TencentOS Server 3: java-21-openjdk (TSSA-2026:0927)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0927 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

java-11-openjdk-11.0.32.1-1.1 on GA media (moderate)

java-11-openjdk-11.0.32.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11594-1 Rating: moderate Cross-References: CVE-2026-60589 CVE-2026-61308 CVE-2026-70907 CVSS scores: CVE-2026-60589 SUSE : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2026-61308 SUSE : 6.8...

OPENSUSE-SU-2026:11620-1 java-21-openjdk-21.0.12.1-1.1 on GA media

These are all security issues fixed in the java-21-openjdk-21.0.12.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11621-1 java-25-openjdk-25.0.4.1-1.1 on GA media

These are all security issues fixed in the java-25-openjdk-25.0.4.1-1.1 package on the GA media of openSUSE Tumbleweed...

[SECURITY] [DLA 4757-1] openjdk-17 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4757-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 26, 2026 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4756-1] openjdk-11 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4756-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 26, 2026 https://wiki.debian.org/LTS -...

USN-8681-1: OpenJDK 25 vulnerabilities

It was discovered that the JSSE component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. CVE-2026-46968 It was discovered that the JSSE component of OpenJDK 25 did not correctly authorize users. A remote attack...

USN-8681-1 openjdk-25 vulnerabilities

It was discovered that the JSSE component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. CVE-2026-46968 It was discovered that the JSSE component of OpenJDK 25 did not correctly authorize users. A remote attack...

MiracleLinux 8 : java-1.8.0-openjdk-1.8.0.504.b01-1.1.el8 (AXSA:2026-1656:16)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1656:16 advisory. JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Enhance TLS server CVE-2026-70907 Tenable has...

Debian dla-4757 : openjdk-17-dbg - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4757 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4757-1 [email protected]...

Debian dla-4756 : openjdk-11-dbg - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4756 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4756-1 [email protected]...

MiracleLinux 9 : java-25-openjdk-25.0.4.0.7-1.1.el9.ML.1 (AXSA:2026-1651:08)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1651:08 advisory. JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Improve DTLS handshaking CVE-2026-46917 JDK: Enhance JPEG handling CVE-2026-47010 JDK:...

MiracleLinux 8 : java-17-openjdk-17.0.20.1.1-1.1.el8 (AXSA:2026-1669:15)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1669:15 advisory. JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Enhance TLS server CVE-2026-70907 Tenable has...

USN-8677-1: OpenJDK 21 vulnerabilities

It was discovered that the JSSE component of OpenJDK 21 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. CVE-2026-46968 It was discovered that the JSSE component of OpenJDK 21 did not correctly authorize users. A remote attack...

USN-8677-1 openjdk-21 vulnerabilities

It was discovered that the JSSE component of OpenJDK 21 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. CVE-2026-46968 It was discovered that the JSSE component of OpenJDK 21 did not correctly authorize users. A remote attack...

USN-8676-1: OpenJDK 17 vulnerabilities

It was discovered that the JSSE component of OpenJDK 17 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. CVE-2026-46968 It was discovered that the JSSE component of OpenJDK 17 did not correctly authorize users. A remote attack...

USN-8676-1 openjdk-17 vulnerabilities

It was discovered that the JSSE component of OpenJDK 17 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. CVE-2026-46968 It was discovered that the JSSE component of OpenJDK 17 did not correctly authorize users. A remote attack...

USN-8674-1 openjdk-lts vulnerabilities

It was discovered that the JSSE component of OpenJDK 11 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. CVE-2026-46968 It was discovered that the JSSE component of OpenJDK 11 did not correctly authorize users. A remote attack...

USN-8674-1: OpenJDK 11 vulnerabilities

It was discovered that the JSSE component of OpenJDK 11 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. CVE-2026-46968 It was discovered that the JSSE component of OpenJDK 11 did not correctly authorize users. A remote attack...

USN-8673-1: OpenJDK 8 vulnerabilities

It was discovered that the JSSE component of OpenJDK 8 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. CVE-2026-46968 It was discovered that the ImageIO component of OpenJDK 8 did not correctly authorize users. A remote...