OpenJDK: Enhance TLS server (2026-08 Security Update)

A flaw was found in OpenJDK. An unauthenticated remote attacker can cause a Denial of Service DoS by repeatedly sending replayed handshake initiation messages ClientHello to a Transport Layer Security TLS server. Because the server fails to properly restrict the negotiation loop, it emits an...

Moderate: Red Hat Security Advisory: java-1.8.0-openjdk security update

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

OpenJDK: Improve Resource Resolving (2026-08 Security Update)

A flaw was found in OpenJDK. The XML cryptographic component does not properly utilize the base Uniform Resource Identifier URI when resolving external references during data retrieval. A remote attacker could exploit this flaw by providing crafted XML input to induce the application to fetch...

Moderate: Red Hat Security Advisory: java-25-openjdk security update

An update for java-25-openjdk is now available for Red Hat Enterprise Linux 9 and Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

OpenJDK: Enhance HTTP Connections (2026-08 Security Update)

A flaw was found in OpenJDK. This vulnerability leads to information disclosure because the java.net.HttpURLConnection networking component does not remove Proxy-Authorization headers during cross-host HTTP Hypertext Transfer Protocol redirects. A remote attacker controlling a web server can...

OpenJDK: Improve Resource Resolving (2026-08 Security Update)

A flaw was found in OpenJDK. The XML cryptographic component does not properly utilize the base Uniform Resource Identifier URI when resolving external references during data retrieval. A remote attacker could exploit this flaw by providing crafted XML input to induce the application to fetch...

OpenJDK: Enhance TLS server (2026-08 Security Update)

A flaw was found in OpenJDK. An unauthenticated remote attacker can cause a Denial of Service DoS by repeatedly sending replayed handshake initiation messages ClientHello to a Transport Layer Security TLS server. Because the server fails to properly restrict the negotiation loop, it emits an...

OpenJDK: Improve font loading (2026-08 Security Update)

A flaw was found in OpenJDK. A remote attacker could cause a denial of service DoS by supplying a specially crafted font file. Processing the malicious font triggers an unrecoverable exception during a Foreign Function and Memory FFM API upcall, forcing the Java Virtual Machine JVM to terminate...

Moderate: Red Hat Security Advisory: java-21-openjdk security update

An update for java-21-openjdk is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10.0 Extended Update Support, and Red Hat Enterprise Linu...

OpenJDK: Improve Resource Resolving (2026-08 Security Update)

A flaw was found in OpenJDK. The XML cryptographic component does not properly utilize the base Uniform Resource Identifier URI when resolving external references during data retrieval. A remote attacker could exploit this flaw by providing crafted XML input to induce the application to fetch...

OpenJDK: Enhance HTTP Connections (2026-08 Security Update)

A flaw was found in OpenJDK. This vulnerability leads to information disclosure because the java.net.HttpURLConnection networking component does not remove Proxy-Authorization headers during cross-host HTTP Hypertext Transfer Protocol redirects. A remote attacker controlling a web server can...

OpenJDK: Enhance TLS server (2026-08 Security Update)

A flaw was found in OpenJDK. An unauthenticated remote attacker can cause a Denial of Service DoS by repeatedly sending replayed handshake initiation messages ClientHello to a Transport Layer Security TLS server. Because the server fails to properly restrict the negotiation loop, it emits an...

RHEL 10 / 8 / 9 : java-21-openjdk (RHSA-2026:55787)

The remote Redhat Enterprise Linux 10 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55787 advisory. The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security...

RHEL 7 / 8 / 9 : Java 11 OpenJDK ELS Security Update (Moderate) (RHSA-2026:55778)

The remote Redhat Enterprise Linux 7 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55778 advisory. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. This...

OpenJDK 8 <= 8u502 / 11.0.0 <= 11.0.32 / 17.0.0 <= 17.0.20 / 21.0.0 <= 21.0.12 / 25.0.0 <= 25.0.4 / 26.0.0 <= 26.0.2 Multiple Vulnerabilities (2026-08-18)

The version of OpenJDK installed on the remote host is 8 prior to 8u502 / 11.0.0 prior to 11.0.32 / 17.0.0 prior to 17.0.20 / 21.0.0 prior to 21.0.12 / 25.0.0 prior to 25.0.4 / 26.0.0 prior to 26.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026-08-18 advisory...

RHEL 10 / 9 : java-25-openjdk (RHSA-2026:55798)

The remote Redhat Enterprise Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55798 advisory. The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit. Security...

Moderate: java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fixes: JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Enhance TLS server CVE-2026-70907 For more details about...

Moderate: java-17-openjdk security update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fixes: JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Enhance TLS server CVE-2026-70907 For more details about...

Moderate: java-21-openjdk security update

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fixes: JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Enhance TLS server CVE-2026-70907 For more details about the...

ALSA-2026:55781 Moderate: java-17-openjdk security update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fixes: JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Enhance TLS server CVE-2026-70907 For more details about...