Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Oracle Java SE and Oracle GraalVM Enterprise Edition products of Oracle Java SE component: JAXP. The supported versions affected by this vulnerability include Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. This easily...

Astra Linux – Vulnerability in openjdk-11, bcel

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 o...

Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. The supported versions affected by this vulnerability are Java SE: 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. This vulnerability is difficult to exploit...

SUSE-SU-2026:4153-1 Security update for java-1_8_0-ibm

This update for java-180-ibm fixes the following issues: Update to Java 8.0 Service Refresh 8 Fix Pack 71 bsc1277833: - CVE-2026-8400: flaw in the ORB component may allow a malicious IIOP server to induce loading and instantation of arbitrary classes bsc1274276. - CVE-2026-16243: arraycmp SIMD...

MGASA-2026-0395 Updated java-21-openjdk & java-17-openjdk packages fix security vulnerabilities

Enhance TLS certificate handling. CVE-2026-46968 Improve DTLS handshaking. CVE-2026-46917 Enhance JPEG handling. CVE-2026-47010 Enhance XBM image support. CVE-2026-47021 Enhance Jar file processing. CVE-2026-47027 Improve certification checking. CVE-2026-60147 Enhance AWT ImagingLib. CVE-2026-470...

Updated java-21-openjdk & java-17-openjdk packages fix security vulnerabilities

Enhance TLS certificate handling. CVE-2026-46968 Improve DTLS handshaking. CVE-2026-46917 Enhance JPEG handling. CVE-2026-47010 Enhance XBM image support. CVE-2026-47021 Enhance Jar file processing. CVE-2026-47027 Improve certification checking. CVE-2026-60147 Enhance AWT ImagingLib. CVE-2026-470...

CVE-2026-70906 vulnerabilities

Vulnerabilities for packages: openjdk-jipher-fips...

CVE-2026-70907 vulnerabilities

Vulnerabilities for packages: openjdk-jipher-fips, liberica...

CVE-2026-60589 vulnerabilities

Vulnerabilities for packages: openjdk-jipher-fips, liberica...

GHSA-47G6-3P6H-6CPC vulnerabilities

Vulnerabilities for packages: openjdk-jipher-fips, liberica...

GHSA-WVJ6-93Q8-XHCM vulnerabilities

Vulnerabilities for packages: openjdk-jipher-fips, liberica...

GHSA-969J-F8M5-XPGQ vulnerabilities

Vulnerabilities for packages: openjdk-jipher-fips...

CVE-2026-61308 vulnerabilities

Vulnerabilities for packages: openjdk-jipher-fips, liberica...

GHSA-X2CM-PMMM-V6XC vulnerabilities

Vulnerabilities for packages: openjdk-jipher-fips, liberica...

Oracle Linux 10 / 8 / 9 : java-21-openjdk (ELSA-2026-42895)

The remote Oracle Linux 10 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42895 advisory. 1:21.0.12.1.1-1.2.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.12.1.1-1.2 - Bump release for PQC build - Related: RHEL-235625...

Security Bulletin: Updating Java in Identity Insight 9.0.0.1 for security update

Summary Identity Insight customers are advised to update OpenJDK 8 to version 8.0.504 for the security update in Java. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- IBM InfoSphere...

Security Bulletin: Updating Java in Identity Insight 10.0.0.0 for security update

Summary Identity Insight customers are advised to update OpenJDK 17 to version 17.0.20.10. for the security update in Java. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- IBM InfoSphe...

SUSE-SU-2026:4107-1 Security update for java-1_8_0-ibm

This update for java-180-ibm fixes the following issues: Update to Java 8.0 Service Refresh 8 Fix Pack 71 bsc1277833: - CVE-2026-8400: flaw in the ORB component may allow a malicious IIOP server to induce loading and instantation of arbitrary classes bsc1274276. - CVE-2026-16243: arraycmp SIMD...

openSUSE 16: java-17-openjdk / java-17-openjdk-demo / java-17-openjdk-devel / etc (openSUSE-SU-2026:21745-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21745-1 advisory. Upgrade to upstream tag jdk-17.0.20.1+1 August 2026 CSPU. - CVE-2026-60589: unauthenticated attacker with network access via multiple protocols...

openSUSE 16: java-21-openjdk / java-21-openjdk-demo / java-21-openjdk-devel / etc (openSUSE-SU-2026:21759-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21759-1 advisory. Security issues fixed: - CVE-2026-60589: OpenJDK: Improve Resource Resolving bsc1275777. - CVE-2026-61308: OpenJDK: Enhance HTTP Connections...