openjdk: Enhance Template Handling (Oracle CPU 2026-10)

A flaw was found in the JAXP Java API for XML Processing component of OpenJDK. An unauthenticated remote attacker can exploit this vulnerability by providing crafted input to applications or web services that process data through JAXP APIs. Successful exploitation allows the attacker to perform...

openjdk: Enhance Image Processing (Oracle CPU 2026-10)

A flaw was found in OpenJDK's 2D component. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted data to an application that processes input using affected 2D APIs. Successful exploitation could allow the attacker to create, modify, or delete...

openjdk: Enhance jmod handling (Oracle CPU 2026-10)

A flaw was found in openjdk. An unauthenticated attacker with local access to the host system could leverage this vulnerability in the Libraries component by convincing a user to interact with a malicious application or by supplying crafted input through exposed application programming interfaces...

openjdk: Enhance HTTP Client Response Handling (Oracle CPU 2026-10)

A flaw was found in OpenJDK. An unauthenticated remote attacker with network access could exploit this vulnerability by submitting crafted data to networking application programming interfaces APIs. A successful attack could allow unauthorized modification or deletion of accessible data, or resul...

openjdk: Enhance TLS handshakes (Oracle CPU 2026-10)

A flaw was found in OpenJDK's Java Secure Socket Extension JSSE component. An unauthenticated remote attacker with network access via Transport Layer Security TLS can exploit this vulnerability to cause a partial Denial of Service DoS. This issue can be triggered when an application or web servic...

openjdk: Enhance Preferences (Oracle CPU 2026-10)

A flaw was found in the OpenJDK Utility component. An unauthenticated attacker with local system access or the ability to supply data to affected application programming interfaces APIs can exploit this vulnerability. Successful exploitation can result in unauthorized data access, allowing an...

openjdk: Improve HTTP headers (Oracle CPU 2026-10)

A flaw was found in OpenJDK's Lightweight HTTP Server. An unauthenticated remote attacker can exploit this vulnerability over the network by sending crafted requests to exposed server Application Programming Interfaces APIs. Successful exploitation allows an attacker to perform unauthorized data...

openjdk: Enhance HTTP server parsing (Oracle CPU 2026-10)

A flaw was found in the Networking component of OpenJDK. This vulnerability allows an unauthenticated remote attacker to cause unauthorized data modification by sending crafted input to exposed Application Programming Interfaces APIs, such as through web services. Successful exploitation enables ...

openjdk: Enhance TLS Extensions (Oracle CPU 2026-10)

A flaw was found in the Java Secure Socket Extension JSSE component. An unauthenticated remote attacker could exploit this vulnerability over Transport Layer Security TLS by sending crafted data to affected application programming interfaces APIs. A successful attack allows the attacker to cause...

openjdk: Enhance JPEG loading (Oracle CPU 2026-10)

A flaw was found in OpenJDK's ImageIO component. This vulnerability allows an unauthenticated remote attacker to cause information disclosure by submitting crafted inputs to applications or web services using the ImageIO application programming interface API. Successful exploitation can result in...

openjdk: Enhance MIDI file handling (Oracle CPU 2026-10)

A flaw was found in the Sound component of Java SE and GraalVM. This issue allows an unauthenticated remote attacker to cause a partial Denial of Service DoS by convincing a user to run untrusted code within a sandboxed Java environment...

OpenJDK: Distrust eMudhra intermediate CA certificates due to security concerns

The certificate authority CA store used in OpenJDK and Oracle Java included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue...

openjdk: Enhance LDAP logins (Oracle CPU 2026-10)

A flaw was found in OpenJDK within the Java Authentication and Authorization Service JAAS component. An unauthenticated remote attacker can exploit this vulnerability over a network by sending data to affected application programming interfaces APIs. Successful exploitation results in information...

OpenJDK: Distrust eMudhra intermediate CA certificates due to security concerns

The certificate authority CA store used in OpenJDK and Oracle Java included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue...

openjdk: Enhance HTTP Client (Oracle CPU 2026-10)

A flaw was found in OpenJDK's Networking component. An unauthenticated remote attacker with network access can exploit this vulnerability by sending crafted input to exposed networking Application Programming Interfaces APIs. Successful exploitation allows the attacker to perform unauthorized dat...

openjdk: Enhance JShell (Oracle CPU 2026-10)

A flaw was found in OpenJDK's JDK tools component. An unauthenticated local attacker can exploit this vulnerability by convincing a user to interact with untrusted code in an environment relying on the Java security sandbox. A successful attack can result in unauthorized creation, modification, o...

openjdk: Enhance zipfs (Oracle CPU 2026-10)

A flaw was found in the Libraries component of OpenJDK. An unauthenticated remote attacker with network access can exploit this vulnerability by supplying crafted data to vulnerable application programming interfaces APIs. Successful exploitation allows the attacker to cause a partial Denial of...

openjdk: Enhance Kerberos validation (Oracle CPU 2026-10)

A flaw was found in OpenJDK's Java Generic Security Services JGSS component. An unauthenticated remote attacker could exploit this vulnerability by enticing a user to execute untrusted code within a sandboxed Java environment. Successful exploitation results in unauthorized information disclosure...

openjdk: Enhance SASL Authentication (Oracle CPU 2026-10)

A flaw was found in OpenJDK. An unauthenticated remote attacker can exploit this vulnerability over a network by supplying crafted input to Application Programming Interfaces APIs within the Security component. Successful exploitation can result in unauthorized read and modification access to a...

openjdk: Enhance GIF loading (Oracle CPU 2026-10)

A flaw was found in OpenJDK's ImageIO component. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted input to applications utilizing ImageIO APIs. Successful exploitation can result in a partial Denial of Service DoS, degrading application...

openjdk: Enhance Image Handling (Oracle CPU 2026-10)

A flaw was found in OpenJDK's Abstract Window Toolkit AWT. A remote attacker with low privileges could exploit this vulnerability by convincing a user to run untrusted code within a sandboxed environment. Successful exploitation allows unauthorized read access to a subset of accessible data,...

openjdk: Enhance jstatd (Oracle CPU 2026-10)

A flaw was found in the Serviceability component of OpenJDK. An unauthenticated remote attacker can exploit this issue across the network by supplying crafted data to exposed application programming interfaces APIs or by running untrusted code within a sandboxed Java environment. Successful...

openjdk: Enhance krb5 client (Oracle CPU 2026-10)

A flaw was found in the JGSS Java Generic Security Services component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by enticing a user to execute untrusted code in deployments relying on the Java sandbox. Successful exploitation can result in unauthorized access ...

openjdk: Enhance HTTP client caching (Oracle CPU 2026-10)

A flaw was found in the OpenJDK Networking component. This vulnerability allows an unauthenticated remote attacker with network access to cause an information disclosure. By supplying crafted input to networking Application Programming Interfaces APIs, such as through an exposed web service, an...

openjdk: Enhance krb5 tokens (Oracle CPU 2026-10)

A flaw was found in the Java Generic Security Services JGSS component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted requests to exposed application programming interfaces APIs, such as through a web service. A successful attack...

Critical: Red Hat Security Advisory: OpenJDK 17.0.21 Security Update for Windows Builds

An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...

openjdk: Enhance WebRowSets (Oracle CPU 2026-10)

A flaw was found in the Java Database Connectivity JDBC component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted input to exposed JDBC application programming interfaces APIs or by executing untrusted code. If successfully exploited...

Critical: Red Hat Security Advisory: Red Hat AI Base Images 3.5.5 (Neuron)

Red Hat AI Base Images 3.5.5 Neuron is now available. Red Hat® AI Base Images...

Critical: Red Hat Security Advisory: Red Hat AI Base Images 3.4.6 (Neuron)

Red Hat AI Base Images 3.4.6 Neuron is now available. Red Hat® AI Base Images...

Critical: Red Hat Security Advisory: Red Hat AI Base Images 3.5.5 (ROCm 7.14)

Red Hat AI Base Images 3.5.5 ROCm 7.14 is now available. Red Hat® AI Base Images...

Critical: Red Hat Security Advisory: Red Hat AI Base Images 3.4.6 (Spyre)

Red Hat AI Base Images 3.4.6 Spyre is now available. Red Hat® AI Base Images...

Critical: Red Hat Security Advisory: Red Hat AI Base Images 3.4.6 (ROCm 6.4)

Red Hat AI Base Images 3.4.6 ROCm 6.4 is now available. Red Hat® AI Base Images...

Critical: Red Hat Security Advisory: Red Hat AI Base Images 3.0.7 (TPU)

Red Hat AI Base Images 3.0.7 TPU is now available. Red Hat® AI Base Images...

Critical: Red Hat Security Advisory: Red Hat AI Base Images 3.5.5 (Spyre)

Red Hat AI Base Images 3.5.5 Spyre is now available. Red Hat® AI Base Images...

Critical: Red Hat Security Advisory: Red Hat AI Base Images 3.4.6 (CPU)

Red Hat AI Base Images 3.4.6 CPU is now available. Red Hat® AI Base Images...

Critical: Red Hat Security Advisory: Red Hat AI Base Images 3.5.5 (CUDA 13.0)

Red Hat AI Base Images 3.5.5 CUDA 13.0 is now available. Red Hat® AI Base Images...

Critical: Red Hat Security Advisory: Red Hat AI Base Images 3.5.5 (CUDA 12.9)

Red Hat AI Base Images 3.5.5 CUDA 12.9 is now available. Red Hat® AI Base Images...

Critical: Red Hat Security Advisory: Red Hat AI Base Images 3.0.7 (CUDA)

Red Hat AI Base Images 3.0.7 CUDA is now available. Red Hat® AI Base Images...

Critical: Red Hat Security Advisory: Red Hat AI Base Images 3.4.6 (CUDA 13.0)

Red Hat AI Base Images 3.4.6 CUDA 13.0 is now available. Red Hat® AI Base Images...

Critical: Red Hat Security Advisory: Red Hat AI Base Images 3.4.6 (Gaudi)

Red Hat AI Base Images 3.4.6 Gaudi is now available. Red Hat® AI Base Images...

Critical: Red Hat Security Advisory: Red Hat AI Base Images 3.4.6 (TPU)

Red Hat AI Base Images 3.4.6 TPU is now available. Red Hat® AI Base Images...

Critical: Red Hat Security Advisory: Red Hat AI Base Images 3.0.7 (CPU)

Red Hat AI Base Images 3.0.7 CPU is now available. Red Hat® AI Base Images...

Critical: Red Hat Security Advisory: Red Hat AI Base Images 3.5.5 (Rubin)

Red Hat AI Base Images 3.5.5 Rubin is now available. Red Hat® AI Base Images...

Critical: Red Hat Security Advisory: Red Hat AI Base Images 3.0.7 (ROCm)

Red Hat AI Base Images 3.0.7 ROCm is now available. Red Hat® AI Base Images...

Critical: Red Hat Security Advisory: Red Hat AI Base Images 3.4.6 (CUDA 12.9)

Red Hat AI Base Images 3.4.6 CUDA 12.9 is now available. Red Hat® AI Base Images...

Critical: Red Hat Security Advisory: Red Hat AI Base Images 3.4.6 (ROCm 7.1)

Red Hat AI Base Images 3.4.6 ROCm 7.1 is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat Cost Management On-Premise container image update

Updated container image for Red Hat Cost Management On-Premise is now available. Red Hat Cost Management On-Premise provides cost visibility and analysis for on-premise OpenShift environments. This update includes the latest bug fixes and enhancements...

Critical: Red Hat Security Advisory: Red Hat AI Base Images 3.5.5 (Gaudi)

Red Hat AI Base Images 3.5.5 Gaudi is now available. Red Hat® AI Base Images...

Critical: Red Hat Security Advisory: Red Hat AI Base Images 3.0.7 (Spyre)

Red Hat AI Base Images 3.0.7 Spyre is now available. Red Hat® AI Base Images...

Critical: Red Hat Security Advisory: Red Hat AI Base Images 3.5.5 (CPU)

Red Hat AI Base Images 3.5.5 CPU is now available. Red Hat® AI Base Images...