SUSE CVE-2026-63337

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.tools.jsonrpc.ProcedureDescription receives a javaReturnType value in an untrusted system.describe response and passes it through JSONUtil.tryFill,...

SUSE CVE-2026-69219

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java uses ValueReader.readBytes to accept a wire-declared contentLength below Integer.MAXVALUE and allocate a...

SUSE CVE-2026-69220

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java permits ValueReader.readTable and ValueReader.readArray to call ValueReader.readFieldValue recursively f...

[SECURITY] Fedora 43 Update: java-25-openjdk-25.0.4.1.1-1.1.fc43

The OpenJDK 25 runtime environment...

[SECURITY] Fedora 43 Update: java-latest-openjdk-26.0.2.1.0-0.0.0.fc43

The OpenJDK 26 runtime environment...

[SECURITY] Fedora 43 Update: java-21-openjdk-portable-21.0.12.1.1-1.0.fc43

The OpenJDK 21 runtime environment - portable edition...

[SECURITY] Fedora 43 Update: java-21-openjdk-21.0.12.1.1-1.0.fc43

The OpenJDK 21 runtime environment...

[SECURITY] Fedora 44 Update: java-25-openjdk-25.0.4.1.1-1.1.fc44

The OpenJDK 25 runtime environment...

[SECURITY] Fedora 44 Update: java-latest-openjdk-26.0.2.1.0-0.0.0.fc44

The OpenJDK 26 runtime environment...

PT-2026-81356

Name of the Vulnerable Software and Affected Versions NLTK versions prior to 3.10.3 Description Insufficient validation of JVM options passed through the options parameter in the java function allows the injection of dangerous JVM flags. By supplying malicious options such as -agentpath,...

CVE-2026-79675: Improper Neutralization of Argument Delimiters in a Command

NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java function, allowing attackers to inject dangerous JVM flags. Attackers can supply malicious options like -agentpath, -javaagent, or @argfile to Stanford wrapper classes to achieve arbitrary...

OPENSUSE-SU-2026:11594-1 java-11-openjdk-11.0.32.1-1.1 on GA media

These are all security issues fixed in the java-11-openjdk-11.0.32.1-1.1 package on the GA media of openSUSE Tumbleweed...

Fedora 43 : java-21-openjdk / java-21-openjdk-portable (2026-40b2544dda)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-40b2544dda advisory. First monthly cadence release candidate Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

Fedora 44 : java-25-openjdk / java-latest-openjdk (2026-ff0646db03)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-ff0646db03 advisory. August CPU. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this issue...

Fedora 43 : java-25-openjdk / java-latest-openjdk (2026-760df8d7e8)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-760df8d7e8 advisory. August CPU. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this issue...

JetBrains TeamCity < 2019.1.4 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2019.1.4. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2019.1.4, insecure Java Deserialization could potentially allow remote code execution. CVE-2019-18364 - In JetBrains TeamCity...

OPENSUSE-SU-2026:11595-1 java-17-openjdk-17.0.20.1-1.1 on GA media

These are all security issues fixed in the java-17-openjdk-17.0.20.1-1.1 package on the GA media of openSUSE Tumbleweed...

ALSA-2026:59372 Moderate: assertj-core security update

A rich and intuitive set of strongly-typed assertions to use for unit testing either with JUnit or TestNG. Security Fixes: assertj: AssertJ: Information disclosure and denial of service via XML External Entity XXE CVE-2026-24400 For more details about the security issues, including the impact, a...

CLSA-2026-1787222376 java-1.7.0-openjdk: Fix of 11 CVEs

CVE-2024-20952: Enhance TLS connection support JDK-8317547, JDK-8302017 - CVE-2025-21587: Better TLS connection support JDK-8337692 - CVE-2026-34268: Enhance key generation JDK-8371935 - CVE-2026-22007: Enhance crypto algorithm support JDK-8369575 - CVE-2026-21925: Improve JMX connections...

CVE-2026-59649

A flaw was found in Bouncy Castle for Java. The software's processing of OpenPGP user-attribute subpackets does not properly limit their length, bounding them only by the Java Virtual Machine JVM maximum memory. A remote attacker could exploit this by sending a specially crafted OpenPGP message,...