset() needs adaptation\n      for COH\n    + JDK-8383175: (tz) Update Timezone Data to 2026b\n    + JDK-8383183: Shenandoah: Mangle trashed regions up to top\n      instead of end\n    + JDK-8383354: Update LCMS to 2.19.1\n    + JDK-8383473: Follow on from tzdata2026b time change to\n      include temporary hack BC time change\n    + JDK-8383601: RISC-V:\n      ShenandoahBarrierSetAssembler::load_reference_barrier calls\n      'weak' on 'phantom' path\n    + JDK-8383630: Fix iteration in tests doing class redefinition\n    + JDK-8384043: [REDO] Incorrect handling of Hawaii_Aleutian\n      metazone\n    + JDK-8384158: GHA: Downgrade Windows GHA runners to\n      windows-2022 temporarily\n    + JDK-8384163: (so) SocketChannel.connect and finishConnect()\n      exception messages could be improved\n    + JDK-8384223: RISC-V: entry_barrier_offset should consider\n      UseZtso\n    + JDK-8384486: NTLM tests fail on Windows 11 and Windows Server\n      2025\n    + JDK-8384495: Update Libpng to 1.6.58\n    + JDK-8384540: [25u, 21u, 17u] Update GHA JDKs after Apr/26\n      updates\n    + JDK-8384815: SelectOneKeyOutOfMany and PreferredKey fail after\n      expired test certificate\n    + JDK-8384902: Update GIFlib to 6.1.3\n    + JDK-8385390: Update FreeType to 2.14.3\n    + JDK-8385490: Update HarfBuzz to 14.2.0\n    + JDK-8386551: Windows build broken because of MSys2/Make update\n","status":"published","published":"2026-07-28T09:36:57Z","modified":"2026-07-29T18:24:24.939243905Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3332-1","title":"Security update for java-21-openjdk","description":"This update for java-21-openjdk fixes the following issues:\n\nUpdate to upstream tag jdk-21.0.12+8 (July 2026 CPU).\n\nSecurity issues fixed:\n\n- CVE-2026-41254: lcms: information disclosure and denial of service via integer overflow in `CubeSize` (bsc#1264994).\n- CVE-2026-46917: unauthenticated attacker with network access via TLS can cause a partial denial of service\n  (bsc#1272223).\n- CVE-2026-46968: unauthenticated attacker with network access via TLS can gain unauthorized creation, deletion or\n  modification access to critical data(bsc#1272224).\n- CVE-2026-47010: unauthenticated attacker with network access via multiple protocols can gain unauthorized update,\n  insert or delete access to some data (bsc#1272225).\n- CVE-2026-47021: unauthenticated attacker with network access via multiple protocols can cause a partial denial of\n  service (bsc#1272227).\n- CVE-2026-47027: unauthenticated attacker with network access via multiple protocols can cause a partial denial of\n  service (bsc#1272228).\n- CVE-2026-47059: unauthenticated attacker with network access via multiple protocols can cause a partial denial of\n  service (bsc#1272235).\n- CVE-2026-47063: unauthenticated attacker with network access via multiple protocols can gain unauthorized creation,\n  deletion or modification access to critical data (bsc#1272236).\n- CVE-2026-60147: unauthenticated attacker with network access via multiple protocols can gain unauthorized update,\n  insert, delete and read access to some(bsc#1272237).\n\nOther updates and bugfixes:\n\n- Errors from update-alternatives when installing java-25-openjdk (bsc#1267355).\n- Make post scripts less noisy (bsc#1267355).\n- Use libalternatives instead of update-alternatives for distributions where libalternatives is available.\n- Update to upstream tag jdk-21.0.12+8 (July 2026 CPU):    \n    + JDK-7184899: Test sun/java2d/X11SurfaceData/\n      /SharedMemoryPixmapsTest/SharedMemoryPixmapsTest.sh fail\n    + JDK-8015444: java/awt/Focus/KeyStrokeTest.java sometimes fails\n    + JDK-8064922: [macos] Test javax/swing/JTabbedPane/4624207/\n      /bug4624207.java fails\n    + JDK-8068293: [TEST_BUG] Test closed/com/sun/java/swing/plaf/\n      /motif/InternalFrame/4150591/bug4150591.java fails with\n      GTKLookAndFeel\n    + JDK-8068310: [TEST_BUG] Test javax/swing/JColorChooser/\n      /Test4234761.java fails with GTKL\u0026F\n    + JDK-8068378: [TEST_BUG]The java/awt/Modal/PrintDialogsTest/\n      /PrintDialogsTest.java instruction need to update\n    + JDK-8129418: JShell: better highlighting of errors in imports\n      on demand\n    + JDK-8144124: [macosx] The tabs can't be aligned when we\n      pressing the key of 'R','B','L','C' or 'T'.\n    + JDK-8183336: Better cleanup for jdk/test/java/lang/module/\n      /customfs/ModulesInCustomFileSystem.java\n    + JDK-8203004: UnixMultiResolutionSplashTest.java fails on\n      Ubuntu16.04\n    + JDK-8212084: G1: Implement UseGCOverheadLimit\n    + JDK-8213530: Test java/awt/Modal/ToFront/\n      /DialogToFrontModeless1Test.java fails on Linux\n    + JDK-8221451: PIT: sun/java2d/X11SurfaceData/\n      /SharedMemoryPixmapsTest/SharedMemoryPixmapsTest.sh fails\n    + JDK-8225787: java/awt/Window/GetScreenLocation/\n      /GetScreenLocationTest.java fails on Ubuntu\n    + JDK-8255463: java/nio/channels/spi/SelectorProvider/\n      /inheritedChannel/InheritedChannelTest.java failed with\n      ThreadTimeoutException\n    + JDK-8274082: Wrong test name in jtreg run tag for\n      java/awt/print/PrinterJob/SwingUIText.java\n    + JDK-8277444: Data race between\n      JvmtiClassFileReconstituter::copy_bytecodes and class linking\n    + JDK-8278102: containers/docker/TestJcmd.java failed with\n      'RuntimeException: Could not find specified process'\n    + JDK-8286258: [Accessibility,macOS,VoiceOver] VoiceOver reads\n      the spinner value wrong and sometime partially\n    + JDK-8286865: vmTestbase/vm/mlvm/meth/stress/jni/nativeAndMH/\n      /Test.java fails with Out of space in CodeCache\n    + JDK-8293484: AArch64:\n      TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails on CPU\n      with SHA512 feature support\n    + JDK-8297191: [macos] Printing a page range with starting\n      page \u003e 1 results in missing pages\n    + JDK-8298783: java/lang/ref/FinalizerHistogramTest.java failed\n      with 'RuntimeException: MyObject is not found in test output'\n    + JDK-8298823: [macos] java/awt/Mouse/EnterExitEvents/\n      /DragWindowTest.java continues to fail with 'No MouseReleased\n      event on label!'\n    + JDK-8299304: Test 'java/awt/print/PrinterJob/\n      /PageDialogTest.java' fails on macOS 13 x64 because the Page\n      Dialog blocks the Toolkit\n    + JDK-8310645: CancelledResponse.java does not use HTTP/2 when\n      testing the HttpClient\n    + JDK-8311538: CDS InternSharedString test fails on huge pages\n      host - cannot find shared string\n    + JDK-8315588: JShell does not accept underscore from JEP 443\n      even with --enable-preview\n    + JDK-8318365: Test runtime/cds/appcds/sharedStrings/\n      /InternSharedString.java fails after JDK-8311538\n    + JDK-8318662: Refactor some jdk/java/net/httpclient/http2 tests\n      to JUnit\n    + JDK-8319326: GC: Make TestParallelRefProc use\n      createTestJavaProcessBuilder\n    + JDK-8319540: GC: Make TestSelectDefaultGC use\n      createTestJavaProcessBuilder\n    + JDK-8320677: Printer tests use invalid '@run main/manual=yesno\n    + JDK-8321303: Intermittent open/test/jdk/java/awt/\n      /KeyboardFocusmanager/ConsumeNextMnemonicKeyTypedTest/\n      /ConsumeNextMnemonicKeyTypedTest.java failure on Linux\n    + JDK-8321687: Test vmTestbase/nsk/jvmti/scenarios/contention/\n      /TC03/tc03t002/TestDescription.java failed:\n      JVMTI_ERROR_THREAD_NOT_ALIVE\n    + JDK-8322532: JShell : Unnamed variable issue\n    + JDK-8323089: networkaddress.cache.ttl is not a system property\n    + JDK-8323545: java/awt/GraphicsDevice/CheckDisplayModes.java\n      fails with 'exit code: 133'\n    + JDK-8323672: Suppress unwanted autoconf added flags in CC and\n      CXX\n    + JDK-8323792: ThreadSnapshot::initialize can cause assert in\n      Thread::check_for_dangling_thread_pointer (possibility of\n      dangling Thread pointer)\n    + JDK-8326458: Menu mnemonics don't toggle in Windows LAF when\n      F10 is pressed\n    + JDK-8328300: Convert PrintDialogsTest.java from Applet to main\n      program\n    + JDK-8329273: C2 SuperWord: Some basic MemorySegment IR tests\n    + JDK-8330704: Clean up non-standard use of /** comments in some\n      langtools tests\n    + JDK-8330806: test/hotspot/jtreg/compiler/c1/\n      /TestLargeMonitorOffset.java fails on ARM32\n    + JDK-8332495: java/util/logging/LoggingDeadlock2.java fails\n      with AssertionError: Some tests failed\n    + JDK-8333729: C2 SuperWord: remove some @requires usages in\n      test/hotspot/jtreg/compiler/loopopts/superword\n    + JDK-8334928: Test sun/security/ssl/SSLSocketImpl/\n      /ReuseAddr.java failed: java.net.BindException: Address\n      already in use\n    + JDK-8338103: Stabilize and open source a Swing OGL\n      ButtonResizeTest\n    + JDK-8338554: Fix inconsistencies in javadoc/doclet/\n      /testLinkOption/TestRedirectLinks.java\n    + JDK-8338883: Show warning when CreateCoredumpOnCrash set, but\n      core dump will not happen\n    + JDK-8339233: Test javax/swing/JButton/\n      /SwingButtonResizeTestWithOpenGL.java#id failed: Button\n      renderings are different after window resize\n    + JDK-8339638: Update vmTestbase/nsk/jvmti/*Field*Watch tests to\n      use virtual thread factory\n    + JDK-8339879: Open some dialog awt tests\n    + JDK-8339975: Open some dialog awt tests 2\n    + JDK-8340140: Open some dialog awt tests 3\n    + JDK-8340336: Open some checkbox awt tests\n    + JDK-8340494: Open some dialog awt tests 4\n    + JDK-8340818: Add a new jtreg test root to test the generated\n      documentation\n    + JDK-8340851: Open some TextArea awt tests\n    + JDK-8340987: Open some TextArea awt tests 1\n    + JDK-8341055: Open some TextArea awt tests 2\n    + JDK-8341292: Open some TextArea awt tests 3\n    + JDK-8341376: Open some TextArea awt tests 4\n    + JDK-8341427: JFR: Adjust object sampler span handling\n    + JDK-8341436: containers/docker/TestJcmdWithSideCar.java takes\n      needlessly long to run\n    + JDK-8341833: incomplete snippet from loaded files from command\n      line is ignored\n    + JDK-8342401: [TESTBUG] javax/swing/JSpinner/8223788/\n      /JSpinnerButtonFocusTest.java test fails in ubuntu 22.04 on\n      SBR Hosts\n    + JDK-8342836: Automatically determine that a test in the docs\n      test root is requested\n    + JDK-8344128: Regression: make help broken after JDK-8340818\n    + JDK-8345618: javax/swing/text/Caret/8163124/\n      /CaretFloatingPointAPITest.java leaves Caret is not complete\n    + JDK-8346154: [XWayland] Some tests fail intermittently in the\n      CI, but not locally\n    + JDK-8346683: Problem list automated tests that fail on macOS15\n    + JDK-8347836: Disabled PopupMenu shows shortcuts on Mac\n    + JDK-8349084: Update vectors used in several PQC benchmarks\n    + JDK-8349192: jvmti/scenarios/contention/TC05/tc05t001 fails:\n      ERROR: tc05t001.cpp, 281: (waitedThreadCpuTime -\n      waitThreadCpuTime) \u003c (EXPECTED_ACCURACY * 1000000)\n    + JDK-8349533: Refactor validator tests shell files to java\n    + JDK-8349699: XSL transform fails with certain UTF-8 characters\n      on 1024 byte boundaries\n    + JDK-8349959: Test CR6740048.java passes unexpectedly missing\n      CR6740048.xsd\n    + JDK-8350749: Upgrade JLine to 3.29.0\n    + JDK-8350808: Small typos in JShell method SnippetEvent\n      .toString()\n    + JDK-8352020: [CompileFramework] enable compilation for\n      VectorAPI\n    + JDK-8352147: G1: TestEagerReclaimHumongousRegionsClearMarkBits\n      test takes very long\n    + JDK-8352149: Test java/awt/Frame/MultiScreenTest.java fails:\n      Window list is empty\n    + JDK-8352431: java/net/httpclient/EmptyAuthenticate.java uses\n      'localhost'\n    + JDK-8352685: Opensource JInternalFrame tests - series2\n    + JDK-8352733: Improve RotFontBoundsTest test\n    + JDK-8352877: Opensource Several Font related tests - Batch 1\n    + JDK-8353124: java/lang/Thread/virtual/stress/Skynet.java#Z\n      times out on macosx-x64-debug\n    + JDK-8353488: Open some JComboBox bugs 3\n    + JDK-8353552: Opensource Several Font related tests - Batch 3\n    + JDK-8354163: Open source Swing tests Batch 1\n    + JDK-8354695: Open source several swing tests batch7\n    + JDK-8354900: javax/swing/AbstractButton/bug4133768.java\n      failing on macosx-aarch64\n    + JDK-8354910: Output by java.io.IO or System.console()\n      corrupted for some non-ASCII characters\n    + JDK-8355048: ProblemList TestGlyphVectorLayout.java on all\n      platforms\n    + JDK-8355179: Reinstate javax/swing/JScrollBar/4865918/\n      /bug4865918.java headful and macos run\n    + JDK-8355332: Fix failing semi-manual test EDT issue\n    + JDK-8355371: NegativeArraySizeException in print methods in IO\n      or System.console() in JShell\n    + JDK-8355443: [java.io] Use @requires tag instead of exiting\n      based on File.separatorChar value\n    + JDK-8356695: java/lang/StringBuilder/HugeCapacity.java failing\n      with OOME\n    + JDK-8356868: Not all cgroup parameters are made available\n    + JDK-8357062: Update Public Suffix List to 823beb1\n    + JDK-8357082: Stabilize and add debug logs to CopyAreaOOB.java\n    + JDK-8357086: os::xxx functions returning memory size should\n      return size_t\n    + JDK-8357280: (bf) Remove @requires tags from java/nio/Buffer/\n      /LimitDirectMemory[NegativeTest].java\n    + JDK-8357390: java/awt/Toolkit/ScreenInsetsTest/\n      /ScreenInsetsTest.java Test failing on Ubuntu 24.04 Vm Hosts\n      used by Oracle's internal CI system\n    + JDK-8358058: sun/java2d/OpenGL/DrawImageBg.java Test fails\n      intermittently\n    + JDK-8359364: java/net/URL/EarlyOrDelayedParsing test fails\n      intermittently\n    + JDK-8359472: JVM crashes when attaching a dynamic agent before\n      JVMTI_PHASE_LIVE\n    + JDK-8359978: Test javax/net/ssl/SSLSocket/Tls13PacketSize.java\n      failed again with java.net.SocketException: An established\n      connection was aborted by the software in your host machine\n    + JDK-8360160: ubuntu-22-04 machine is failing client tests\n    + JDK-8360395: sun/security/tools/keytool/i18n.java user country\n      is current user location instead of the language\n    + JDK-8360562: sun/security/tools/keytool/i18n.java add an\n      ability to add comment for failures\n    + JDK-8360702: runtime/Thread/AsyncExceptionTest.java timed out\n    + JDK-8360882: Tests throw SkippedException when they should\n      fail\n    + JDK-8361106: [TEST] com/sun/net/httpserver/Test9.java fails\n      with java.nio.file.FileSystemException\n    + JDK-8361606: ConsumeNextMnemonicKeyTypedTest.java fails on\n      Windows: character typed with VK_A: a\n    + JDK-8361894: sun/security/krb5/config/native/\n      /TestDynamicStore.java ensure that the test is run with sudo\n    + JDK-8362428: Update IANA Language Subtag Registry to Version\n      2025-08-25\n    + JDK-8363943: ARM32: Represent Registers as values\n    + JDK-8363949: Incorrect jtreg header in\n      MonitorWithDeadObjectTest.java\n    + JDK-8364190: JFR: RemoteRecordingStream withers don't work\n    + JDK-8364315: Remove unused xml files from test/jaxp/javax/xml/\n      /jaxp/functional/javax/xml/transform/xmlfiles\n    + JDK-8364756: JFR: Improve slow tests\n    + JDK-8364927: Add @requires annotation to\n      TestReclaimStringsLeaksMemory.java\n    + JDK-8365379: SU3.applyInsets may produce wrong results\n    + JDK-8365398: TEST_BUG: java/rmi/transport/checkLeaseInfoLeak/\n      /CheckLeaseLeak.java failing intermittently\n    + JDK-8365423: [macos26] java/awt/MenuBar/8007006/\n      /bug8007006.java fails on macOS 26\n    + JDK-8365424: [macos26] java/awt/Frame/DisposeTest.java fails\n      on macOS 26\n    + JDK-8365623: test/jdk/sun/security/pkcs11/tls/ tests skipped\n      without skip exception\n    + JDK-8365625: Can't change accelerator colors in Windows L\u0026F\n    + JDK-8365776: Convert JShell tests to use JUnit instead of\n      TestNG\n    + JDK-8365861: test/jdk/sun/security/pkcs11/Provider/ tests\n      skipped without SkippedException\n    + JDK-8365863: /test/jdk/sun/security/pkcs11/Cipher tests skip\n      without SkippedException\n    + JDK-8365893: test/jdk/java/lang/Thread/virtual/JfrEvents.java\n      failing intermittently\n    + JDK-8366031: Mark com/sun/nio/sctp/SctpChannel/\n      /CloseDescriptors.java as intermittent\n    + JDK-8366182: Some PKCS11Tests are being skipped when they\n      shouldn't\n    + JDK-8366369: Add @requires linux for GTK L\u0026F tests\n    + JDK-8366852: java/awt/Choice/ChoiceMouseWheelTest/\n      /ChoiceMouseWheelTest.java test is failing\n    + JDK-8367096: jdk/open/test/jdk/sun/security/pkcs11/ rsa, ec,\n      config, secmod and sslecc tests are skipping but showing as\n      pass\n    + JDK-8367485: os::physical_memory is broken in 32-bit JVMs when\n      running on 64-bit OSes\n    + JDK-8367784: java/awt/Focus/InitialFocusTest/\n      /InitialFocusTest1.java failed with Wrong focus owner\n    + JDK-8368029: Several tests in httpserver/simpleserver should\n      throw SkipException\n    + JDK-8368041: Enhance TLS certificate handling\n    + JDK-8368181: ProblemList java/awt/Dialog/ModalExcludedTest/\n      /ModalExcludedTest.java\n    + JDK-8368335: Refactor the rest of Locale TestNG based tests to\n      JUnit\n    + JDK-8368498: Use JUnit instead of TestNG for jdk_text tests\n    + JDK-8368524: Tests are skipped and shown as passed in\n      test/jdk/sun/security/pkcs11/Cipher/KeyWrap\n    + JDK-8368551: Core dump warning may be confusing\n    + JDK-8368625: com/sun/net/httpserver/\n      /ServerStopTerminationTest.java fails intermittently\n    + JDK-8368670: Deadlock in JFR on event register + class load\n    + JDK-8368754: runtime/cds/appcds/SignedJar.java log regex is\n      too strict\n    + JDK-8368866: compiler/codecache/stress/\n      /UnexpectedDeoptimizationTest.java intermittent timed out\n    + JDK-8368885: NMT CommandLine tests can check for error better\n    + JDK-8368892: Make JEditorPane/TestBrowserBGColor.java headless\n    + JDK-8369251: Opensource few tests\n    + JDK-8369335: Two  sun/java2d/OpenGL tests fail on Windows\n      after JDK-8358058\n    + JDK-8369516: Delete duplicate imaging test\n    + JDK-8369561: sun/java2d/OpenGL/DrawBitmaskImage.java#id0:\n      Incorrect color for first pixel (actual=ff000000)\n    + JDK-8369683: Exclude runtime/Monitor/\n      /MonitorWithDeadObjectTest.java#DumpThreadsBeforeDetach on\n      Alpine Linux debug\n    + JDK-8369851: Remove darcy author tags from langtools tests\n    + JDK-8369950: TLS connection to IPv6 address fails with BCJSSE\n      due to IllegalArgumentException\n    + JDK-8370378: Some compiler tests inadvertently exclude\n      particular platforms\n    + JDK-8370489: Some compiler tests miss the @key randomness\n    + JDK-8370492: [Linux] Update cpu shares to cpu.weight mapping\n      function\n    + JDK-8370511: test/jdk/javax/swing/JSlider/bug4382876.java does\n      not release previously pressed keys\n    + JDK-8370732: Use WhiteBox.getWhiteBox().fullGC() to provoking\n      gc for nsk/jvmti tests\n    + JDK-8370905: Update vm.defmeth tests to use virtual threads\n    + JDK-8370942: test/jdk/java/security/Provider/NewInstance.java\n      and /test/jdk/java/security/cert/CertStore/NoLDAP.java may\n      skip without notifying\n    + JDK-8371262: sun/security/pkcs11/Cipher/KeyWrap tests may\n      silently skip\n    + JDK-8371349: Update NSS library to 3.117\n    + JDK-8371364: Refactor javax/swing/JFileChooser/\n      /FileSizeCheck.java to use Util.findComponent()\n    + JDK-8371365: Update javax/swing/JFileChooser/bug4759934.java\n      to use Util.findComponent()\n    + JDK-8371366: java/net/httpclient/whitebox/\n      /RawChannelTestDriver.java fails intermittently in jtreg\n      timeout\n    + JDK-8371383: Test sun/security/tools/jarsigner/\n      /DefaultOptions.java failed due to\n      CertificateNotYetValidException\n    + JDK-8371503: RETAIN_IMAGE_AFTER_TEST do not work for some\n      tests\n    + JDK-8371895: Lower GCTimeLimit in TestUseGCOverheadLimit.java\n    + JDK-8371967: Add Visual Studio 2026 to build toolchain for\n      Windows\n    + JDK-8372120: Add missing sound keyword to MIDI tests\n    + JDK-8372272: Hotspot shared lib loading - add load attempts to\n      Events::log\n    + JDK-8372351: Add 2 WISeKey roots\n    + JDK-8372609: Bug4944439 does not enforce locale correctly\n    + JDK-8372661: Add a null-safe static factory method to\n      'jdk.test.lib.net.SimpleSSLContext'\n    + JDK-8373101: JdkClient and JdkServer test classes ignore\n      namedGroups field\n    + JDK-8373239: Test java/awt/print/PrinterJob/PageRanges.java\n      fails with incorrect selection of printed pages\n    + JDK-8373275: Improve DTLS handshaking\n    + JDK-8373537: Migrate 'test/jdk/com/sun/net/httpserver/' to\n      null-safe 'SimpleSSLContext' methods\n    + JDK-8373593: Support latest  VS2026 MSC_VER in\n      abstract_vm_version.cpp\n    + JDK-8373623: Refactor Serialization tests for Records to JUnit\n    + JDK-8373632: Some sound tests failing in CI due to lack of\n      sound key\n    + JDK-8373650: Test 'javax/swing/JMenuItem/6458123/\n      /ManualBug6458123.java' fails because the check icons are not\n      aligned properly as expected\n    + JDK-8373690: Unexpected Keystore message using\n      jdk.crypto.disabledAlgorithms\n    + JDK-8373704: Improve 'SocketException: Protocol family\n      unavailable' message\n    + JDK-8373716: Refactor further java/util tests from TestNG to\n      JUnit\n    + JDK-8373793: TestDynamicStore.java '/manual' disables use of\n      '/timeout'\n    + JDK-8373796: Refactor java/net/httpclient/\n      /ThrowingPublishers*.java tests to use JUnit5\n    + JDK-8373807: test/jdk/java/net/httpclient/websocket/\n      /DummyWebSocketServer.java getURI() uses 'localhost'\n    + JDK-8373832: Test java/lang/invoke/TestVHInvokerCaching.java\n      tests nothing\n    + JDK-8373847: Test javax/swing/JMenuItem/MenuItemTest/\n      /bug6197830.java failed because The test case automatically\n      fails when clicking any items in the “Nothing” menu in all\n      four windows (Left-to-right)-Menu Item Test and\n      (Right-to-left)-Menu Item Test\n    + JDK-8373866: Refactor java/net/httpclient/\n      /ThrowingSubscribers*.java tests to use JUnit5\n    + JDK-8373869: Refactor java/net/httpclient/\n      /ThrowingPushPromises*.java tests to use JUnit5\n    + JDK-8373928: 4 Dangling pointer defect groups in java.c\n    + JDK-8373931: Test javax/sound/sampled/Clip/\n      /AutoCloseTimeCheck.java timed out\n    + JDK-8374058: Enhance JPEG handling\n    + JDK-8374304: MultiResolutionSplashTest.java fails in CI:\n      'Image with wrong resolution is used for splash screen!'\n    + JDK-8374322: TestMemoryWithSubgroups.java fails Permission\n      denied\n    + JDK-8374434: Several JShell tests report JUnit discovery\n      warnings\n    + JDK-8374506: Incorrect positioning of arrow icon in parent\n      JMenu in Windows L\u0026F\n    + JDK-8374711: Hotspot runtime/CommandLine/OptionsValidation/\n      /TestOptionsWithRanges fails without printing the option name\n    + JDK-8374769: PPC: MASM::pop_cont_fastpath() should reset\n      _cont_fastpath if SP == _cont_fastpath\n    + JDK-8374888: Implement internal test cache to help\n      UserIterCount test performance\n    + JDK-8374998: Failing os::write - remove bad file\n    + JDK-8375065: Update LCMS to 2.18\n    + JDK-8375080: The tools/jpackage/windows/Win8365790Test.java\n      may fail with ClassNotFoundException: jtreg.SkippedException\n    + JDK-8375231: Refactor util/ServiceLoader tests to use JUnit\n    + JDK-8375232: Refactor util/StringJoiner tests to use JUnit\n    + JDK-8375233: Refactor util/Vector tests to use JUnit\n    + JDK-8375742: Test java/lang/invoke/MethodHandleProxies/\n      /Driver.java does not run Unnamed.java\n    + JDK-8376031: HttpsURLConnection.getServerCertificates() throws\n      'java.lang.IllegalStateException: connection not yet open' for\n      the HEAD method\n    + JDK-8376151: Test javax/swing/JFileChooser/4966171/\n      /bug4966171.java is failing with OOME\n    + JDK-8376152: Test javax/sound/sampled/Clip/bug5070081.java\n      timed out then completed\n    + JDK-8376233: Clean up code in Desktop native peer\n    + JDK-8376889: Enhance JfrRecorder::on_create_vm_3() assert\n      output\n    + JDK-8377158: Enhance XBM image support\n    + JDK-8377167: javax/imageio/ReadAbortTest.java throw NPE when\n      x11 unavailable\n    + JDK-8377347: jdk/jfr/event/gc/detailed/\n      /TestZAllocationStallEvent.java intermittent OOME\n    + JDK-8377498: Improve HttpServer handling\n    + JDK-8377602: Create automated test for PageRange\n    + JDK-8377727: Ghost caret and focus appear in non‑editable text\n      fields\n    + JDK-8377833: Enhance Jar file processing\n    + JDK-8377910: Minor cleanup of java/io/FileDescriptor/\n      /Sharing.java\n    + JDK-8377944: LowMemoryTest2.java#id1 intermittent fails OOME:\n      Metaspace\n    + JDK-8378113: Add sun/java2d/OpenGL/ScaleParamsOOB.java to the\n      ProblemList.txt file\n    + JDK-8378201: [OGL] glXMakeContextCurrent() drops the buffers\n      of the unbound drawable\n    + JDK-8378353: [PPC64] StringCoding.countPositives causes errors\n      when the length is not a proper 32 bit int\n    + JDK-8378417: Printing All pages results in NPE for 1.1\n      PrintJob\n    + JDK-8378561: Mark gc/shenandoah/compiler/\n      /TestLinkToNativeRBP.java as /native\n    + JDK-8378687: Improve delegation of HttpURLConnection\n    + JDK-8378775: Bump update version for OpenJDK: jdk-21.0.12\n    + JDK-8378802: [21u] backport changes to TKit.java by\n      JDK-8352419\n    + JDK-8378810: Enable missing FFM test via jtreg requires for\n      RISC-V\n    + JDK-8378878: Refactor java/nio/channels/\n      /AsynchronousSocketChannel test to use JUnit\n    + JDK-8379464: Enable missing stack walking test via jtreg\n      requires for RISC-V\n    + JDK-8380011: Path-to-gcroots search should not trigger stack\n      overflows\n    + JDK-8380222: Refactor test/jdk/java/lang/Character TestNG\n      tests to JUnit\n    + JDK-8380316: Test runtime/os/AvailableProcessors.java fails\n      Invalid argument\n    + JDK-8380428: ProblemList containers/docker/\n      /TestJcmdWithSideCar.java on linux-all\n    + JDK-8380474: Crash SEGV in ThreadIdTable::lazy_initialize\n      after JDK-8323792\n    + JDK-8380565: PPC64: deoptimization stub should save vector\n      registers\n    + JDK-8380672: Improve certification checking\n    + JDK-8380947: Add pull request template\n    + JDK-8381039: Enhance AWT ImagingLib\n    + JDK-8381049: Enhance Jar handling\n    + JDK-8381205: GHA: Upgrade Node.js 20 to 24\n    + JDK-8381315: compiler/vectorapi/TestVectorReallocation.java\n      fails with -XX:UseAVX=1 after JDK-8380565\n    + JDK-8381519: Enhance Der Value Handling\n    + JDK-8381796: Enhance Certificate parsing\n    + JDK-8382018: test/jdk/java/nio/file/spi/\n      /SetDefaultProvider.java leaves a directory in /tmp\n    + JDK-8382242: JFR: Metadata reconstruction invalidates\n      ConstantMap for java.lang.String\n    + JDK-8382419: Add missed @key randomness after JDK-8370489\n    + JDK-8383175: (tz) Update Timezone Data to 2026b\n    + JDK-8383185: [21u] Backport of JDK-8382925 causes test failure\n      in SetDefaultProvider\n    + JDK-8383354: Update LCMS to 2.19.1\n    + JDK-8383473: Follow on from tzdata2026b time change to include\n      temporary hack BC time change\n    + JDK-8383601: RISC-V:\n      ShenandoahBarrierSetAssembler::load_reference_barrier calls\n      'weak' on 'phantom' path\n    + JDK-8383630: Fix iteration in tests doing class redefinition\n    + JDK-8384158: GHA: Downgrade Windows GHA runners to\n      windows-2022 temporarily\n    + JDK-8384486: NTLM tests fail on Windows 11 and Windows Server\n      2025\n    + JDK-8384495: Update Libpng to 1.6.58\n    + JDK-8384540: [25u, 21u, 17u] Update GHA JDKs after Apr/26\n      updates\n    + JDK-8384815: SelectOneKeyOutOfMany and PreferredKey fail after\n      expired test certificate\n    + JDK-8384902: Update GIFlib to 6.1.3\n    + JDK-8385390: Update FreeType to 2.14.3\n    + JDK-8385490: Update HarfBuzz to 14.2.0\n    + JDK-8386551: Windows build broken because of MSys2/Make update\n","status":"published","published":"2026-07-28T09:37:58Z","modified":"2026-07-29T18:24:25.21611267Z","updated_at":"2026-11-02T15:54:04.987808Z"}]},"sources_more":{"osv":10}}