Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: CVE-2026-60589: OpenJDK: Improve Resource Resolving bsc1275777. CVE-2026-61308: OpenJDK: Enhance HTTP Connections bsc1275778. CVE-2026-70907: OpenJDK: Enhance TLS server bsc1275764. Changes for java-11-openjdk: Upgrade to upstream tag...

SUSE-SU-2026:4339-1 Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: - CVE-2026-60589: OpenJDK: Improve Resource Resolving bsc1275777. - CVE-2026-61308: OpenJDK: Enhance HTTP Connections bsc1275778. - CVE-2026-70907: OpenJDK: Enhance TLS server bsc1275764. Changes for java-11-openjdk: - Upgrade to upstrea...

PT-2026-98286

Name of the Vulnerable Software and Affected Versions PHP affected versions not specified Description The function php openssl matches wildcard name in ext/openssl/xp ssl.c contains an integer underflow in the length argument passed to memchr. This occurs when a TLS server certificate uses a...

CVE-2026-96770

All published s2s-proxy versions through 0.2.2 are affected. In versions 0.1.16 through 0.2.2, TLS server listeners use Go's RequireAnyClientCert mode when skipCAVerification is false. This mode checks that the client holds the certificate's private key but does not verify the certificate against...

CVE-2026-96770 s2s-proxy accepts untrusted client certificates

All published s2s-proxy versions through 0.2.2 are affected. In versions 0.1.16 through 0.2.2, TLS server listeners use Go's RequireAnyClientCert mode when skipCAVerification is false. This mode checks that the client holds the certificate's private key but does not verify the certificate against...

CVE-2026-96770

The s2s-proxy software is vulnerable in all published versions through 0.2.2 (specifically versions 0.1.16 through 0.2.2 ). The root cause is that TLS server listeners use Go's RequireAnyClientCert mode while skipCAVerification is set to false. This configuration validates that the client possess...

EUVD-2026-85567

All published s2s-proxy versions through 0.2.2 are affected. In versions 0.1.16 through 0.2.2, TLS server listeners use Go's RequireAnyClientCert mode when skipCAVerification is false. This mode checks that the client holds the certificate's private key but does not verify the certificate against...

Moderate: Red Hat Security Advisory: java-1.8.0-ibm security update

An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

RHEL 8 : java-1.8.0-ibm (RHSA-2026:70630)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70630 advisory. IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. Security Fixes: OpenJDK: Improve...

SUSE SLED15: java-21-openjdk / java-21-openjdk-demo / java-21-openjdk-devel / etc (SUSE-SU-2026:4006-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4006-1 advisory. Security issues fixed: - CVE-2026-60589: OpenJDK: Improve Resource Resolving bsc1275777. - CVE-2026-61308:...

SUSE SLED15: java-25-openjdk / java-25-openjdk-demo / java-25-openjdk-devel / etc (SUSE-SU-2026:3999-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3999-1 advisory. - CVE-2026-60589: OpenJDK: Improve Resource Resolving bsc1275777. - CVE-2026-61308: OpenJDK: Enhance HTTP...

CVE-2026-84975 PJSIP: TLS server identity (hostname) verification bypass via embedded NUL in certificate SubjectAltName (OpenSSL and GnuTLS backends)

PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the OpenSSL and GnuTLS backends in pjlib/src/pj/sslsockossl.c and pjlib/src/pj/sslsockgtls.c copy DNS SubjectAltName values with string functions that recalculate their length and truncate an...

openSUSE 16: java-21-openjdk / java-21-openjdk-demo / java-21-openjdk-devel / etc (openSUSE-SU-2026:21759-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21759-1 advisory. Security issues fixed: - CVE-2026-60589: OpenJDK: Improve Resource Resolving bsc1275777. - CVE-2026-61308: OpenJDK: Enhance HTTP Connections...

Security update for java-21-openjdk

This update for java-21-openjdk fixes the following issues: Security issues fixed: CVE-2026-60589: OpenJDK: Improve Resource Resolving bsc1275777. CVE-2026-61308: OpenJDK: Enhance HTTP Connections bsc1275778. CVE-2026-70907: OpenJDK: Enhance TLS server bsc1275764. Non security issue fixed:...

SUSE-SU-2026:4006-1 Security update for java-21-openjdk

This update for java-21-openjdk fixes the following issues: Security issues fixed: - CVE-2026-60589: OpenJDK: Improve Resource Resolving bsc1275777. - CVE-2026-61308: OpenJDK: Enhance HTTP Connections bsc1275778. - CVE-2026-70907: OpenJDK: Enhance TLS server bsc1275764. Non security issue fixed: ...

SUSE-SU-2026:3999-1 Security update for java-25-openjdk

This update for java-25-openjdk fixes the following issues: - CVE-2026-60589: OpenJDK: Improve Resource Resolving bsc1275777. - CVE-2026-61308: OpenJDK: Enhance HTTP Connections bsc1275778. - CVE-2026-70906: OpenJDK: Improve font loading bsc1275763. - CVE-2026-70907: OpenJDK: Enhance TLS server...

Security update for java-25-openjdk

This update for java-25-openjdk fixes the following issues: CVE-2026-60589: OpenJDK: Improve Resource Resolving bsc1275777. CVE-2026-61308: OpenJDK: Enhance HTTP Connections bsc1275778. CVE-2026-70906: OpenJDK: Improve font loading bsc1275763. CVE-2026-70907: OpenJDK: Enhance TLS server bsc127576...

OPENSUSE-SU-2026:21759-1 Security update for java-21-openjdk

This update for java-21-openjdk fixes the following issues: Security issues fixed: - CVE-2026-60589: OpenJDK: Improve Resource Resolving bsc1275777. - CVE-2026-61308: OpenJDK: Enhance HTTP Connections bsc1275778. - CVE-2026-70907: OpenJDK: Enhance TLS server bsc1275764. Non security issue fixed: ...

SUSE-SU-2026:23624-1 Security update for java-21-openjdk

This update for java-21-openjdk fixes the following issues: Security issues fixed: - CVE-2026-60589: OpenJDK: Improve Resource Resolving bsc1275777. - CVE-2026-61308: OpenJDK: Enhance HTTP Connections bsc1275778. - CVE-2026-70907: OpenJDK: Enhance TLS server bsc1275764. Non security issue fixed: ...

MiracleLinux 9 : java-1.8.0-openjdk-1.8.0.504.b01-1.2.el9.ML.1 (AXSA:2026-1740:18)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1740:18 advisory. JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Enhance TLS server CVE-2026-70907 Tenable has...