69712 matches found
openjdk: Enhance TLS certificate handling (Oracle CPU 2026-07)
A flaw was found in OpenJDK. When a server has wantClientAuth and the client sends a nocertificate alert, any client certificates are not verified...
openjdk: Enhance Jar handling (Oracle CPU 2026-07)
A flaw was found in OpenJDK. There exists a potential existential forgery vulnerability in CMS and protocols which use CMS. In Java, CMS is used to sign JAR files...
openjdk: Improve DTLS handshaking (Oracle CPU 2026-07)
A flaw was found in OpenJDK. The DTLS implementation is open to two different DoS attacks...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: java-21-openjdk-portable: java-21-openjdk-portable-21.0.12.0.8-0.1.hum1 aarch64, x8664 java-21-openjdk-portable-devel-21.0.12.0.8-0.1.hum1 aarch64, x8664...
CLSA-2026-1784077513 TuxCare security update for com.mchange:mchange-commons-java (1 CVE)
TuxCare rebuilt com.mchange:mchange-commons-java to address 1 CVE. Fixed in 0.2.19-tuxcare.1...
CLSA-2026-1784077469 TuxCare security update for com.mchange:mchange-commons-java (1 CVE)
TuxCare rebuilt com.mchange:mchange-commons-java to address 1 CVE. Fixed in 0.2.15-tuxcare.1...
CLSA-2026-1783991044 TuxCare security update for com.mchange:mchange-commons-java (1 CVE)
TuxCare rebuilt com.mchange:mchange-commons-java to address 1 CVE. Fixed in 0.2.20-tuxcare.1...
CLSA-2026-1779151612 TuxCare security update for com.github.pjfanning:excel-streaming-reader (2 CVEs)
TuxCare rebuilt com.github.pjfanning:excel-streaming-reader to address 2 CVEs. Fixed in 5.0.2-tuxcare.1...
CLSA-2026-1778460297 TuxCare security update for com.microsoft.ews-java-api:ews-java-api (1 CVE)
TuxCare rebuilt com.microsoft.ews-java-api:ews-java-api to address 1 CVE. Fixed in 2.0-tuxcare.1...
CLSA-2026-1777250302 TuxCare security update for org.xerial.snappy:snappy-java (1 CVE)
TuxCare rebuilt org.xerial.snappy:snappy-java to address 1 CVE. Fixed in 1.1.2-tuxcare.2...
CLSA-2026-1775521830 TuxCare security update for mysql:mysql-connector-java (1 CVE)
TuxCare rebuilt mysql:mysql-connector-java to address 1 CVE. Fixed in 5.1.49-tuxcare.1...
CLSA-2026-1774743847 TuxCare security update for org.xerial.snappy:snappy-java (1 CVE)
TuxCare rebuilt org.xerial.snappy:snappy-java to address 1 CVE. Fixed in 1.1.2-tuxcare.1...
CLSA-2025-1762906010 TuxCare security update for com.google.protobuf:protobuf-java (2 CVEs)
TuxCare rebuilt com.google.protobuf:protobuf-java to address 2 CVEs. Fixed in 2.6.1-tuxcare.1...
CLSA-2024-1732492826 TuxCare security update for org.xerial.snappy:snappy-java (4 CVEs)
TuxCare rebuilt org.xerial.snappy:snappy-java to address 4 CVEs. Fixed in 1.1.8.4.tuxcare...
CVE-2026-43871
A flaw was found in Apache Thrift, affecting its Python, Go, PHP, and Java components. This vulnerability, known as an 'Infinite Loop', could allow a remote attacker to disrupt service availability. By exploiting this flaw, an attacker can trigger a continuous loop, leading to a denial of service...
opentaint star-history/latest
The open source taint analysis engine for the AI era Formal taint analysis for application security — finds what AST-pattern matchers miss, lets LLM agents enact rules from vulnerabilities, scales where neither can alone. English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dan...
Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the July 2026 CPU
Summary There are multiple vulnerabilities in the IBM® SDK, Java™ Technology Edition that is shipped with IBM WebSphere Application Server and IBM WebSphere Application Server Liberty. The CVEs listed in this document might affect some configurations of IBM WebSphere Application Server traditiona...
PT-2026-75393
TuxCare rebuilt com.mchange:mchange-commons-java to address 1 CVE. Fixed in 0.2.20-tuxcare.1...