{"id":"CVE-2026-70906","aliases":["ALSA-2026:55798","BELL-CVE-2026-70906","BIT-java-2026-70906","BIT-java-min-2026-70906","BIT-jre-2026-70906","DEBIAN-CVE-2026-70906","EUVD-2026-61855","GHSA-969j-f8m5-xpgq","RHSA-2026:55798","RHSA-2026:57177","RHSA-2026:57765","RLSA-2026:55798","SUSE-SU-2026:23591-1","SUSE-SU-2026:3999-1","SUSE-SU-2026:4107-1","SUSE-SU-2026:4153-1","UBUNTU-CVE-2026-70906","USN-8783-1","openSUSE-SU-2026:11621-1","openSUSE-SU-2026:11639-1","openSUSE-SU-2026:11640-1","openSUSE-SU-2026:11641-1","openSUSE-SU-2026:11642-1","openSUSE-SU-2026:11643-1","openSUSE-SU-2026:21714-1"],"status":"published","title":"Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle...","description":"Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 25.0.4 and 26.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0046,"percentile":0.40133,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2026-08-18T21:02:27Z","modified":"2026-11-02T22:00:09Z","fixes":[{"ecosystem":"Alpaquita:23","package":"openjdk-nik-25-25","fixed_in":["25.0.4.1-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk25","fixed_in":["25.0.4.1_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk25-container-jre","fixed_in":["25.0.4.1_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk25-lite","fixed_in":["25.0.4.1_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk26","fixed_in":["26.0.2.1_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk26-container-jre","fixed_in":["26.0.2.1_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk26-lite","fixed_in":["26.0.2.1_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk-nik-25-25","fixed_in":["25.0.4.1-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk25","fixed_in":["25.0.4.1_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk25-container-jre","fixed_in":["25.0.4.1_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk25-lite","fixed_in":["25.0.4.1_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk26","fixed_in":["26.0.2.1_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk26-container-jre","fixed_in":["26.0.2.1_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk26-lite","fixed_in":["26.0.2.1_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk-nik-25-25","fixed_in":["25.0.4.1-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk25","fixed_in":["25.0.4.1_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk25-container-jre","fixed_in":["25.0.4.1_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk25-lite","fixed_in":["25.0.4.1_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk26","fixed_in":["26.0.2.1_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk26-container-jre","fixed_in":["26.0.2.1_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk26-lite","fixed_in":["26.0.2.1_p1-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk-nik-25-25","fixed_in":["25.0.4.1-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk25-container-jre","fixed_in":["25.0.4.1_p1-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk25-lite","fixed_in":["25.0.4.1_p1-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk26-container-jre","fixed_in":["26.0.2.1_p1-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk26-lite","fixed_in":["26.0.2.1_p1-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk-nik-25-25","fixed_in":["25.0.4.1-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk25-container-jre","fixed_in":["25.0.4.1_p1-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk25-lite","fixed_in":["25.0.4.1_p1-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk26-container-jre","fixed_in":["26.0.2.1_p1-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk26-lite","fixed_in":["26.0.2.1_p1-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk-nik-25-25","fixed_in":["25.0.4.1-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk25-container-jre","fixed_in":["25.0.4.1_p1-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk25-lite","fixed_in":["25.0.4.1_p1-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk26-container-jre","fixed_in":["26.0.2.1_p1-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk26-lite","fixed_in":["26.0.2.1_p1-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"java","fixed_in":["25.0.4-1","26.0.2-1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"java-min","fixed_in":["25.0.4-1","26.0.2-1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"jre","fixed_in":["25.0.4-1","26.0.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openjdk-25","fixed_in":["25.0.4.1+1-1~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openjdk-25","fixed_in":["25.0.4.1+1-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-25","fixed_in":["25.0.4.1+1-1~22.04.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-25","fixed_in":["25.0.4.1+1-1~24.04.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-25","fixed_in":["25.0.4.1+1-1~26.04.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-crypto-adapter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-crypto-adapter-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-crypto-adapter-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-crypto-adapter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-crypto-adapter-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-crypto-adapter-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk-nik-25-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.0.0-r0"},{"fixed":"25.0.4.1-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4.1_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4.1_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4.1_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2.1_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk26-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2.1_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk26-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2.1_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk-nik-25-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.0.0-r0"},{"fixed":"25.0.4.1-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4.1_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4.1_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4.1_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2.1_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk26-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2.1_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk26-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2.1_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk-nik-25-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.0.0-r0"},{"fixed":"25.0.4.1-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4.1_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4.1_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4.1_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2.1_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk26-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2.1_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk26-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2.1_p1-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk-nik-25-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.0.0-r0"},{"fixed":"25.0.4.1-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4.1_p1-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4.1_p1-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk26-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2.1_p1-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk26-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2.1_p1-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk-nik-25-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.0.0-r0"},{"fixed":"25.0.4.1-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4.1_p1-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4.1_p1-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk26-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2.1_p1-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk26-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2.1_p1-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk-nik-25-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.0.0-r0"},{"fixed":"25.0.4.1-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4.1_p1-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.4.1_p1-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk26-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2.1_p1-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk26-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"26_p37-r0"},{"fixed":"26.0.2.1_p1-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"java","ranges":[{"type":"SEMVER","events":[{"introduced":"22.0.0"},{"fixed":"25.0.4-1"},{"introduced":"26.0.0"},{"fixed":"26.0.2-1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"java-min","ranges":[{"type":"SEMVER","events":[{"introduced":"22.0.0"},{"fixed":"25.0.4-1"},{"introduced":"26.0.0"},{"fixed":"26.0.2-1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"jre","ranges":[{"type":"SEMVER","events":[{"introduced":"22.0.0"},{"fixed":"25.0.4-1"},{"introduced":"26.0.0"},{"fixed":"26.0.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4.1+1-1~deb13u1"}]}],"versions":["25+36-1","25.0.1+8-1","25.0.1+8-1~deb13u1","25.0.1+8-2","25.0.1+8-3","25.0.2+10-1","25.0.2+10-1~deb13u2","25.0.3+9-1","25.0.3+9-2","25.0.3+9-2~deb13u1","25.0.3~5ea-1","25.0.3~5ea-2","25.0.3~7ea-1","25.0.3~7ea-2","25.0.3~8ea-1","25.0.3~8ea-2","25.0.4+7-1","25.0.4+7-1~deb13u1","25.0.4+7-2","25.0.4~4ea-1","25.0.4~6ea-1","25~32ea-1","25~34ea-1","25~36ea-1"]},{"source":"osv","ecosystem":"Debian:14","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4.1+1-1"}]}],"versions":["25+36-1","25.0.1+8-1","25.0.1+8-1~deb13u1","25.0.1+8-2","25.0.1+8-3","25.0.2+10-1","25.0.2+10-1~deb13u2","25.0.3+9-1","25.0.3+9-2","25.0.3+9-2~deb13u1","25.0.3~5ea-1","25.0.3~5ea-2","25.0.3~7ea-1","25.0.3~7ea-2","25.0.3~8ea-1","25.0.3~8ea-2","25.0.4+7-1","25.0.4+7-1~deb13u1","25.0.4+7-2","25.0.4.1+1-1~deb13u1","25.0.4~4ea-1","25.0.4~6ea-1","25~32ea-1","25~34ea-1","25~36ea-1"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-crypto-adapter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-crypto-adapter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk-crypto-adapter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk-crypto-adapter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-25-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-crypto-adapter-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-crypto-adapter-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-crypto-adapter-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-crypto-adapter-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"java-25-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-crypto-adapter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-crypto-adapter-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-crypto-adapter-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-crypto-adapter-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-crypto-adapter-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-25-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-portable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-0.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-portable-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-0.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-portable-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-0.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-portable-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-0.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-portable-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-0.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-portable-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-0.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-portable-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-0.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-portable-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-0.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-portable-sources","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-0.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-portable-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-0.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-portable-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-0.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-portable-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-0.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-1.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-crypto-adapter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-1.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-crypto-adapter-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-1.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-crypto-adapter-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-1.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-1.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-1.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-1.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-1.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-1.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-1.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-1.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-1.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-1.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-1.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-1.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-1.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-1.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-1.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-1.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-1.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-1.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-1.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-1.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-1.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-1.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"java-25-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.4.1.1-1.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:10","package":"java-25-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.4.1.1-1.1.el10_2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"java-25-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4.1-160000.1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"java-25-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4.1-160000.1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"java-25-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4.1-150700.15.16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.71-30.156.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.71-30.156.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP7","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.71-150000.3.125.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.71-150000.3.125.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.71-150000.3.125.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.71-150000.3.125.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.71-150000.3.125.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.71-150000.3.125.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.71-150000.3.125.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.71-150000.3.125.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.71-150000.3.125.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9~b88-1","9~b101-2ubuntu2","9~b102-1","9~b113-0ubuntu1","9~b114-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["13+33-1","13.0.1+9-2","13.0.2+8-1","13.0.2+8-2","13.0.3+3-1ubuntu2","13.0.4+8-1~20.04","13.0.7+5-0ubuntu1~20.04"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["16.0.1+9-1~20.04"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["18~15ea-4","18~20ea-1","18~32ea-1","18~36ea-1","18.0.2+9-2~22.04"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4.1+1-1~22.04.4"}]}],"versions":["25+36-1~22.04.2","25.0.1+8-1~22.04","25.0.2+10-1~22.04","25.0.3+9-2~22.04.2","25.0.4+7-1~22.04"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4.1+1-1~24.04.4"}]}],"versions":["25+36-1~24.04.2","25.0.1+8-1~24.04","25.0.2+10-1~24.04","25.0.3+9-2~24.04.2","25.0.4+7-1~24.04"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4.1+1-1~26.04.4"}]}],"versions":["25+36-1","25.0.1+8-1","25.0.1+8-2","25.0.1+8-3","25.0.2+10-1","25.0.3~5ea-2","25.0.3~7ea-2","25.0.3+9-2~26.04.2","25.0.4+7-1~26.04"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4.1+1-1~22.04.4"}]}],"versions":["25+36-1~22.04.2","25.0.1+8-1~22.04","25.0.2+10-1~22.04","25.0.3+9-2~22.04.2","25.0.4+7-1~22.04"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4.1+1-1~24.04.4"}]}],"versions":["25+36-1~24.04.2","25.0.1+8-1~24.04","25.0.2+10-1~24.04","25.0.3+9-2~24.04.2","25.0.4+7-1~24.04"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4.1+1-1~26.04.4"}]}],"versions":["25+36-1","25.0.1+8-1","25.0.1+8-2","25.0.1+8-3","25.0.2+10-1","25.0.3~5ea-2","25.0.3~7ea-2","25.0.3+9-2~26.04.2","25.0.4+7-1~26.04"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-25-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4.1-1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-11-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32.1-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-17-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.20.1-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-1_8_0-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.504-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-21-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.12.1-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-25-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4.1-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"java-25-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.4.1-160000.1.1"}]}],"bundled":4}],"products":[{"vendor":"oracle corporation","product":"oracle java se"}],"references":[{"url":"https://www.oracle.com/security-alerts/cspuaug2026.html","tags":["vendor-advisory","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70906","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-969j-f8m5-xpgq"},{"url":"https://access.redhat.com/errata/RHSA-2026:55798","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-60589","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-61308","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-70906","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-70907","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-55798.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-55798.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-70906","tags":["advisory"]},{"url":"https://openjdk.org/groups/vulnerability/advisories/2026-08-18","tags":["web","report"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-70906","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_55798.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2513035","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-60589","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-60589","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2513037","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-61308","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61308","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2513039","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-70906","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2513038","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-70907","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70907","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:57177","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_57177.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:57765","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_57765.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:55798","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623591-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1275035","tags":["report"]},{"url":"https://bugzilla.suse.com/1275763","tags":["report"]},{"url":"https://bugzilla.suse.com/1275764","tags":["report"]},{"url":"https://bugzilla.suse.com/1275777","tags":["report"]},{"url":"https://bugzilla.suse.com/1275778","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-60589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-61308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-70906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-70907","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263999-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264107-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1274275","tags":["report"]},{"url":"https://bugzilla.suse.com/1274276","tags":["report"]},{"url":"https://bugzilla.suse.com/1275779","tags":["report"]},{"url":"https://bugzilla.suse.com/1277019","tags":["report"]},{"url":"https://bugzilla.suse.com/1277833","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-71054","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8400","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264153-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-70906","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8783-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-60589","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-61308","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-70907","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-70906","description":"Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 25.0.4 and 26.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).","status":"published","published":"2026-08-18T21:02:27.077Z","modified":"2026-08-22T02:15:02.808Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T13:35:33.380441Z"}],"euvd":[{"id":"EUVD-2026-61855","description":"Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 25.0.4 and 26.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).","status":"published","published":"2026-08-18T21:02:27Z","modified":"2026-08-22T02:15:02Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T18:01:36.505605Z"}],"ghsa":[{"id":"GHSA-969j-f8m5-xpgq","title":"Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle...","description":"Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 25.0.4 and 26.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).","status":"published","published":"2026-08-18T21:33:10Z","modified":"2026-08-22T03:31:22Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:10:50.919771Z"}],"nvd":[{"id":"CVE-2026-70906","description":"Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 25.0.4 and 26.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).","status":"published","published":"2026-08-18T21:17:48.393Z","modified":"2026-10-22T17:09:59.477Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:12:39.311198Z"}],"osv":[{"id":"BELL-CVE-2026-70906","status":"published","published":"2026-08-20T06:04:55.149961Z","modified":"2026-09-06T07:15:28.45536937Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:25.50888Z"},{"id":"DEBIAN-CVE-2026-70906","description":"Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 25.0.4 and 26.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).","status":"published","published":"2026-08-18T21:17:48.393Z","modified":"2026-11-02T22:00:09.58322302Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T00:03:07.015763Z"},{"id":"RHSA-2026:55798","title":"Red Hat Security Advisory: java-25-openjdk security update","status":"published","published":"2026-08-20T10:19:49Z","modified":"2026-10-20T10:11:25Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:57177","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","status":"published","published":"2026-08-20T10:20:08Z","modified":"2026-10-20T10:11:31Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:57765","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-08-22T10:27:36Z","modified":"2026-10-20T10:11:39Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RLSA-2026:55798","title":"Moderate: java-25-openjdk security update","description":"The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit.\n\nSecurity Fix(es):\n\n* JDK: Improve Resource Resolving (CVE-2026-60589)\n\n* JDK: Enhance HTTP Connections (CVE-2026-61308)\n\n* JDK: Improve font loading (CVE-2026-70906)\n\n* JDK: Enhance TLS server (CVE-2026-70907)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-21T12:07:48.154734Z","modified":"2026-08-21T12:30:03.668951304Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"UBUNTU-CVE-2026-70906","description":"Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 25.0.4 and 26.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).","status":"published","published":"2026-08-18T21:17:00Z","modified":"2026-09-22T10:00:31.849368135Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:57.159276Z"},{"id":"ALSA-2026:55798","title":"Moderate: java-25-openjdk security update","description":"The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit. \n\nSecurity Fix(es): \n\n * JDK: Improve Resource Resolving (CVE-2026-60589)\n * JDK: Enhance HTTP Connections (CVE-2026-61308)\n * JDK: Improve font loading (CVE-2026-70906)\n * JDK: Enhance TLS server (CVE-2026-70907)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-19T00:00:00Z","modified":"2026-10-29T11:32:36.4552203Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"BIT-java-2026-70906","description":"Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 25.0.4 and 26.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).","status":"published","published":"2026-08-26T15:02:27.606Z","modified":"2026-09-18T10:45:03.608568621Z","updated_at":"2026-11-02T15:28:31.42203Z"},{"id":"BIT-java-min-2026-70906","description":"Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 25.0.4 and 26.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).","status":"published","published":"2026-08-26T15:02:28.651Z","modified":"2026-09-18T10:45:03.592272607Z","updated_at":"2026-11-02T15:28:31.42203Z"},{"id":"BIT-jre-2026-70906","description":"Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 25.0.4 and 26.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).","status":"published","published":"2026-08-26T15:02:31.734Z","modified":"2026-09-18T10:45:03.598300002Z","updated_at":"2026-11-02T15:28:31.782692Z"},{"id":"openSUSE-SU-2026:11621-1","title":"java-25-openjdk-25.0.4.1-1.1 on GA media","description":"These are all security issues fixed in the java-25-openjdk-25.0.4.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-08-27T00:00:00Z","modified":"2026-08-28T18:23:08.741408154Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:11639-1","title":"java-11-openj9-11.0.32.1-1.1 on GA media","description":"These are all security issues fixed in the java-11-openj9-11.0.32.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-08-29T00:00:00Z","modified":"2026-08-30T13:00:03.965878989Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:11640-1","title":"java-17-openj9-17.0.20.1-1.1 on GA media","description":"These are all security issues fixed in the java-17-openj9-17.0.20.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-08-29T00:00:00Z","modified":"2026-08-30T13:00:03.962219551Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:11641-1","title":"java-1_8_0-openj9-1.8.0.504-1.1 on GA media","description":"These are all security issues fixed in the java-1_8_0-openj9-1.8.0.504-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-08-29T00:00:00Z","modified":"2026-08-30T13:00:03.973686436Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:11642-1","title":"java-21-openj9-21.0.12.1-1.1 on GA media","description":"These are all security issues fixed in the java-21-openj9-21.0.12.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-08-29T00:00:00Z","modified":"2026-08-30T13:00:03.963491741Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:11643-1","title":"java-25-openj9-25.0.4.1-1.1 on GA media","description":"These are all security issues fixed in the java-25-openj9-25.0.4.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-08-29T00:00:00Z","modified":"2026-08-30T13:00:03.972526335Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:21714-1","title":"Security update for java-25-openjdk","description":"This update for java-25-openjdk fixes the following issues:\n\n- CVE-2026-60589: OpenJDK: Improve Resource Resolving (bsc#1275777).\n- CVE-2026-61308: OpenJDK: Enhance HTTP Connections (bsc#1275778).\n- CVE-2026-70906: OpenJDK: Improve font loading (bsc#1275763).\n- CVE-2026-70907: OpenJDK: Enhance TLS server (bsc#1275764).\n\nChanges for java-25-openjdk:\n\n- Update to jdk-25.0.4.1+1 (August 2026 CSPU)\n + backport upcoming upgrade of timezone data (bsc#1275035)\n","status":"published","published":"2026-08-31T16:31:41Z","modified":"2026-09-02T18:23:08.767870253Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"SUSE-SU-2026:23591-1","title":"Security update for java-25-openjdk","description":"This update for java-25-openjdk fixes the following issues:\n\n- CVE-2026-60589: OpenJDK: Improve Resource Resolving (bsc#1275777).\n- CVE-2026-61308: OpenJDK: Enhance HTTP Connections (bsc#1275778).\n- CVE-2026-70906: OpenJDK: Improve font loading (bsc#1275763).\n- CVE-2026-70907: OpenJDK: Enhance TLS server (bsc#1275764).\n\nChanges for java-25-openjdk:\n\n- Update to jdk-25.0.4.1+1 (August 2026 CSPU)\n + backport upcoming upgrade of timezone data (bsc#1275035)\n","status":"published","published":"2026-08-31T16:38:36Z","modified":"2026-09-29T18:23:18.00630821Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:3999-1","title":"Security update for java-25-openjdk","description":"This update for java-25-openjdk fixes the following issues:\n\n- CVE-2026-60589: OpenJDK: Improve Resource Resolving (bsc#1275777).\n- CVE-2026-61308: OpenJDK: Enhance HTTP Connections (bsc#1275778).\n- CVE-2026-70906: OpenJDK: Improve font loading (bsc#1275763).\n- CVE-2026-70907: OpenJDK: Enhance TLS server (bsc#1275764).\n\nChanges for java-25-openjdk:\n\n- Update to jdk-25.0.4.1+1 (August 2026 CSPU)\n + backport upcoming upgrade of timezone data (bsc#1275035)\n","status":"published","published":"2026-09-07T07:24:42Z","modified":"2026-09-13T18:23:14.200841563Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:4107-1","title":"Security update for java-1_8_0-ibm","description":"This update for java-1_8_0-ibm fixes the following issues:\n\nUpdate to Java 8.0 Service Refresh 8 Fix Pack 71 (bsc#1277833):\n\n- CVE-2026-8400: flaw in the ORB component may allow a malicious IIOP server to induce loading and instantation of\n arbitrary classes (bsc#1274276).\n- CVE-2026-16243: `arraycmp` SIMD implementation for Z and P does not check if the number of bytes to compare is zero\n (bsc#1274275).\n- CVE-2026-16440: a crafted .class file with deeply nested annotations causes a segmentation fault (bsc#1275779).\n- CVE-2026-60589: OpenJDK: Improve Resource Resolving (bsc#1275777).\n- CVE-2026-61308: OpenJDK: Enhance HTTP Connections (bsc#1275778).\n- CVE-2026-70906: OpenJDK: Improve font loading (bsc#1275763).\n- CVE-2026-70907: OpenJDK: Enhance TLS server (bsc#1275764).\n- CVE-2026-71054: Vulnerability in Oracle Java SE (component: 2D) (bsc#1277019).\n- Oracle August 18 2026 CSPU and IBM Security Update August 2026 (bsc#1277833).\n","status":"published","published":"2026-09-09T13:24:53Z","modified":"2026-09-14T18:23:17.5955475Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:4153-1","title":"Security update for java-1_8_0-ibm","description":"This update for java-1_8_0-ibm fixes the following issues:\n\nUpdate to Java 8.0 Service Refresh 8 Fix Pack 71 (bsc#1277833):\n\n- CVE-2026-8400: flaw in the ORB component may allow a malicious IIOP server to induce loading and instantation of\n arbitrary classes (bsc#1274276).\n- CVE-2026-16243: `arraycmp` SIMD implementation for Z and P does not check if the number of bytes to compare is zero\n (bsc#1274275).\n- CVE-2026-16440: a crafted .class file with deeply nested annotations causes a segmentation fault (bsc#1275779).\n- CVE-2026-60589: OpenJDK: Improve Resource Resolving (bsc#1275777).\n- CVE-2026-61308: OpenJDK: Enhance HTTP Connections (bsc#1275778).\n- CVE-2026-70906: OpenJDK: Improve font loading (bsc#1275763).\n- CVE-2026-70907: OpenJDK: Enhance TLS server (bsc#1275764).\n- CVE-2026-71054: Vulnerability in Oracle Java SE (component: 2D) (bsc#1277019).\n- Oracle August 18 2026 CSPU and IBM Security Update August 2026 (bsc#1277833).\n","status":"published","published":"2026-09-14T08:05:15Z","modified":"2026-09-15T17:00:05.449909525Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"USN-8783-1","title":"openjdk-25 vulnerabilities","description":"Weber Leon discovered that the 2D component of OpenJDK 25 did not\ncorrectly handle user authentication. A remote attacker could possibly\nuse this issue to cause a denial of service. (CVE-2026-70906)\n\nKai Aizen discovered that the Networking component of OpenJDK 25 did not\ncorrectly handle user authentication. A remote attacker could possibly\nuse this issue to leak sensitive information. (CVE-2026-61308)\n\nIt was discovered that the JSSE component of OpenJDK 25 did not correctly\nhandle user authentication. A remote attacker could possibly use this\nissue to cause a denial of service. (CVE-2026-70907)\n\nIt was discovered that the Security component of OpenJDK 25 did not\ncorrectly handle user authentication. A remote attacker could possibly\nuse this issue to leak sensitive information. (CVE-2026-60589)","status":"published","published":"2026-09-21T01:42:22Z","modified":"2026-09-22T10:00:29.03358772Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}