{"id":"CVE-2026-87255","aliases":["ALPINE-CVE-2026-87255","ALSA-2026:88347","BELL-CVE-2026-87255","DEBIAN-CVE-2026-87255","EUVD-2026-106329","GHSA-2vwj-cmxm-5pv9","RLSA-2026:88347","UBUNTU-CVE-2026-87255","USN-9004-1","USN-9005-1","openSUSE-SU-2026:12329-1","openSUSE-SU-2026:12436-1"],"status":"published","title":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are...","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).","severity":{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00308,"percentile":0.23974,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-287"],"published":"2026-10-20T21:23:50Z","modified":"2026-11-11T09:43:28Z","fixes":[{"ecosystem":"Alpine:v3.23","package":"openjdk21","fixed_in":["21.0.13.0.3_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openjdk21","fixed_in":["21.0.13.0.3_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openjdk25","fixed_in":["25.0.5.0.3_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openjdk25","fixed_in":["25.0.5.0.3_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk-nik-25-25","fixed_in":["25.0.5.0.3-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk25","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk25-container-jre","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk25-lite","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk27","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk27-container-jre","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk27-lite","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk-nik-25-25","fixed_in":["25.0.5.0.3-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk25","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk25-container-jre","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk25-lite","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk27","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk27-container-jre","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk27-lite","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk-nik-25-25","fixed_in":["25.0.5.0.3-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk25","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk25-container-jre","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk25-lite","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk27","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk27-container-jre","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk27-lite","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk-nik-25-25","fixed_in":["25.0.5.0.3-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk25-container-jre","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk25-lite","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk27-container-jre","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk27-lite","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk-nik-25-25","fixed_in":["25.0.5.0.3-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk25-container-jre","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk25-lite","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk27-container-jre","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk27-lite","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk-nik-25-25","fixed_in":["25.0.5.0.3-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk25-container-jre","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk25-lite","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk27-container-jre","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk27-lite","fixed_in":["27.0.1.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openjdk-25","fixed_in":["25.0.5+8-1~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openjdk-25","fixed_in":["25.0.5+8-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-25","fixed_in":["25.0.5.0.3+1-1~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-25","fixed_in":["25.0.5.0.3+1-1~24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.10","package":"openjdk-25","fixed_in":["25.0.5.0.3+1-1~26.10.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.10","package":"openjdk-27","fixed_in":["27.0.1.0.3+1-1~26.10.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-25","fixed_in":["25.0.5.0.3+1-1~26.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.23","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.13.0.3_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.13.0.3_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openjdk25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.5.0.3_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openjdk25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.5.0.3_p1-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el10.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-crypto-adapter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el10.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-crypto-adapter-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el10.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-crypto-adapter-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el10.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el10.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el10.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el10.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el10.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el10.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el10.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el10.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el10.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el10.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el10.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el10.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el10.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el10.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el10.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el10.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el10.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el10.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el10.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el10.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el10.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el10.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:10","package":"java-25-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el10.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el9.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-crypto-adapter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el9.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-crypto-adapter-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el9.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-crypto-adapter-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el9.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el9.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el9.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el9.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el9.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el9.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el9.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el9.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el9.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el9.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el9.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el9.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el9.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el9.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el9.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el9.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el9.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el9.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el9.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el9.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el9.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el9.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-25-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el9.alma.1"}]}],"bundled":41},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk-nik-25-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.0.0-r0"},{"fixed":"25.0.5.0.3-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk27","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk27-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk27-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk-nik-25-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.0.0-r0"},{"fixed":"25.0.5.0.3-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk27","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk27-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk27-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk-nik-25-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.0.0-r0"},{"fixed":"25.0.5.0.3-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk27","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk27-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk27-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk-nik-25-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.0.0-r0"},{"fixed":"25.0.5.0.3-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk27-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk27-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk-nik-25-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.0.0-r0"},{"fixed":"25.0.5.0.3-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk27-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk27-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk-nik-25-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.0.0-r0"},{"fixed":"25.0.5.0.3-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk27-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk27-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27_p36-r0"},{"fixed":"27.0.1.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.5+8-1~deb13u1"}]}],"versions":["25+36-1","25.0.1+8-1","25.0.1+8-1~deb13u1","25.0.1+8-2","25.0.1+8-3","25.0.2+10-1","25.0.2+10-1~deb13u2","25.0.3+9-1","25.0.3+9-2","25.0.3+9-2~deb13u1","25.0.3~5ea-1","25.0.3~5ea-2","25.0.3~7ea-1","25.0.3~7ea-2","25.0.3~8ea-1","25.0.3~8ea-2","25.0.4+7-1","25.0.4+7-1~deb13u1","25.0.4+7-2","25.0.4.1+1-1","25.0.4.1+1-1~deb13u1","25.0.4~4ea-1","25.0.4~6ea-1","25.0.5~6ea-1","25.0.5~7ea-1","25.0.5~7ea-2","25~32ea-1","25~34ea-1","25~36ea-1"]},{"source":"osv","ecosystem":"Debian:14","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.5+8-1"}]}],"versions":["25+36-1","25.0.1+8-1","25.0.1+8-1~deb13u1","25.0.1+8-2","25.0.1+8-3","25.0.2+10-1","25.0.2+10-1~deb13u2","25.0.3+9-1","25.0.3+9-2","25.0.3+9-2~deb13u1","25.0.3~5ea-1","25.0.3~5ea-2","25.0.3~7ea-1","25.0.3~7ea-2","25.0.3~8ea-1","25.0.3~8ea-2","25.0.4+7-1","25.0.4+7-1~deb13u1","25.0.4+7-2","25.0.4.1+1-1","25.0.4.1+1-1~deb13u1","25.0.4~4ea-1","25.0.4~6ea-1","25.0.5+8-1~deb13u1","25.0.5~6ea-1","25.0.5~7ea-1","25.0.5~7ea-2","25~32ea-1","25~34ea-1","25~36ea-1"]},{"source":"osv","ecosystem":"Debian:14","package":"openjdk-27","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["27+35-1","27+35-2","27.0.1+9-1","27.0.1.0.2+1-1","27~10ea-1","27~13ea-1","27~13ea-2","27~17ea-1","27~17ea-2","27~18ea-1","27~18ea-2~exp1","27~18ea-2~exp2","27~19ea-1","27~23ea-1","27~24ea-1","27~24ea-2","27~30ea-1","27~33ea-1","27~34ea-1"]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"java-25-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:25.0.5.0.8-1.0.el9_8"}]}],"bundled":39},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8u66-b01-5","8u72-b05-1ubuntu1","8u72-b05-5","8u72-b05-6","8u72-b15-1","8u72-b15-2ubuntu1","8u72-b15-2ubuntu3","8u72-b15-3ubuntu1","8u77-b03-1ubuntu2","8u77-b03-3ubuntu1","8u77-b03-3ubuntu2","8u77-b03-3ubuntu3","8u91-b14-0ubuntu4~16.04.1","8u91-b14-3ubuntu1~16.04.1","8u111-b14-2ubuntu0.16.04.2","8u121-b13-0ubuntu1.16.04.2","8u131-b11-0ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.3","8u151-b12-0ubuntu0.16.04.2","8u162-b12-0ubuntu0.16.04.2","8u171-b11-0ubuntu0.16.04.1","8u181-b13-0ubuntu0.16.04.1","8u181-b13-1ubuntu0.16.04.1","8u191-b12-0ubuntu0.16.04.1","8u191-b12-2ubuntu0.16.04.1","8u212-b03-0ubuntu1.16.04.1","8u222-b10-1ubuntu1~16.04.1","8u232-b09-0ubuntu1~16.04.1","8u242-b08-0ubuntu3~16.04","8u252-b09-1~16.04","8u265-b01-0ubuntu2~16.04","8u272-b10-0ubuntu1~16.04","8u275-b01-0ubuntu1~16.04","8u282-b08-0ubuntu1~16.04","8u292-b10-0ubuntu1~16.04.1","8u312-b07-0ubuntu1~16.04","8u342-b07-0ubuntu1~16.04","8u352-ga-1~16.04","8u362-ga-0ubuntu1~16.04.1","8u372-ga~us1-0ubuntu1~16.04","8u382-ga-1~16.04.1","8u392-ga-1~16.04","8u432-ga~us1-0ubuntu2~16.04.4","8u442-b06~us1-0ubuntu1~16.04","8u452-ga~us1-0ubuntu1~16.04.1","8u462-ga~us1-0ubuntu2~16.04.2","8u472-ga-1~16.04","8u482-ga~us1-0ubuntu1~16.04","8u492-ga~us2-0ubuntu1~16.04.1","8u502-ga~us1-0ubuntu1~16.04","8u504-ga-1ubuntu1~16.04.3","8u512-b09~us1-0ubuntu1~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9~b88-1","9~b101-2ubuntu2","9~b102-1","9~b113-0ubuntu1","9~b114-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.0.4+12-2ubuntu4","9.0.4+12-4ubuntu1","10~46-4ubuntu1","10~46-5ubuntu1","10.0.1+10-1ubuntu2","10.0.1+10-3ubuntu1","10.0.2+13-1ubuntu0.18.04.1","10.0.2+13-1ubuntu0.18.04.2","10.0.2+13-1ubuntu0.18.04.3","10.0.2+13-1ubuntu0.18.04.4","11.0.2+9-3ubuntu1~18.04.3","11.0.3+7-1ubuntu2~18.04.1","11.0.4+11-1ubuntu2~18.04.3","11.0.5+10-0ubuntu1.1~18.04","11.0.6+10-1ubuntu1~18.04.1","11.0.7+10-2ubuntu2~18.04","11.0.8+10-0ubuntu1~18.04.1","11.0.9+11-0ubuntu1~18.04.1","11.0.9.1+1-0ubuntu1~18.04","11.0.10+9-0ubuntu1~18.04","11.0.11+9-0ubuntu2~18.04","11.0.13+8-0ubuntu1~18.04","11.0.14+9-0ubuntu2~18.04","11.0.14.1+1-0ubuntu1~18.04","11.0.15+10-0ubuntu0.18.04.1","11.0.16+8-0ubuntu1~18.04","11.0.17+8-1ubuntu2~18.04","11.0.18+10-0ubuntu1~18.04.1","11.0.19+7~us1-0ubuntu1~18.04.1","11.0.20+8-1ubuntu1~18.04","11.0.20.1+1-0ubuntu1~18.04","11.0.21+9-0ubuntu1~18.04","11.0.22+7-0ubuntu2~18.04.1","11.0.23+9-1ubuntu1~18.04.1","11.0.25+9-1ubuntu1~18.04","11.0.26+4-1ubuntu1~18.04","11.0.27+6~us1-0ubuntu1~18.04","11.0.28+6-1ubuntu1~18.04.1","11.0.29+7-1ubuntu1~18.04","11.0.30+7-1ubuntu1~18.04","11.0.31+11-1ubuntu1~18.04.2","11.0.32+9-1ubuntu1~18.04","11.0.32.1+1-1ubuntu1~18.04","11.0.33+9-1ubuntu1~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["17+35-1~18.04","17.0.1+12-1~18.04","17.0.2+8-1~18.04","17.0.3+7-0ubuntu0.18.04.1","17.0.4+8-1~18.04","17.0.5+8-2ubuntu1~18.04","17.0.6+10-0ubuntu1~18.04.1","17.0.7+7~us1-0ubuntu1~18.04","17.0.8+7-1~18.04","17.0.8.1+1~us1-0ubuntu1~18.04","17.0.9+9-1~18.04","17.0.10+7-1~18.04.1","17.0.11+9-1~18.04.1","17.0.13+11-2ubuntu1~18.04.2","17.0.14+7-1~18.04","17.0.15+6~us1-0ubuntu1~18.04","17.0.16+8~us1-0ubuntu1~18.04.1","17.0.17+10-1~18.04","17.0.18+8-1~18.04","17.0.19+10-1~18.04.2","17.0.20+8-1~18.04","17.0.20.1+1-1~18.04","17.0.21.0.3+1-1~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8u144-b01-2","8u151-b12-1","8u162-b12-1","8u171-b11-0ubuntu0.18.04.1","8u181-b13-0ubuntu0.18.04.1","8u181-b13-1ubuntu0.18.04.1","8u191-b12-0ubuntu0.18.04.1","8u191-b12-2ubuntu0.18.04.1","8u212-b03-0ubuntu1.18.04.1","8u222-b10-1ubuntu1~18.04.1","8u232-b09-0ubuntu1~18.04.1","8u242-b08-0ubuntu3~18.04","8u252-b09-1~18.04","8u265-b01-0ubuntu2~18.04","8u272-b10-0ubuntu1~18.04","8u275-b01-0ubuntu1~18.04","8u282-b08-0ubuntu1~18.04","8u292-b10-0ubuntu1~18.04","8u312-b07-0ubuntu1~18.04","8u342-b07-0ubuntu1~18.04","8u352-ga-1~18.04","8u362-ga-0ubuntu1~18.04.1","8u372-ga~us1-0ubuntu1~18.04","8u382-ga-1~18.04.1","8u392-ga-1~18.04","8u402-ga-2ubuntu1~18.04","8u412-ga-1~18.04.1","8u422-b05-1~18.04","8u432-ga~us1-0ubuntu2~18.04","8u442-b06~us1-0ubuntu1~18.04","8u452-ga~us1-0ubuntu1~18.04","8u462-ga~us1-0ubuntu2~18.04.2","8u472-ga-1~18.04","8u482-ga~us1-0ubuntu1~18.04","8u492-ga~us2-0ubuntu1~18.04.1","8u502-ga~us1-0ubuntu1~18.04","8u504-ga-1ubuntu1~18.04.3","8u512-b09~us1-0ubuntu1~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["11.0.5+10-0ubuntu1","11.0.5+10-2ubuntu1","11.0.6+10-1ubuntu1","11.0.6+10-2ubuntu2","11.0.7+9-1ubuntu1","11.0.7+10-2ubuntu1","11.0.7+10-3ubuntu1","11.0.8+10-0ubuntu1~20.04","11.0.9+11-0ubuntu1~20.04","11.0.9.1+1-0ubuntu1~20.04","11.0.10+9-0ubuntu1~20.04","11.0.11+9-0ubuntu2~20.04","11.0.13+8-0ubuntu1~20.04","11.0.14+9-0ubuntu2~20.04","11.0.14.1+1-0ubuntu1~20.04","11.0.15+10-0ubuntu0.20.04.1","11.0.16+8-0ubuntu1~20.04","11.0.17+8-1ubuntu2~20.04","11.0.18+10-0ubuntu1~20.04.1","11.0.19+7~us1-0ubuntu1~20.04.1","11.0.20+8-1ubuntu1~20.04","11.0.20.1+1-0ubuntu1~20.04","11.0.21+9-0ubuntu1~20.04","11.0.22+7-0ubuntu2~20.04.1","11.0.23+9-1ubuntu1~20.04.2","11.0.24+8-1ubuntu3~20.04","11.0.25+9-1ubuntu1~20.04","11.0.26+4-1ubuntu1~20.04","11.0.27+6~us1-0ubuntu1~20.04","11.0.28+6-1ubuntu1~20.04.1","11.0.29+7-1ubuntu1~20.04","11.0.30+7-1ubuntu1~20.04","11.0.31+11-1ubuntu1~20.04.2","11.0.32+9-1ubuntu1~20.04","11.0.32.1+1-1ubuntu1~20.04","11.0.33+9-1ubuntu1~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["13+33-1","13.0.1+9-2","13.0.2+8-1","13.0.2+8-2","13.0.3+3-1ubuntu2","13.0.4+8-1~20.04","13.0.7+5-0ubuntu1~20.04"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["16.0.1+9-1~20.04"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["17+35-1~20.04","17.0.1+12-1~20.04","17.0.2+8-1~20.04","17.0.3+7-0ubuntu0.20.04.1","17.0.4+8-1~20.04","17.0.5+8-2ubuntu1~20.04","17.0.6+10-0ubuntu1~20.04.1","17.0.7+7~us1-0ubuntu1~20.04","17.0.8+7-1~20.04.2","17.0.8.1+1~us1-0ubuntu1~20.04","17.0.9+9-1~20.04","17.0.10+7-1~20.04.1","17.0.11+9-1~20.04.2","17.0.12+7-1ubuntu2~20.04","17.0.13+11-2ubuntu1~20.04","17.0.14+7-1~20.04","17.0.15+6~us1-0ubuntu1~20.04","17.0.16+8~us1-0ubuntu1~20.04.6","17.0.17+10-1~20.04","17.0.18+8-1~20.04","17.0.19+10-1~20.04.2","17.0.20+8-1~20.04","17.0.20.1+1-1~20.04","17.0.21.0.3+1-1~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.0.1+12-2~20.04.1","21.0.2+13-1~20.04.1","21.0.3+9-1ubuntu1~20.04.1","21.0.4+7-1ubuntu2~20.04","21.0.5+11-1ubuntu1~20.04","21.0.6+7-1~20.04.1","21.0.7+6~us1-0ubuntu1~20.04","21.0.8+9~us1-0ubuntu1~20.04.1","21.0.9+10-1~20.04","21.0.10+7-1~20.04","21.0.11+10-1~20.04.2","21.0.12+8-1~20.04","21.0.12.1+1-1~20.04.4","21.0.13.0.3+1-1~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8u232-b09-0ubuntu1","8u232-b09-1","8u242-b04-1","8u242-b08-0ubuntu3","8u252-b07-1","8u252-b09-1ubuntu1","8u265-b01-0ubuntu2~20.04","8u272-b10-0ubuntu1~20.04","8u275-b01-0ubuntu1~20.04","8u282-b08-0ubuntu1~20.04","8u292-b10-0ubuntu1~20.04","8u312-b07-0ubuntu1~20.04","8u342-b07-0ubuntu1~20.04","8u352-ga-1~20.04","8u362-ga-0ubuntu1~20.04.1","8u372-ga~us1-0ubuntu1~20.04","8u382-ga-1~20.04.1","8u392-ga-1~20.04","8u402-ga-2ubuntu1~20.04","8u412-ga-1~20.04.1","8u422-b05-1~20.04","8u432-ga~us1-0ubuntu2~20.04","8u442-b06~us1-0ubuntu1~20.04","8u452-ga~us1-0ubuntu1~20.04","8u462-ga~us1-0ubuntu2~20.04.2","8u472-ga-1~20.04","8u482-ga~us1-0ubuntu1~20.04","8u492-ga~us2-0ubuntu1~20.04.1","8u502-ga~us1-0ubuntu1~20.04","8u504-ga-1ubuntu1~20.04.3","8u512-b09~us1-0ubuntu1~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["17+35-1","17.0.1+12-1","17.0.2+8-1","17.0.3+7-0ubuntu0.22.04.1","17.0.4+8-1~22.04","17.0.5+8-2ubuntu1~22.04","17.0.6+10-0ubuntu1~22.04","17.0.7+7~us1-0ubuntu1~22.04.2","17.0.8+7-1~22.04","17.0.8.1+1~us1-0ubuntu1~22.04","17.0.9+9-1~22.04","17.0.10+7-1~22.04.1","17.0.11+9-1~22.04.1","17.0.12+7-1ubuntu2~22.04","17.0.13+11-2ubuntu1~22.04","17.0.14+7-1~22.04.1","17.0.15+6~us1-0ubuntu1~22.04","17.0.16+8~us1-0ubuntu1~22.04.1","17.0.17+10-1~22.04","17.0.18+8-1~22.04.1","17.0.19+10-1~22.04.2","17.0.20+8-1~22.04","17.0.20.1+1-1~22.04","17.0.21.0.3+1-1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["18~15ea-4","18~20ea-1","18~32ea-1","18~36ea-1","18.0.2+9-2~22.04"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.0.1+12-2~22.04","21.0.2+13-1~22.04.1","21.0.3+9-1ubuntu1~22.04.1","21.0.4+7-1ubuntu2~22.04","21.0.5+11-1ubuntu1~22.04","21.0.6+7-1~22.04.1","21.0.7+6~us1-0ubuntu1~22.04","21.0.8+9~us1-0ubuntu1~22.04.1","21.0.9+10-1~22.04","21.0.10+7-1~22.04","21.0.11+10-1~22.04.2","21.0.12+8-1~22.04","21.0.12.1+1-1~22.04.4","21.0.13.0.3+1-1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.5.0.3+1-1~22.04.1"}]}],"versions":["25+36-1~22.04.2","25.0.1+8-1~22.04","25.0.2+10-1~22.04","25.0.3+9-2~22.04.2","25.0.4+7-1~22.04","25.0.4.1+1-1~22.04.4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8u302-b08-0ubuntu2","8u312-b07-0ubuntu1","8u342-b07-0ubuntu1~22.04","8u352-ga-1~22.04","8u362-ga-0ubuntu1~22.04","8u372-ga~us1-0ubuntu1~22.04","8u382-ga-1~22.04.1","8u392-ga-1~22.04","8u402-ga-2ubuntu1~22.04","8u412-ga-1~22.04.1","8u422-b05-1~22.04","8u432-ga~us1-0ubuntu2~22.04","8u442-b06~us1-0ubuntu1~22.04","8u452-ga~us1-0ubuntu1~22.04","8u462-ga~us1-0ubuntu2~22.04.2","8u472-ga-1~22.04","8u482-ga~us1-0ubuntu1~22.04","8u492-ga~us2-0ubuntu1~22.04.1","8u502-ga~us1-0ubuntu1~22.04","8u504-ga-1ubuntu1~22.04.3","8u512-b09~us1-0ubuntu1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["11.0.12+7-0ubuntu3","11.0.13+8-0ubuntu1","11.0.14+9-0ubuntu2","11.0.14.1+1-0ubuntu1","11.0.15+10-0ubuntu0.22.04.1","11.0.16+8-0ubuntu1~22.04","11.0.17+8-1ubuntu2~22.04","11.0.18+10-0ubuntu1~22.04","11.0.19+7~us1-0ubuntu1~22.04.1","11.0.20+8-1ubuntu1~22.04","11.0.20.1+1-0ubuntu1~22.04","11.0.21+9-0ubuntu1~22.04","11.0.22+7-0ubuntu2~22.04.1","11.0.23+9-1ubuntu1~22.04.1","11.0.24+8-1ubuntu3~22.04","11.0.25+9-1ubuntu1~22.04","11.0.26+4-1ubuntu1~22.04","11.0.27+6~us1-0ubuntu1~22.04","11.0.28+6-1ubuntu1~22.04.1","11.0.29+7-1ubuntu1~22.04","11.0.30+7-1ubuntu1~22.04","11.0.31+11-1ubuntu1~22.04.2","11.0.32+9-1ubuntu1~22.04","11.0.32.1+1-1ubuntu1~22.04","11.0.33+9-1ubuntu1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["17.0.9~6ea-1","17.0.9+9-1","17.0.9+9-2","17.0.10~6ea-1","17.0.10+7-1","17.0.11~7ea-1","17.0.11~7ea-1build1","17.0.11+9-1","17.0.12+7-1ubuntu2~24.04","17.0.13+11-2ubuntu1~24.04","17.0.14+7-1~24.04","17.0.15+6~us1-0ubuntu1~24.04","17.0.16+8~us1-0ubuntu1~24.04.1","17.0.17+10-1~24.04","17.0.18+8-1~24.04.1","17.0.19+10-1~24.04.2","17.0.20+8-1~24.04","17.0.20.1+1-1~24.04","17.0.21.0.3+1-1~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21+35-1","21.0.1+12-2","21.0.1+12-3","21.0.2+13-1","21.0.2+13-2","21.0.3~7ea-1","21.0.3~7ea-1build1","21.0.3~7ea-1build2","21.0.3+9-1","21.0.3+9-1ubuntu1","21.0.4+7-1ubuntu2~24.04","21.0.5+11-1ubuntu1~24.04","21.0.6+7-1~24.04.1","21.0.7+6~us1-0ubuntu1~24.04","21.0.8+9~us1-0ubuntu1~24.04.1","21.0.9+10-1~24.04","21.0.10+7-1~24.04","21.0.11+10-1~24.04.2","21.0.12+8-1~24.04","21.0.12.1+1-1~24.04.4","21.0.13.0.3+1-1~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.5.0.3+1-1~24.04.1"}]}],"versions":["25+36-1~24.04.2","25.0.1+8-1~24.04","25.0.2+10-1~24.04","25.0.3+9-2~24.04.2","25.0.4+7-1~24.04","25.0.4.1+1-1~24.04.4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8u382-ga-1ubuntu1","8u392-ga-1","8u402-ga-1","8u402-ga-2","8u402-ga-2ubuntu1","8u402-ga-2ubuntu6","8u402-ga-2ubuntu7","8u402-ga-8build1","8u412-ga-1~24.04.2","8u422-b05-1~24.04","8u432-ga~us1-0ubuntu2~24.04","8u442-b06~us1-0ubuntu1~24.04","8u452-ga~us1-0ubuntu1~24.04","8u462-ga~us1-0ubuntu2~24.04.2","8u472-ga-1~24.04","8u482-ga~us1-0ubuntu1~24.04","8u492-ga~us2-0ubuntu1~24.04.1","8u502-ga~us1-0ubuntu1~24.04","8u504-ga-1ubuntu1~24.04.3","8u512-b09~us1-0ubuntu1~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["11.0.20+8-1ubuntu1","11.0.21+9-0ubuntu1","11.0.22+7-0ubuntu2","11.0.23~7ea-1ubuntu1","11.0.23~7ea-1ubuntu2","11.0.23+9-1ubuntu1","11.0.24+8-1ubuntu3~24.04.1","11.0.25+9-1ubuntu1~24.04","11.0.26+4-1ubuntu1~24.04","11.0.27+6~us1-0ubuntu1~24.04","11.0.28+6-1ubuntu1~24.04.1","11.0.29+7-1ubuntu1~24.04","11.0.30+7-1ubuntu1~24.04","11.0.31+11-1ubuntu1~24.04.2","11.0.32+9-1ubuntu1~24.04","11.0.32.1+1-1ubuntu1~24.04","11.0.33+9-1ubuntu1~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["17.0.18+8-1","17.0.19+10-1","17.0.20~5ea-1","17.0.20+8-1","17.0.20.1+1-1","17.0.21~6ea-1","17.0.21.0.3+1-1~26.10.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["17.0.18+8-0ubuntu1","17.0.19+10-0ubuntu1","17.0.20+8-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.0.11~8ea-1","21.0.11+10-1","21.0.12~5ea-1","21.0.12+8-1","21.0.12.1+1-1","21.0.13.0.3+1-1~26.10.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.0.10+7-0ubuntu1","21.0.11+10-0ubuntu1","21.0.12+8-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.5.0.3+1-1~26.10.1"}]}],"versions":["25.0.3~7ea-2","25.0.3+9-2","25.0.4~4ea-1","25.0.4+7-1","25.0.4.1+1-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-27","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.0.1.0.3+1-1~26.10.1"}]}],"versions":["27~19ea-1","27~34ea-1","27+35-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8u482-ga~us1-0ubuntu1","8u492-ga~us2-0ubuntu2","8u502-ga~us1-0ubuntu1","8u504-ga-1ubuntu1","8u512-b09~us1-0ubuntu1~26.10.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["11.0.30+7-1ubuntu1","11.0.31+11-1ubuntu2","11.0.32+9-1ubuntu1","11.0.32.1+1-1ubuntu1","11.0.32.1+1-1ubuntu2","11.0.33+9-1ubuntu1~26.10.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["17.0.17~8ea-1","17.0.17+10-1","17.0.18~7ea-1","17.0.18+8-1","17.0.19+10-1~26.04.2","17.0.20+8-1~26.04","17.0.20.1+1-1~26.04","17.0.21.0.3+1-1~26.04.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["17.0.16+8-0ubuntu1","17.0.17+10-0ubuntu1","17.0.18+8-0ubuntu1","17.0.19+10-0ubuntu1~26.04.1","17.0.20+8-0ubuntu1~26.04"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.0.9~8ea-1","21.0.9+10-1","21.0.10~4ea-1","21.0.10~6ea-1","21.0.10+7-1","21.0.11~5ea-1","21.0.11~8ea-1","21.0.11+10-1~26.04.2","21.0.12+8-1~26.04","21.0.12.1+1-1~26.04.4","21.0.13.0.3+1-1~26.04.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.0.8+9-0ubuntu1","21.0.9+10-0ubuntu1","21.0.10+7-0ubuntu1","21.0.11+10-0ubuntu1~26.04.1","21.0.12+8-0ubuntu1~26.04"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.5.0.3+1-1~26.04.1"}]}],"versions":["25+36-1","25.0.1+8-1","25.0.1+8-2","25.0.1+8-3","25.0.2+10-1","25.0.3~5ea-2","25.0.3~7ea-2","25.0.3+9-2~26.04.2","25.0.4+7-1~26.04","25.0.4.1+1-1~26.04.4"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8u462-ga-1","8u472-ga~us1-0ubuntu1","8u472-ga-1","8u482-ga~us1-0ubuntu1","8u492-ga~us2-0ubuntu1~26.04.1","8u502-ga~us1-0ubuntu1~26.04","8u504-ga-1ubuntu1~26.04.3","8u512-b09~us1-0ubuntu1~26.04.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["11.0.28+6-1ubuntu1","11.0.29+7-1ubuntu1","11.0.30+7-1ubuntu1","11.0.31+11-1ubuntu1~26.04.2","11.0.32+9-1ubuntu1~26.04","11.0.32.1+1-1ubuntu1~26.04","11.0.33+9-1ubuntu1~26.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.5.0.3+1-1~22.04.1"}]}],"versions":["25+36-1~22.04.2","25.0.1+8-1~22.04","25.0.2+10-1~22.04","25.0.3+9-2~22.04.2","25.0.4+7-1~22.04","25.0.4.1+1-1~22.04.4"],"bundled":41},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.5.0.3+1-1~24.04.1"}]}],"versions":["25+36-1~24.04.2","25.0.1+8-1~24.04","25.0.2+10-1~24.04","25.0.3+9-2~24.04.2","25.0.4+7-1~24.04","25.0.4.1+1-1~24.04.4"],"bundled":41},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.5.0.3+1-1~26.10.1"}]}],"versions":["25.0.3~7ea-2","25.0.3+9-2","25.0.4~4ea-1","25.0.4+7-1","25.0.4.1+1-1"],"bundled":41},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.5.0.3+1-1~26.04.1"}]}],"versions":["25+36-1","25.0.1+8-1","25.0.1+8-2","25.0.1+8-3","25.0.2+10-1","25.0.3~5ea-2","25.0.3~7ea-2","25.0.3+9-2~26.04.2","25.0.4+7-1~26.04","25.0.4.1+1-1~26.04.4"],"bundled":41},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-27","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.0.1.0.3+1-1~26.10.1"}]}],"versions":["27~19ea-1","27~34ea-1","27+35-1"],"bundled":40},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-25-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.5.0-1.1"}]}],"bundled":39},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-25-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.5.0-1.1"}]}],"bundled":20}],"products":[{"vendor":"oracle corporation","product":"oracle java se"}],"references":[{"url":"https://www.oracle.com/security-alerts/cpuoct2026.html","tags":["vendor-advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87255"},{"url":"https://github.com/advisories/GHSA-2vwj-cmxm-5pv9"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-87255","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:88347","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-101516","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-83374","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-83376","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-83378","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-83380","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-83381","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-83387","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-83395","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-83400","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-87255","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-87290","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-87291","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-87292","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-87294","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-87367","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91332","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91333","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91334","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91335","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91373","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91374","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91375","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91379","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91380","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91394","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91397","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91398","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91400","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91410","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91415","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91418","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91451","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91452","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91453","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91461","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91462","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91463","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91464","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91487","tags":["report"]},{"url":"https://bugzilla.redhat.com/2556709","tags":["report"]},{"url":"https://bugzilla.redhat.com/2556795","tags":["report"]},{"url":"https://bugzilla.redhat.com/2556824","tags":["report"]},{"url":"https://bugzilla.redhat.com/2556837","tags":["report"]},{"url":"https://bugzilla.redhat.com/2556859","tags":["report"]},{"url":"https://bugzilla.redhat.com/2556960","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557007","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557032","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557041","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557047","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557056","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557079","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557110","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557117","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557122","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557195","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557236","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557261","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557356","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557364","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557405","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557427","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557443","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557506","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557558","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557564","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557598","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557662","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557674","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557690","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557709","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557711","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557731","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557757","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557765","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557780","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557857","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557906","tags":["report"]},{"url":"https://bugzilla.redhat.com/2557956","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-88347.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-88347.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-87255","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-87255","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:88347","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2556709","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2556795","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2556824","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2556837","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2556859","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2556960","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557007","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557032","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557047","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557056","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557079","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557110","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557117","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557122","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557195","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557236","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557261","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557356","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557364","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557405","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557427","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557443","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557506","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557558","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557564","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557598","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557674","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557690","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557709","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557711","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557731","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557765","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557780","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557857","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557906","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2557956","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-87255","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-87255","tags":["report"]},{"url":"https://openjdk.org/groups/vulnerability/advisories/2026-10-20","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-9004-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-9005-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-83374","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-83376","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-83378","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-83380","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-83381","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-83387","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-83395","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-83400","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-87290","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-87291","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-87292","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-87294","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-87367","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91332","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91333","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91334","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91335","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91373","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91374","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91375","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91379","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91380","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91382","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91394","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91397","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91398","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91400","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91403","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91410","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91411","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91415","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91418","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91451","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91452","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91453","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91461","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91462","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91463","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91464","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91487","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-101737","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-101516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-83374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-83376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-83378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-83380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-83381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-83387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-83395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-83400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91487","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-87255","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).","status":"published","published":"2026-10-20T21:23:50.728Z","modified":"2026-10-27T18:50:10.598Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T13:37:58.613221Z"}],"euvd":[{"id":"EUVD-2026-106329","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).","status":"published","published":"2026-10-20T21:23:50Z","modified":"2026-10-27T18:50:10Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T16:59:22.397015Z"}],"ghsa":[{"id":"GHSA-2vwj-cmxm-5pv9","title":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are...","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).","status":"published","published":"2026-10-21T00:32:59Z","modified":"2026-10-27T21:33:30Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T15:14:30.732607Z"}],"nvd":[{"id":"CVE-2026-87255","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).","status":"published","published":"2026-10-20T22:20:05.71Z","modified":"2026-10-27T19:17:30.777Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:13:01.751479Z"}],"osv":[{"id":"ALPINE-CVE-2026-87255","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).","status":"published","published":"2026-10-20T22:20:05.71Z","modified":"2026-11-03T06:33:04.157524785Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-03T07:15:37.282377Z"},{"id":"BELL-CVE-2026-87255","status":"published","published":"2026-10-22T06:11:59.140923Z","modified":"2026-11-10T07:15:04.544583057Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-10T07:24:03.807132Z"},{"id":"DEBIAN-CVE-2026-87255","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).","status":"published","published":"2026-10-20T22:20:05.71Z","modified":"2026-10-29T00:00:07.691399792Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:46:05.022702Z"},{"id":"RLSA-2026:88347","title":"Important: java-25-openjdk security update","description":"The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit.\n\nSecurity Fix(es):\n\n* JDK: Enhance PKCS5 padding (CVE-2026-83374)\n\n* JDK: Enhance TLS certificate handling (CVE-2026-83376)\n\n* JDK: Improve C2 loop transformations (CVE-2026-83378)\n\n* JDK: Enhance LDAP logins (CVE-2026-83380)\n\n* JDK: Enhance SASL Authentication (CVE-2026-83381)\n\n* JDK: Enhance WebRowSets (CVE-2026-83387)\n\n* JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)\n\n* JDK: Enhance XML Processing (CVE-2026-83400)\n\n* JDK: Enhance Vector Processing (CVE-2026-87255)\n\n* JDK: Enhance XPath Expressions (CVE-2026-87290)\n\n* JDK: Enhance HTTP Server (CVE-2026-87291)\n\n* JDK: Enhance Network Clients (CVE-2026-87292)\n\n* JDK: Enhance Certificate Name Checks (CVE-2026-87294)\n\n* JDK: Enhance Template Handling (CVE-2026-87367)\n\n* JDK: Enhance HTTP Client (CVE-2026-91332)\n\n* JDK: Improve ciphertext handling (CVE-2026-91333)\n\n* JDK: Enhance JPEG loading (CVE-2026-91334)\n\n* JDK: Enhance Image Handling (CVE-2026-91335)\n\n* JDK: Enhance TLS handshakes (CVE-2026-91373)\n\n* JDK: Enhance jstatd (CVE-2026-91374)\n\n* JDK: Enhance jmod handling (CVE-2026-91375)\n\n* JDK: Enhance JShell (CVE-2026-91379)\n\n* JDK: Enhance Preferences (CVE-2026-91380)\n\n* JDK: Enhance HTTP client caching (CVE-2026-91394)\n\n* JDK: Enhance diagnostic sessions (CVE-2026-91397)\n\n* JDK: Enhance SOCKS5 support (CVE-2026-91398)\n\n* JDK: Enhance MIDI file handling (CVE-2026-91400)\n\n* JDK: Enhance zipfs (CVE-2026-91410)\n\n* JDK: Enhance font rendering (CVE-2026-91415)\n\n* JDK: Enhance GIF loading (CVE-2026-91418)\n\n* JDK: Enhance HTTP server parsing (CVE-2026-91451)\n\n* JDK: Enhance HTTP server (CVE-2026-91452)\n\n* JDK: Improve HTTP headers (CVE-2026-91453)\n\n* JDK: Enhance TLS Extensions (CVE-2026-91461)\n\n* JDK: Enhance krb5 tokens (CVE-2026-91462)\n\n* JDK: Enhance krb5 client (CVE-2026-91463)\n\n* JDK: Enhance Kerberos validation (CVE-2026-91464)\n\n* JDK: Enhance C2 comparisons (CVE-2026-91487)\n\n* JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nNote that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 \u0026 CVE-2026-114820) should be resolved by updating the ca-certificates package.","status":"published","published":"2026-10-29T12:04:09.468138Z","modified":"2026-10-29T12:30:03.19871048Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"UBUNTU-CVE-2026-87255","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).","status":"published","published":"2026-10-20T22:20:00Z","modified":"2026-11-10T02:51:46.99474314Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-10T03:20:38.262756Z"},{"id":"ALSA-2026:88347","title":"Important: java-25-openjdk security update","description":"The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit.  \n\nSecurity Fix(es):  \n\n  * JDK: Enhance PKCS5 padding (CVE-2026-83374)\n  * JDK: Enhance TLS certificate handling (CVE-2026-83376)\n  * JDK: Improve C2 loop transformations (CVE-2026-83378)\n  * JDK: Enhance LDAP logins (CVE-2026-83380)\n  * JDK: Enhance SASL Authentication (CVE-2026-83381)\n  * JDK: Enhance WebRowSets (CVE-2026-83387)\n  * JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)\n  * JDK: Enhance XML Processing (CVE-2026-83400)\n  * JDK: Enhance Vector Processing (CVE-2026-87255)\n  * JDK: Enhance XPath Expressions (CVE-2026-87290)\n  * JDK: Enhance HTTP Server (CVE-2026-87291)\n  * JDK: Enhance Network Clients (CVE-2026-87292)\n  * JDK: Enhance Certificate Name Checks (CVE-2026-87294)\n  * JDK: Enhance Template Handling (CVE-2026-87367)\n  * JDK: Enhance HTTP Client (CVE-2026-91332)\n  * JDK: Improve ciphertext handling (CVE-2026-91333)\n  * JDK: Enhance JPEG loading (CVE-2026-91334)\n  * JDK: Enhance Image Handling (CVE-2026-91335)\n  * JDK: Enhance TLS handshakes (CVE-2026-91373)\n  * JDK: Enhance jstatd (CVE-2026-91374)\n  * JDK: Enhance jmod handling (CVE-2026-91375)\n  * JDK: Enhance JShell (CVE-2026-91379)\n  * JDK: Enhance Preferences (CVE-2026-91380)\n  * JDK: Enhance HTTP client caching (CVE-2026-91394)\n  * JDK: Enhance diagnostic sessions (CVE-2026-91397)\n  * JDK: Enhance SOCKS5 support (CVE-2026-91398)\n  * JDK: Enhance MIDI file handling (CVE-2026-91400)\n  * JDK: Enhance zipfs (CVE-2026-91410)\n  * JDK: Enhance font rendering (CVE-2026-91415)\n  * JDK: Enhance GIF loading (CVE-2026-91418)\n  * JDK: Enhance HTTP server parsing (CVE-2026-91451)\n  * JDK: Enhance HTTP server (CVE-2026-91452)\n  * JDK: Improve HTTP headers (CVE-2026-91453)\n  * JDK: Enhance TLS Extensions (CVE-2026-91461)\n  * JDK: Enhance krb5 tokens (CVE-2026-91462)\n  * JDK: Enhance krb5 client (CVE-2026-91463)\n  * JDK: Enhance Kerberos validation (CVE-2026-91464)\n  * JDK: Enhance C2 comparisons (CVE-2026-91487)\n  * JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  \n\nNote that the OpenJDK RPMs use the system certificate store, so the eMudhra CVEs (CVE-2026-91403 \u0026 CVE-2026-114820) should be resolved by updating the ca-certificates package.\n","status":"published","published":"2026-10-27T00:00:00Z","modified":"2026-10-29T11:32:38.662183511Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"openSUSE-SU-2026:12329-1","title":"java-25-openjdk-25.0.5.0-1.1 on GA media","description":"These are all security issues fixed in the java-25-openjdk-25.0.5.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-10-28T00:00:00Z","modified":"2026-10-29T12:15:05.836247531Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"openSUSE-SU-2026:12436-1","title":"java-25-openj9-25.0.5.0-1.1 on GA media","description":"These are all security issues fixed in the java-25-openj9-25.0.5.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-11-05T00:00:00Z","modified":"2026-11-06T17:23:10.48606303Z","updated_at":"2026-11-06T18:05:03.243497Z"},{"id":"USN-9004-1","title":"openjdk-25 vulnerabilities","description":"It was discovered that the 2D component of OpenJDK 25 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to\ncause a denial of service or to read or modify sensitive data.\n(CVE-2026-91415)\n\nIt was discovered that the Networking component of OpenJDK 25 did not\ncorrectly authenticate users. A remote attacker could possibly use this\nissue to modify sensitive data. (CVE-2026-91398)\n\nIt was discovered that the 2D component of OpenJDK 25 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to\ncause a denial of service or to modify sensitive data. (CVE-2026-91382)\n\nIt was discovered that the JGSS component of OpenJDK 25 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to\ncause a denial of service or to modify sensitive data. (CVE-2026-91411)\n\nIt was discovered that the Networking component of OpenJDK 25 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto cause a denial of service or to modify sensitive data. (CVE-2026-83395)\n\nIt was discovered that the Security component of OpenJDK 25 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto read or modify sensitive data. (CVE-2026-83381, CVE-2026-87294)\n\nIt was discovered that the JAXP component of OpenJDK 25 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-87290)\n\nIt was discovered that the JDBC component of OpenJDK 25 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-83387)\n\nIt was discovered that the JGSS component of OpenJDK 25 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to\nmodify sensitive data. (CVE-2026-91462)\n\nIt was discovered that the Security component of OpenJDK 25 did not\ncorrectly authenticate users. A remote attacker could possibly use this\nissue to modify sensitive data. (CVE-2026-83374)\n\nIt was discovered that the Libraries component of OpenJDK 25 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto cause a denial of service. (CVE-2026-91410)\n\nIt was discovered that the Networking component of OpenJDK 25 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto modify sensitive data. (CVE-2026-87292, CVE-2026-91332, CVE-2026-91451,\nCVE-2026-91452)\n\nIt was discovered that the JSSE component of OpenJDK 25 did not correctly\nauthorize users. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2026-91373)\n\nIt was discovered that the JAAS component of OpenJDK 25 did not correctly\nauthorize users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-83380)\n\nIt was discovered that the JAXP component of OpenJDK 25 did not correctly\nauthorize users. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2026-83400)\n\nIt was discovered that the JGSS component of OpenJDK 25 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-91463, CVE-2026-91464)\n\nIt was discovered that the Lightweight HTTP Server component of OpenJDK 25\ndid not correctly authorize users. A remote attacker could possibly use\nthis issue to modify sensitive data. (CVE-2026-91453)\n\nIt was discovered that the ImageIO component of OpenJDK 25 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto cause a denial of service. (CVE-2026-91418)\n\nIt was discovered that the Compiler component of OpenJDK 25 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto read or modify sensitive data. (CVE-2026-91487)\n\nIt was discovered that the Serviceability component of OpenJDK 25 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto read or modify sensitive data. (CVE-2026-91374)\n\nIt was discovered that the Libraries component of OpenJDK 25 did not\ncorrectly authenticate users. A local attacker could possibly use this\nissue to modify sensitive data. (CVE-2026-91375)\n\nIt was discovered that the JDK tools component of OpenJDK 25 did not\ncorrectly authenticate users. A local attacker could possibly use this\nissue to modify sensitive data. (CVE-2026-91379)\n\nIt was discovered that the Utility component of OpenJDK 25 did not\ncorrectly authorize users. A local attacker could possibly use this issue\nto read or modify sensitive data. (CVE-2026-91380)\n\nIt was discovered that the ImageIO component of OpenJDK 25 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto read sensitive data. (CVE-2026-91334)\n\nIt was discovered that the JAXP component of OpenJDK 25 did not correctly\nauthorize users. A remote attacker could possibly use this issue to modify\nsensitive data. (CVE-2026-87367)\n\nIt was discovered that the JSSE component of OpenJDK 25 did not correctly\nauthorize users. A remote attacker could possibly use this issue to modify\nsensitive data. (CVE-2026-83376, CVE-2026-91461)\n\nIt was discovered that the Serviceability component of OpenJDK 25 did not\ncorrectly authorize users. A local attacker could possibly use this issue\nto cause a denial of service or to modify sensitive data. (CVE-2026-91397)\n\nIt was discovered that the Sound component of OpenJDK 25 did not correctly\nauthorize users. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2026-91400)\n\nIt was discovered that the AWT component of OpenJDK 25 did not correctly\nauthorize users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-91335)\n\nIt was discovered that the Networking component of OpenJDK 25 did not\ncorrectly authenticate users. A remote attacker could possibly use this\nissue to read sensitive data. (CVE-2026-91394)\n\nIt was discovered that the Networking component of OpenJDK 25 did not\ncorrectly authorize users. An unauthenticated remote attacker could\npossibly use this issue to read sensitive data. (CVE-2026-87291)\n\nIt was discovered that the Compiler component of OpenJDK 25 did not\ncorrectly authorize users. An unauthenticated remote attacker could\npossibly use this issue to read or modify sensitive data. (CVE-2026-83378)\n\nIt was discovered that the Compiler component of OpenJDK 25 did not\ncorrectly authorize users. An unauthenticated remote attacker could\npossibly use this issue to read sensitive data. (CVE-2026-87255)\n\nIt was discovered that the Security component of OpenJDK 25 did not\ncorrectly authorize users. An unauthenticated remote attacker could\npossibly use this issue to read or modify sensitive data. (CVE-2026-91333)\n\nIt was discovered that the JSSE component of OpenJDK 25 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to read\nor modify sensitive data. (CVE-2026-91403)\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttps://openjdk.org/groups/vulnerability/advisories/2026-10-20\nhttps://openjdk.org/groups/vulnerability/advisories/2026-10-21\nhttps://openjdk.org/groups/vulnerability/advisories/2026-10-24","status":"published","published":"2026-11-09T02:00:41Z","modified":"2026-11-11T09:43:28.933233687Z","updated_at":"2026-11-11T10:04:27.123105Z"},{"id":"USN-9005-1","title":"openjdk-27 vulnerabilities","description":"It was discovered that the 2D component of OpenJDK 27 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to\ncause a denial of service or to read or modify sensitive data.\n(CVE-2026-91415)\n\nIt was discovered that the Networking component of OpenJDK 27 did not\ncorrectly authenticate users. A remote attacker could possibly use this\nissue to modify sensitive data. (CVE-2026-91398)\n\nIt was discovered that the Networking component of OpenJDK 27 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto cause a denial of service or to modify sensitive data. (CVE-2026-83395)\n\nIt was discovered that the Security component of OpenJDK 27 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto read or modify sensitive data. (CVE-2026-83381, CVE-2026-87294)\n\nIt was discovered that the JAXP component of OpenJDK 27 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-87290)\n\nIt was discovered that the JDBC component of OpenJDK 27 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-83387)\n\nIt was discovered that the JGSS component of OpenJDK 27 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to\nmodify sensitive data. (CVE-2026-91462)\n\nIt was discovered that the Security component of OpenJDK 27 did not\ncorrectly authenticate users. A remote attacker could possibly use this\nissue to modify sensitive data. (CVE-2026-83374)\n\nIt was discovered that the Libraries component of OpenJDK 27 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto cause a denial of service. (CVE-2026-91410)\n\nIt was discovered that the Networking component of OpenJDK 27 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto modify sensitive data. (CVE-2026-87292, CVE-2026-91332, CVE-2026-91451,\nCVE-2026-91452)\n\nIt was discovered that the JSSE component of OpenJDK 27 did not correctly\nauthorize users. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2026-91373)\n\nIt was discovered that the JAAS component of OpenJDK 27 did not correctly\nauthorize users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-83380)\n\nIt was discovered that the JAXP component of OpenJDK 27 did not correctly\nauthorize users. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2026-83400)\n\nIt was discovered that the JGSS component of OpenJDK 27 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-91463, CVE-2026-91464)\n\nIt was discovered that the Lightweight HTTP Server component of OpenJDK 27\ndid not correctly authorize users. A remote attacker could possibly use\nthis issue to modify sensitive data. (CVE-2026-91453)\n\nIt was discovered that the ImageIO component of OpenJDK 27 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto cause a denial of service. (CVE-2026-91418)\n\nIt was discovered that the Compiler component of OpenJDK 27 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto read or modify sensitive data. (CVE-2026-91487)\n\nIt was discovered that the Serviceability component of OpenJDK 27 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto read or modify sensitive data. (CVE-2026-91374)\n\nIt was discovered that the Libraries component of OpenJDK 27 did not\ncorrectly authenticate users. A local attacker could possibly use this\nissue to modify sensitive data. (CVE-2026-91375)\n\nIt was discovered that the JDK tools component of OpenJDK 27 did not\ncorrectly authenticate users. A local attacker could possibly use this\nissue to modify sensitive data. (CVE-2026-91379)\n\nIt was discovered that the Utility component of OpenJDK 27 did not\ncorrectly authorize users. A local attacker could possibly use this issue\nto read or modify sensitive data. (CVE-2026-91380)\n\nIt was discovered that the ImageIO component of OpenJDK 27 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto read sensitive data. (CVE-2026-91334)\n\nIt was discovered that the JAXP component of OpenJDK 27 did not correctly\nauthorize users. A remote attacker could possibly use this issue to modify\nsensitive data. (CVE-2026-87367)\n\nIt was discovered that the JSSE component of OpenJDK 27 did not correctly\nauthorize users. A remote attacker could possibly use this issue to modify\nsensitive data. (CVE-2026-83376, CVE-2026-91461)\n\nIt was discovered that the Serviceability component of OpenJDK 27 did not\ncorrectly authorize users. A local attacker could possibly use this issue\nto cause a denial of service or to modify sensitive data. (CVE-2026-91397)\n\nIt was discovered that the Sound component of OpenJDK 27 did not correctly\nauthorize users. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2026-91400)\n\nIt was discovered that the AWT component of OpenJDK 27 did not correctly\nauthorize users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-91335)\n\nIt was discovered that the Networking component of OpenJDK 27 did not\ncorrectly authenticate users. A remote attacker could possibly use this\nissue to read sensitive data. (CVE-2026-91394)\n\nIt was discovered that the Networking component of OpenJDK 27 did not\ncorrectly authorize users. An unauthenticated remote attacker could\npossibly use this issue to read sensitive data. (CVE-2026-87291)\n\nIt was discovered that the Compiler component of OpenJDK 27 did not\ncorrectly authorize users. An unauthenticated remote attacker could\npossibly use this issue to read or modify sensitive data. (CVE-2026-83378)\n\nIt was discovered that the Compiler component of OpenJDK 27 did not\ncorrectly authorize users. An unauthenticated remote attacker could\npossibly use this issue to read sensitive data. (CVE-2026-87255)\n\nIt was discovered that the Security component of OpenJDK 27 did not\ncorrectly authorize users. An unauthenticated remote attacker could\npossibly use this issue to read or modify sensitive data. (CVE-2026-91333)\n\nIt was discovered that the JSSE component of OpenJDK 27 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to read\nor modify sensitive data. (CVE-2026-91403)\n\nIt was discovered that the Compiler component of OpenJDK 27 did not\ncorrectly authorize users. An unauthenticated remote attacker could\npossibly use this issue to cause a denial of service. (CVE-2026-101737)\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttps://openjdk.org/groups/vulnerability/advisories/2026-10-20\nhttps://openjdk.org/groups/vulnerability/advisories/2026-10-21\nhttps://openjdk.org/groups/vulnerability/advisories/2026-10-24","status":"published","published":"2026-11-09T02:27:00Z","modified":"2026-11-11T09:43:28.880425714Z","updated_at":"2026-11-12T18:08:43.376257Z"}]}}