USN-8673-1 openjdk-8 vulnerabilities

It was discovered that the JSSE component of OpenJDK 8 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. CVE-2026-46968 It was discovered that the ImageIO component of OpenJDK 8 did not correctly authorize users. A remote...

[SECURITY] Fedora 43 Update: java-latest-openjdk-26.0.2.1.0-0.0.0.fc43

The OpenJDK 26 runtime environment...

[SECURITY] Fedora 43 Update: java-25-openjdk-25.0.4.1.1-1.1.fc43

The OpenJDK 25 runtime environment...

[SECURITY] Fedora 43 Update: java-21-openjdk-21.0.12.1.1-1.0.fc43

The OpenJDK 21 runtime environment...

[SECURITY] Fedora 43 Update: java-21-openjdk-portable-21.0.12.1.1-1.0.fc43

The OpenJDK 21 runtime environment - portable edition...

[SECURITY] Fedora 44 Update: java-latest-openjdk-26.0.2.1.0-0.0.0.fc44

The OpenJDK 26 runtime environment...

[SECURITY] Fedora 44 Update: java-25-openjdk-25.0.4.1.1-1.1.fc44

The OpenJDK 25 runtime environment...

Fedora 43 : java-21-openjdk / java-21-openjdk-portable (2026-40b2544dda)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-40b2544dda advisory. First monthly cadence release candidate Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

Fedora 43 : java-25-openjdk / java-latest-openjdk (2026-760df8d7e8)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-760df8d7e8 advisory. August CPU. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this issue...

Fedora 44 : java-25-openjdk / java-latest-openjdk (2026-ff0646db03)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-ff0646db03 advisory. August CPU. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this issue...

OPENSUSE-SU-2026:11595-1 java-17-openjdk-17.0.20.1-1.1 on GA media

These are all security issues fixed in the java-17-openjdk-17.0.20.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11594-1 java-11-openjdk-11.0.32.1-1.1 on GA media

These are all security issues fixed in the java-11-openjdk-11.0.32.1-1.1 package on the GA media of openSUSE Tumbleweed...

java-1.7.0-openjdk: Fix of 11 CVEs

CVE-2024-20952: Enhance TLS connection support JDK-8317547, JDK-8302017 - CVE-2025-21587: Better TLS connection support JDK-8337692 - CVE-2026-34268: Enhance key generation JDK-8371935 - CVE-2026-22007: Enhance crypto algorithm support JDK-8369575 - CVE-2026-21925: Improve JMX connections...

MiracleLinux 9 : java-17-openjdk-17.0.20.0.8-1.2.el9.ML.1 (AXSA:2026-1630:13)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1630:13 advisory. JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Improve DTLS handshaking CVE-2026-46917 JDK: Enhance JPEG handling CVE-2026-47010 JDK:...

AlmaLinux 10 : java-25-openjdk (ALSA-2026:55798)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:55798 advisory. JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Improve font loading CVE-2026-70906 JDK: Enhance TLS...

[SECURITY] [DSA 6460-1] openjdk-25 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6460-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 23, 2026 https://www.debian.org/security/faq -...

Debian dsa-6460 : openjdk-25-dbg - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6460 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6460-1 [email protected] https://www.debian.org/securit...

java-1.8.0-openjdk: Fix of 6 CVEs

Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u502-b07. That fixes following CVEs: - CVE-2026-46968: JSSE, remote high-complexity integrity flaw in TLS certificate handling - CVE-2026-47010: ImageIO, remote high-complexity low-impact integrity flaw in JPEG handling - CVE-2026-47021: 2D,...

java-1.7.0-openjdk: Fix of 6 CVEs

CVE-2026-47063: Enhance Jar handling JDK-8381049...

[SECURITY] [DSA 6457-1] openjdk-21 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6457-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 21, 2026 https://www.debian.org/security/faq -...