CVE-2024-23897

CVE-2024-23897 Environment Setup 1. Install Java sudo apt update sudo apt install openjdk-11-jdk -y 2. Download Jenkins WAR file wget https://get.jenkins.io/war/2.441/jenkins.war 3. Change default Java version - Select Java 11 sudo update-alternatives --config java 4. Verify version - Check...

Amazon Linux 2 : java-11-amazon-corretto (ALAS-2026-4067)

The version of java-11-amazon-corretto installed on the remote host is prior to 11.0.33.0.10-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4067 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of...

Important: java-11-amazon-corretto

Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2,...

Amazon Linux 2023 : java-11-amazon-corretto, java-11-amazon-corretto-devel, java-11-amazon-corretto-headless (ALAS2023-2026-3372)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3372 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE:...

Important: java-11-amazon-corretto

Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2,...

ROS-20261019-73-0087

The vulnerability in Java-11-openjdk is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ROS-20261019-73-0074

The vulnerability in Java-11-openjdk is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ROS-20261019-73-0097

The vulnerability in Java-11-openjdk is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

SUSE SLES12: java-11-openjdk / java-11-openjdk-demo / java-11-openjdk-devel / etc (SUSE-SU-2026:4515-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4515-1 advisory. - CVE-2026-60589: improve resource resolving bsc1275777. - CVE-2026-61308: enhance HTTP connections bsc1275778. - CVE-2026-70907:...

Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: CVE-2026-60589: improve resource resolving bsc1275777. CVE-2026-61308: enhance HTTP connections bsc1275778. CVE-2026-70907: enhance TLS server bsc1275764. Changes for java-11-openjdk: Upgrade to jdk-11.0.32.1+1 August 2026 CSPU Patch...

SUSE-SU-2026:4515-1 Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: - CVE-2026-60589: improve resource resolving bsc1275777. - CVE-2026-61308: enhance HTTP connections bsc1275778. - CVE-2026-70907: enhance TLS server bsc1275764. Changes for java-11-openjdk: - Upgrade to jdk-11.0.32.1+1 August 2026 CSPU...

Rocky Linux 8 [CIQ] Security Update: java-11-openjdk / java-11-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2022_7012)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20227012 advisory. OpenJDK: improper MultiByte conversion can lead to buffer overflow JGSS, 8286077 CVE-2022-21618 OpenJDK: excessive memory allocation in X.509 certificate...

Rocky Linux 8.8 [CIQ] Security Update: java-11-openjdk / java-11-openjdk-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_1077)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261077 advisory. This advisory aggregates security fixes for the java-11-openjdk SRPM in CIQ LTS 8.8. It addresses 6 CVEs: CVE-2024-20918, CVE-2024-20921, CVE-2024-20945,...

CentOS Linux 7 [TuxCare] Security Update: java-11-openjdk / java-11-openjdk-debug / java-11-openjdk-demo / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1786706544)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1786706544 advisory. - Vulnerability in Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31,...

Rocky Linux 9.6 [TuxCare] Security Update: java-11-openjdk / java-11-openjdk-demo / java-11-openjdk-devel / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1785331296)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785331296 advisory. - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster ima...

CentOS Linux 7.9 [CIQ] Security Update: java-11-openjdk / java-11-openjdk-debug / java-11-openjdk-debuginfo / etc (ciqsa-2026_0681)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260681 advisory. This advisory aggregates security fixes for the java-11-openjdk SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2025-50059. Tenable has extracted the...

Rocky Linux 9 [CIQ] Security Update: java-11-openjdk / java-11-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_8121)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20248121 advisory. giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function CVE-2023-48161 JDK: Array indexing integer overflow 8328544 CVE-2024-21210 JDK:...

CentOS Linux 7 [TuxCare] Security Update: java-11-openjdk / java-11-openjdk-debug / java-11-openjdk-demo / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1777279119)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1777279119 advisory. - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image...

AlmaLinux 9.6 [TuxCare] Security Update: java-11-openjdk / java-11-openjdk-demo / java-11-openjdk-devel / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1785331296)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785331296 advisory. - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image...

CentOS Linux 7.9 [CIQ] Security Update: java-11-openjdk / java-11-openjdk-debug / java-11-openjdk-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0680)

The CentOS Linux 7.9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260680 advisory. This advisory aggregates security fixes for the java-11-openjdk SRPM in CIQ CentOS Bridge 7.9. It addresses 11 CVEs: CVE-2022-42252, CVE-2024-21131,...