16062 matches found
openjdk: Enhance Jar file processing (Oracle CPU 2026-07)
A flaw was found in OpenJDK. The processImpl method in SignatureFileVerifier exhibits On^2 time complexity when verifying JAR files where different entries have different signer combinations, potentially leading to DoS...
openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07)
A flaw was found in OpenJDK. When the software processes certain images, a specific function fails to manage memory boundaries correctly. This can lead to the application attempting to access invalid memory or dereference a null pointer, which may cause the application to unexpectedly terminate...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: java-21-openjdk-portable: java-21-openjdk-portable-21.0.12.0.8-0.1.hum1 aarch64, x8664 java-21-openjdk-portable-devel-21.0.12.0.8-0.1.hum1 aarch64, x8664...
openjdk: Enhance XBM image support (Oracle CPU 2026-07)
A flaw was found in OpenJDK. The regex defined in XbmImageDecoder matchRegex is vulnerable to a DoS attack when the input contains a long string without a closing character; due to excessive backtracking...
Amazon Linux 2 : java-1.8.0-openjdk, --advisory ALAS2-2026-3848 (ALAS-2026-3848)
The version of java-1.8.0-openjdk installed on the remote host is prior to 1.8.0.502.b07-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3848 advisory. Vulnerability in Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java S...
CVE-2026-47010 vulnerabilities
Vulnerabilities for packages: zulu-psu, openjdk, liberica...
CVE-2026-46968 vulnerabilities
Vulnerabilities for packages: zulu-psu, openjdk, liberica...
GHSA-FHJM-G79R-VV57 vulnerabilities
Vulnerabilities for packages: zulu-psu, openjdk, liberica...
GHSA-HHF8-3X8G-6PFF vulnerabilities
Vulnerabilities for packages: zulu-psu, openjdk, liberica...
GHSA-QW6J-RCFR-8VRX vulnerabilities
Vulnerabilities for packages: zulu-psu, openjdk, liberica...
CVE-2026-47021 vulnerabilities
Vulnerabilities for packages: zulu-psu, openjdk, liberica...
GHSA-HHF8-3X8G-6PFF vulnerabilities
Vulnerabilities for packages: openjdk...
CVE-2026-47010 vulnerabilities
Vulnerabilities for packages: openjdk...
GHSA-QW6J-RCFR-8VRX vulnerabilities
Vulnerabilities for packages: openjdk...
CVE-2026-47021 vulnerabilities
Vulnerabilities for packages: openjdk...
GHSA-FHJM-G79R-VV57 vulnerabilities
Vulnerabilities for packages: openjdk...
CVE-2026-46968 vulnerabilities
Vulnerabilities for packages: openjdk...
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Upgrade to upstream tag jdk-11.0.32+9 July 2026 CPU. Security issues fixed: CVE-2026-41254: lcms: information disclosure and denial of service via integer overflow in CubeSize bsc1264994. CVE-2026-46917: unauthenticated attacker with...
SUSE-SU-2026:3453-1 Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Upgrade to upstream tag jdk-11.0.32+9 July 2026 CPU. Security issues fixed: - CVE-2026-41254: lcms: information disclosure and denial of service via integer overflow in CubeSize bsc1264994. - CVE-2026-46917: unauthenticated attacker with...
Oracle Linux 10 / 9 : java-25-openjdk (ELSA-2026-42899)
The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42899 advisory. 25.0.4.0.7-1.1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:25.0.4.0.7-1.0 - Update to jdk-25.0.4+7 GA - Update release notes to 25.0.4+7 -...