Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-47021 (GCVE-0-2026-47021)
Vulnerability from cvelistv5 – Published: 2026-07-21 21:33 – Updated: 2026-08-12 18:59
VLAI
EPSS
VEX
Summary
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
Severity
5.3 (Medium)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-12 18:59 UTC
CWE
- Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.
- CWE-400 - Uncontrolled Resource Consumption
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.oracle.com/security-alerts/cpujul2026.html | vendor-advisory |
Impacted products
3 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Oracle Corporation | Oracle Java SE |
Affected:
8u491
Affected: 8u491-perf Affected: 11.0.31 Affected: 17.0.19 Affected: 21.0.11 Affected: 25.0.3 Affected: 26.0.1 |
guessed | |
| Oracle Corporation | Oracle GraalVM for JDK |
Affected:
17.0.19
Affected: 21.0.11 |
guessed | |
| Oracle Corporation | Oracle GraalVM Enterprise Edition |
Affected:
21.3.18
|
guessed |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-47021",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-12T18:59:24.055036Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-400",
"description": "CWE-400 Uncontrolled Resource Consumption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-12T18:59:44.541Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Oracle Java SE",
"vendor": "Oracle Corporation",
"versions": [
{
"status": "affected",
"version": "8u491"
},
{
"status": "affected",
"version": "8u491-perf"
},
{
"status": "affected",
"version": "11.0.31"
},
{
"status": "affected",
"version": "17.0.19"
},
{
"status": "affected",
"version": "21.0.11"
},
{
"status": "affected",
"version": "25.0.3"
},
{
"status": "affected",
"version": "26.0.1"
}
]
},
{
"product": "Oracle GraalVM for JDK",
"vendor": "Oracle Corporation",
"versions": [
{
"status": "affected",
"version": "17.0.19"
},
{
"status": "affected",
"version": "21.0.11"
}
]
},
{
"product": "Oracle GraalVM Enterprise Edition",
"vendor": "Oracle Corporation",
"versions": [
{
"status": "affected",
"version": "21.3.18"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:oracle:java_se:8u491:*:*:*:*:*:*:*",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:java_se:8u491:*:*:*:enterprise_performance:*:*:*",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:java_se:11.0.31:*:*:*:*:*:*:*",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:java_se:17.0.19:*:*:*:*:*:*:*",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:java_se:21.0.11:*:*:*:*:*:*:*",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:java_se:25.0.3:*:*:*:*:*:*:*",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:java_se:26.0.1:*:*:*:*:*:*:*",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:graalvm_for_jdk:17.0.19:*:*:*:*:*:*:*",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:graalvm_for_jdk:21.0.11:*:*:*:*:*:*:*",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:graalvm:21.3.18:*:*:*:enterprise:*:*:*",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en-US",
"value": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.",
"lang": "en-US"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-21T21:33:05.422Z",
"orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
"shortName": "oracle"
},
"references": [
{
"name": "Oracle Advisory",
"tags": [
"vendor-advisory"
],
"url": "https://www.oracle.com/security-alerts/cpujul2026.html"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
"assignerShortName": "oracle",
"cveId": "CVE-2026-47021",
"datePublished": "2026-07-21T21:33:05.422Z",
"dateReserved": "2026-05-18T15:55:10.317Z",
"dateUpdated": "2026-08-12T18:59:44.541Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-47021",
"date": "2026-08-22",
"epss": "0.00305",
"percentile": "0.23303"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-47021\",\"sourceIdentifier\":\"secalert_us@oracle.com\",\"published\":\"2026-07-21T22:17:07.670\",\"lastModified\":\"2026-08-12T20:17:44.440\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).\"}],\"affected\":[{\"source\":\"secalert_us@oracle.com\",\"affectedData\":[{\"vendor\":\"Oracle Corporation\",\"product\":\"Oracle Java SE\",\"versions\":[{\"version\":\"8u491\",\"status\":\"affected\"},{\"version\":\"8u491-perf\",\"status\":\"affected\"},{\"version\":\"11.0.31\",\"status\":\"affected\"},{\"version\":\"17.0.19\",\"status\":\"affected\"},{\"version\":\"21.0.11\",\"status\":\"affected\"},{\"version\":\"25.0.3\",\"status\":\"affected\"},{\"version\":\"26.0.1\",\"status\":\"affected\"}]},{\"vendor\":\"Oracle Corporation\",\"product\":\"Oracle GraalVM for JDK\",\"versions\":[{\"version\":\"17.0.19\",\"status\":\"affected\"},{\"version\":\"21.0.11\",\"status\":\"affected\"}]},{\"vendor\":\"Oracle Corporation\",\"product\":\"Oracle GraalVM Enterprise Edition\",\"versions\":[{\"version\":\"21.3.18\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secalert_us@oracle.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\",\"baseScore\":5.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":3.9,\"impactScore\":1.4}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-08-12T18:59:24.055036Z\",\"id\":\"CVE-2026-47021\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-400\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.8.0:update491:*:*:-:*:*:*\",\"matchCriteriaId\":\"D0DE5FE4-2686-4C60-B4C6-2AC9E7A538D5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.8.0:update491:*:*:enterprise_performance_pack:*:*:*\",\"matchCriteriaId\":\"D60FEE5A-22B8-4F6C-AF4F-C8B317C2D102\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:11.0.31:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FB3E4F54-F4A3-40E8-8662-EA181BEE59E5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:17.0.19:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1F21877D-7A65-4208-B050-C6E2D5857861\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:21.0.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9A3AFF47-354C-4942-9EB7-45D2193EF63E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:25.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8F08B2DE-C919-46C7-8F5B-76C1FF0534BB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:26.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0FCAAFC2-C392-4D78-8027-0D40135AE0E9\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.8.0:update491:*:*:-:*:*:*\",\"matchCriteriaId\":\"26A3520C-C410-4AC7-93CF-69F5CBD23CA8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.8.0:update491:*:*:enterprise_performance_pack:*:*:*\",\"matchCriteriaId\":\"35F51EB5-DF63-47B3-9EFF-E52B0538747E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:11.0.31:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2CBF2718-F1CA-4BB6-8FE5-C106C444DFA6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:17.0.19:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0AF814DE-A1D5-44E6-B868-733F0BB4EB64\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:21.0.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6FC66081-3173-4BEB-A10E-DBDEDCD7C8E5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:25.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A8496CC4-C134-44F9-826A-492C5714B751\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:26.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D3FCB650-0CC3-41E5-8B44-449F4C851DD5\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:graalvm:21.3.18:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"EF86D60E-69A7-4037-981F-314D48C69EEE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:graalvm_for_jdk:17.0.19:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2EB67235-B538-415E-ABDD-53446AF5E7B8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:graalvm_for_jdk:21.0.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FBAA4BB5-D7E9-4F1A-AD13-65915A099495\"}]}]}],\"references\":[{\"url\":\"https://www.oracle.com/security-alerts/cpujul2026.html\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
"redhat_vex": {
"aggregate_severity": "Moderate",
"current_release_date": "2026-08-10T20:39:20+00:00",
"cve": "CVE-2026-47021",
"id": "CVE-2026-47021",
"initial_release_date": "2026-07-21T20:00:00+00:00",
"product_status:fixed": "2823",
"product_status:known_affected": "39",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "openjdk: Enhance XBM image support (Oracle CPU 2026-07)",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-47021.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "moderate",
"current_release_date": "2026-08-17T16:55:58Z",
"cve": "CVE-2026-47021",
"id": "CVE-2026-47021",
"initial_release_date": "2026-07-22T16:27:21Z",
"product_status:known_affected": "117",
"product_status:recommended": "672",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2026-47021",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-47021.json",
"version": "15"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-47021\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-08-12T18:59:24.055036Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-400\", \"description\": \"CWE-400 Uncontrolled Resource Consumption\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-07-23T15:21:52.453Z\"}}], \"cna\": {\"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"Oracle Corporation\", \"product\": \"Oracle Java SE\", \"versions\": [{\"status\": \"affected\", \"version\": \"8u491\"}, {\"status\": \"affected\", \"version\": \"8u491-perf\"}, {\"status\": \"affected\", \"version\": \"11.0.31\"}, {\"status\": \"affected\", \"version\": \"17.0.19\"}, {\"status\": \"affected\", \"version\": \"21.0.11\"}, {\"status\": \"affected\", \"version\": \"25.0.3\"}, {\"status\": \"affected\", \"version\": \"26.0.1\"}]}, {\"vendor\": \"Oracle Corporation\", \"product\": \"Oracle GraalVM for JDK\", \"versions\": [{\"status\": \"affected\", \"version\": \"17.0.19\"}, {\"status\": \"affected\", \"version\": \"21.0.11\"}]}, {\"vendor\": \"Oracle Corporation\", \"product\": \"Oracle GraalVM Enterprise Edition\", \"versions\": [{\"status\": \"affected\", \"version\": \"21.3.18\"}]}], \"references\": [{\"url\": \"https://www.oracle.com/security-alerts/cpujul2026.html\", \"name\": \"Oracle Advisory\", \"tags\": [\"vendor-advisory\"]}], \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en-US\", \"description\": \"Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:oracle:java_se:8u491:*:*:*:*:*:*:*\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:oracle:java_se:8u491:*:*:*:enterprise_performance:*:*:*\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:oracle:java_se:11.0.31:*:*:*:*:*:*:*\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:oracle:java_se:17.0.19:*:*:*:*:*:*:*\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:oracle:java_se:21.0.11:*:*:*:*:*:*:*\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:oracle:java_se:25.0.3:*:*:*:*:*:*:*\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:oracle:java_se:26.0.1:*:*:*:*:*:*:*\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:oracle:graalvm_for_jdk:17.0.19:*:*:*:*:*:*:*\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:oracle:graalvm_for_jdk:21.0.11:*:*:*:*:*:*:*\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:oracle:graalvm:21.3.18:*:*:*:enterprise:*:*:*\", \"vulnerable\": true}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"43595867-4340-4103-b7a2-9a5208d29a85\", \"shortName\": \"oracle\", \"dateUpdated\": \"2026-07-21T21:33:05.422Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-47021\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-12T18:59:44.541Z\", \"dateReserved\": \"2026-05-18T15:55:10.317Z\", \"assignerOrgId\": \"43595867-4340-4103-b7a2-9a5208d29a85\", \"datePublished\": \"2026-07-21T21:33:05.422Z\", \"assignerShortName\": \"oracle\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
FKIE_CVE-2026-47021
Vulnerability from fkie_nvd - Published: 2026-07-21 22:17 - Updated: 2026-08-12 20:17
Severity
Summary
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
References
| URL | Tags | ||
|---|---|---|---|
| secalert_us@oracle.com | https://www.oracle.com/security-alerts/cpujul2026.html | Vendor Advisory |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| oracle | jre | 1.8.0 | |
| oracle | jre | 1.8.0 | |
| oracle | jre | 11.0.31 | |
| oracle | jre | 17.0.19 | |
| oracle | jre | 21.0.11 | |
| oracle | jre | 25.0.3 | |
| oracle | jre | 26.0.1 | |
| oracle | jdk | 1.8.0 | |
| oracle | jdk | 1.8.0 | |
| oracle | jdk | 11.0.31 | |
| oracle | jdk | 17.0.19 | |
| oracle | jdk | 21.0.11 | |
| oracle | jdk | 25.0.3 | |
| oracle | jdk | 26.0.1 | |
| oracle | graalvm | 21.3.18 | |
| oracle | graalvm_for_jdk | 17.0.19 | |
| oracle | graalvm_for_jdk | 21.0.11 |
{
"affected": [
{
"affectedData": [
{
"product": "Oracle Java SE",
"vendor": "Oracle Corporation",
"versions": [
{
"status": "affected",
"version": "8u491"
},
{
"status": "affected",
"version": "8u491-perf"
},
{
"status": "affected",
"version": "11.0.31"
},
{
"status": "affected",
"version": "17.0.19"
},
{
"status": "affected",
"version": "21.0.11"
},
{
"status": "affected",
"version": "25.0.3"
},
{
"status": "affected",
"version": "26.0.1"
}
]
},
{
"product": "Oracle GraalVM for JDK",
"vendor": "Oracle Corporation",
"versions": [
{
"status": "affected",
"version": "17.0.19"
},
{
"status": "affected",
"version": "21.0.11"
}
]
},
{
"product": "Oracle GraalVM Enterprise Edition",
"vendor": "Oracle Corporation",
"versions": [
{
"status": "affected",
"version": "21.3.18"
}
]
}
],
"source": "secalert_us@oracle.com"
}
],
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:oracle:jre:1.8.0:update491:*:*:-:*:*:*",
"matchCriteriaId": "D0DE5FE4-2686-4C60-B4C6-2AC9E7A538D5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jre:1.8.0:update491:*:*:enterprise_performance_pack:*:*:*",
"matchCriteriaId": "D60FEE5A-22B8-4F6C-AF4F-C8B317C2D102",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jre:11.0.31:*:*:*:*:*:*:*",
"matchCriteriaId": "FB3E4F54-F4A3-40E8-8662-EA181BEE59E5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jre:17.0.19:*:*:*:*:*:*:*",
"matchCriteriaId": "1F21877D-7A65-4208-B050-C6E2D5857861",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jre:21.0.11:*:*:*:*:*:*:*",
"matchCriteriaId": "9A3AFF47-354C-4942-9EB7-45D2193EF63E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jre:25.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "8F08B2DE-C919-46C7-8F5B-76C1FF0534BB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jre:26.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "0FCAAFC2-C392-4D78-8027-0D40135AE0E9",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:oracle:jdk:1.8.0:update491:*:*:-:*:*:*",
"matchCriteriaId": "26A3520C-C410-4AC7-93CF-69F5CBD23CA8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jdk:1.8.0:update491:*:*:enterprise_performance_pack:*:*:*",
"matchCriteriaId": "35F51EB5-DF63-47B3-9EFF-E52B0538747E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jdk:11.0.31:*:*:*:*:*:*:*",
"matchCriteriaId": "2CBF2718-F1CA-4BB6-8FE5-C106C444DFA6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jdk:17.0.19:*:*:*:*:*:*:*",
"matchCriteriaId": "0AF814DE-A1D5-44E6-B868-733F0BB4EB64",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jdk:21.0.11:*:*:*:*:*:*:*",
"matchCriteriaId": "6FC66081-3173-4BEB-A10E-DBDEDCD7C8E5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jdk:25.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "A8496CC4-C134-44F9-826A-492C5714B751",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jdk:26.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "D3FCB650-0CC3-41E5-8B44-449F4C851DD5",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:oracle:graalvm:21.3.18:*:*:*:enterprise:*:*:*",
"matchCriteriaId": "EF86D60E-69A7-4037-981F-314D48C69EEE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:graalvm_for_jdk:17.0.19:*:*:*:*:*:*:*",
"matchCriteriaId": "2EB67235-B538-415E-ABDD-53446AF5E7B8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:graalvm_for_jdk:21.0.11:*:*:*:*:*:*:*",
"matchCriteriaId": "FBAA4BB5-D7E9-4F1A-AD13-65915A099495",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
}
],
"id": "CVE-2026-47021",
"lastModified": "2026-08-12T20:17:44.440",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4,
"source": "secalert_us@oracle.com",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-47021",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-12T18:59:24.055036Z",
"version": "2.0.3"
}
}
]
},
"published": "2026-07-21T22:17:07.670",
"references": [
{
"source": "secalert_us@oracle.com",
"tags": [
"Vendor Advisory"
],
"url": "https://www.oracle.com/security-alerts/cpujul2026.html"
}
],
"sourceIdentifier": "secalert_us@oracle.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-400"
}
],
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
}
GHSA-QW6J-RCFR-8VRX
Vulnerability from github – Published: 2026-07-22 00:31 – Updated: 2026-07-22 00:31
VLAI
Details
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
Severity
5.3 (Medium)
{
"affected": [],
"aliases": [
"CVE-2026-47021"
],
"database_specific": {
"cwe_ids": [
"CWE-400"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-07-21T22:17:07Z",
"severity": "MODERATE"
},
"details": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"id": "GHSA-qw6j-rcfr-8vrx",
"modified": "2026-07-22T00:31:15Z",
"published": "2026-07-22T00:31:15Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47021"
},
{
"type": "WEB",
"url": "https://www.oracle.com/security-alerts/cpujul2026.html"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"type": "CVSS_V3"
}
]
}
NCSC-2026-0261
Vulnerability from csaf_ncscnl - Published: 2026-07-22 15:24 - Updated: 2026-07-22 15:24Summary
Kwetsbaarheden verholpen in Oracle Java SE
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten: Oracle heeft meerdere kwetsbaarheden verholpen in Java SE (inclusief Oracle GraalVM en JavaFX componenten).
Interpretaties: Oracle Java SE en gerelateerde producten (Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition) bevatten diverse kwetsbaarheden die een niet-geauthenticeerde aanvaller met netwerktoegang via TLS of andere API's in staat stellen om gedeeltelijke denial of service te veroorzaken, kritieke data te wijzigen, of ongeautoriseerde lees- en schrijfacties uit te voeren. Deze kwetsbaarheden treffen meerdere ondersteunde versies en componenten, waaronder JSSE, JavaFX, 2D component APIs, scripting componenten en sandboxed Java Web Start applicaties of applets. Sommige kwetsbaarheden vereisen gebruikersinteractie en/of lage privileges, terwijl andere ook zonder aanwezigheid van onbetrouwbare Java Web Start applicaties kunnen worden misbruikt. De impact varieert van denial of service tot ongeautoriseerde datawijziging en systeemcompromittering. Verschillende CVSS-scores zijn toegekend, variërend van laag (3.1) tot hoger (7.8), afhankelijk van de specifieke kwetsbaarheid en exploitatiemogelijkheden.
Oplossingen: Oracle heeft updates uitgebracht om de kwetsbaarheden in Java SE (inclusief Oracle GraalVM en JavaFX componenten) te verhelpen. Zie bijgevoegde referenties voor meer informatie.
Kans: medium
Schade: high
CWE-190: Integer Overflow or Wraparound
CWE-265: Privilege Issues
CWE-295: Improper Certificate Validation
CWE-347: Improper Verification of Cryptographic Signature
CWE-400: Uncontrolled Resource Consumption
CWE-476: NULL Pointer Dereference
CWE-696: Incorrect Behavior Order
CWE-787: Out-of-bounds Write
CWE-1333: Inefficient Regular Expression Complexity
Little CMS versions up to 2.18 contain integer overflow vulnerabilities in the CubeSize and ParseCube functions, as well as improper handling of malformed ICC profiles, leading to potential information disclosure, denial of service, or arbitrary code execution.
7.5 (High)
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Oracle / GraalVM
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM Enterprise Edition
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM for JDK
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Java SE
|
vers:unknown/* |
A vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition allows unauthenticated network attackers via TLS to cause a partial denial of service through specific APIs without requiring untrusted Java Web Start applications or applets.
5.3 (Medium)
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Oracle / GraalVM
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM Enterprise Edition
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM for JDK
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Java SE
|
vers:unknown/* |
A vulnerability in Oracle Java SE's JSSE component allows unauthenticated attackers with network access via TLS to potentially modify critical data, affecting multiple versions with a CVSS score of 5.9.
5.9 (Medium)
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Oracle / GraalVM
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM Enterprise Edition
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM for JDK
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Java SE
|
vers:unknown/* |
A vulnerability in Oracle Java SE and Oracle GraalVM allows unauthenticated network attackers to potentially perform unauthorized data modifications via APIs, affecting multiple supported versions with a CVSS score of 3.7.
CWE-787 - Out-of-bounds WriteAffected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Oracle / GraalVM
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM Enterprise Edition
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM for JDK
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Java SE
|
vers:unknown/* |
A vulnerability in Oracle Java SE 8u491's JavaFX component allows unauthenticated network attackers to cause partial denial of service by exploiting APIs, mainly impacting sandboxed Java Web Start applications or applets with a CVSS 3.1 score of 5.3.
5.3 (Medium)
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Oracle / GraalVM
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM Enterprise Edition
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM for JDK
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Java SE
|
vers:unknown/* |
A vulnerability in Oracle Java SE and Oracle GraalVM 2D component APIs allows unauthenticated network attackers to cause a partial denial of service, with a CVSS score of 5.3.
5.3 (Medium)
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Oracle / GraalVM
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM Enterprise Edition
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM for JDK
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Java SE
|
vers:unknown/* |
A vulnerability in multiple supported versions of Oracle Java SE libraries allows unauthenticated network attackers to cause a partial denial of service via APIs, including those used in sandboxed Java Web Start applications or applets, with a CVSS score of 5.3.
5.3 (Medium)
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Oracle / GraalVM
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM Enterprise Edition
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM for JDK
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Java SE
|
vers:unknown/* |
A vulnerability in Oracle Java SE 8u491's JavaFX component allows an unauthenticated network attacker, requiring user interaction, to potentially modify accessible data in sandboxed Java applications, with a CVSS 3.1 base score of 3.1.
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Oracle / GraalVM
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM Enterprise Edition
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM for JDK
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Java SE
|
vers:unknown/* |
A vulnerability in Oracle Java SE 8u491's JavaFX component allows an unauthenticated network attacker, requiring user interaction, to potentially modify accessible data in sandboxed Java applications, with a CVSS 3.1 base score of 3.1.
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Oracle / GraalVM
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM Enterprise Edition
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM for JDK
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Java SE
|
vers:unknown/* |
A vulnerability in Oracle Java SE 8u491's JavaFX component allows an unauthenticated network attacker, requiring user interaction, to potentially modify accessible data in sandboxed Java applications, with a CVSS 3.1 base score of 3.1.
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Oracle / GraalVM
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM Enterprise Edition
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM for JDK
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Java SE
|
vers:unknown/* |
A vulnerability in Oracle Java SE scripting component versions 8u491, 8u491-perf, and 11.0.31 allows unauthenticated attackers to cause denial of service via network access without affecting confidentiality or integrity.
7.5 (High)
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Oracle / GraalVM
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM Enterprise Edition
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM for JDK
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Java SE
|
vers:unknown/* |
A vulnerability in Oracle Java SE Scripting component versions 8u491, 8u491-perf, and 11.0.31 allows unauthenticated network attackers to gain unauthorized access or modify critical data via APIs, with a CVSS 3.1 base score of 7.4.
7.4 (High)
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Oracle / GraalVM
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM Enterprise Edition
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM for JDK
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Java SE
|
vers:unknown/* |
A vulnerability in Oracle Java SE and Oracle GraalVM allows unauthenticated network attackers to cause a partial denial of service, mainly impacting sandboxed Java applications running untrusted code, with a CVSS score of 3.7.
CWE-476 - NULL Pointer DereferenceAffected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Oracle / GraalVM
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM Enterprise Edition
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM for JDK
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Java SE
|
vers:unknown/* |
A critical vulnerability in Oracle Java SE and Oracle GraalVM allows unauthenticated network attackers to modify or delete critical data via exploitable APIs, with a CVSS integrity impact score of 7.5.
7.5 (High)
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Oracle / GraalVM
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM Enterprise Edition
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM for JDK
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Java SE
|
vers:unknown/* |
A vulnerability in Oracle Java SE and Oracle GraalVM allows unauthenticated network attackers to gain unauthorized read and write access to certain data via exploitable APIs, affecting multiple supported versions with a CVSS score of 6.5.
6.5 (Medium)
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Oracle / GraalVM
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM Enterprise Edition
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM for JDK
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Java SE
|
vers:unknown/* |
A vulnerability in Oracle Java SE 8u491's JavaFX component allows an unauthenticated network attacker, requiring user interaction, to potentially gain unauthorized read access to data in sandboxed Java Web Start applications or applets, with a CVSS 3.1 score of 3.1.
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Oracle / GraalVM
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM Enterprise Edition
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM for JDK
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Java SE
|
vers:unknown/* |
A vulnerability in Oracle Java SE 8u491's JavaFX component allows an unauthenticated network attacker, requiring user interaction, to potentially gain unauthorized read access to data in sandboxed Java Web Start applications or applets, with a CVSS 3.1 score of 3.1.
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Oracle / GraalVM
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM Enterprise Edition
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM for JDK
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Java SE
|
vers:unknown/* |
A vulnerability in Oracle Java SE 8u491 and 8u491-perf allows a low-privileged attacker with infrastructure access and user interaction to compromise confidentiality, integrity, and availability, with a CVSS score of 6.7.
6.7 (Medium)
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Oracle / GraalVM
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM Enterprise Edition
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM for JDK
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Java SE
|
vers:unknown/* |
A high-severity vulnerability in multiple versions of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition allows low-privileged attackers with logon access to potentially compromise affected systems.
7.8 (High)
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Oracle / GraalVM
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM Enterprise Edition
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle GraalVM for JDK
|
vers:unknown/* | ||
|
vers:unknown/*
Oracle / Oracle Java SE
|
vers:unknown/* |
References
21 references
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Oracle heeft meerdere kwetsbaarheden verholpen in Java SE (inclusief Oracle GraalVM en JavaFX componenten).",
"title": "Feiten"
},
{
"category": "description",
"text": "Oracle Java SE en gerelateerde producten (Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition) bevatten diverse kwetsbaarheden die een niet-geauthenticeerde aanvaller met netwerktoegang via TLS of andere API\u0027s in staat stellen om gedeeltelijke denial of service te veroorzaken, kritieke data te wijzigen, of ongeautoriseerde lees- en schrijfacties uit te voeren. Deze kwetsbaarheden treffen meerdere ondersteunde versies en componenten, waaronder JSSE, JavaFX, 2D component APIs, scripting componenten en sandboxed Java Web Start applicaties of applets. Sommige kwetsbaarheden vereisen gebruikersinteractie en/of lage privileges, terwijl andere ook zonder aanwezigheid van onbetrouwbare Java Web Start applicaties kunnen worden misbruikt. De impact varieert van denial of service tot ongeautoriseerde datawijziging en systeemcompromittering. Verschillende CVSS-scores zijn toegekend, vari\u00ebrend van laag (3.1) tot hoger (7.8), afhankelijk van de specifieke kwetsbaarheid en exploitatiemogelijkheden.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Oracle heeft updates uitgebracht om de kwetsbaarheden in Java SE (inclusief Oracle GraalVM en JavaFX componenten) te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "general",
"text": "Privilege Issues",
"title": "CWE-265"
},
{
"category": "general",
"text": "Improper Certificate Validation",
"title": "CWE-295"
},
{
"category": "general",
"text": "Improper Verification of Cryptographic Signature",
"title": "CWE-347"
},
{
"category": "general",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "general",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "general",
"text": "Incorrect Behavior Order",
"title": "CWE-696"
},
{
"category": "general",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "general",
"text": "Inefficient Regular Expression Complexity",
"title": "CWE-1333"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference",
"url": "https://www.oracle.com/security-alerts/cpujul2026.html"
},
{
"category": "external",
"summary": "Reference",
"url": "https://www.oracle.com/security-alerts/cpujul2026verbose.html"
}
],
"title": "Kwetsbaarheden verholpen in Oracle Java SE",
"tracking": {
"current_release_date": "2026-07-22T15:24:20.106317Z",
"generator": {
"date": "2025-08-04T16:30:00Z",
"engine": {
"name": "V.A.",
"version": "1.3"
}
},
"id": "NCSC-2026-0261",
"initial_release_date": "2026-07-22T15:24:20.106317Z",
"revision_history": [
{
"date": "2026-07-22T15:24:20.106317Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-1"
}
}
],
"category": "product_name",
"name": "GraalVM"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-2"
}
}
],
"category": "product_name",
"name": "Oracle GraalVM Enterprise Edition"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-3"
}
}
],
"category": "product_name",
"name": "Oracle GraalVM for JDK"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-4"
}
}
],
"category": "product_name",
"name": "Oracle Java SE"
}
],
"category": "vendor",
"name": "Oracle"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-41254",
"cwe": {
"id": "CWE-696",
"name": "Incorrect Behavior Order"
},
"notes": [
{
"category": "other",
"text": "Incorrect Behavior Order",
"title": "CWE-696"
},
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "description",
"text": "Little CMS versions up to 2.18 contain integer overflow vulnerabilities in the CubeSize and ParseCube functions, as well as improper handling of malformed ICC profiles, leading to potential information disclosure, denial of service, or arbitrary code execution.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-41254 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-41254.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-41254"
},
{
"cve": "CVE-2026-46917",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition allows unauthenticated network attackers via TLS to cause a partial denial of service through specific APIs without requiring untrusted Java Web Start applications or applets.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-46917 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-46917.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-46917"
},
{
"cve": "CVE-2026-46968",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Certificate Validation",
"title": "CWE-295"
},
{
"category": "description",
"text": "A vulnerability in Oracle Java SE\u0027s JSSE component allows unauthenticated attackers with network access via TLS to potentially modify critical data, affecting multiple versions with a CVSS score of 5.9.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-46968 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-46968.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-46968"
},
{
"cve": "CVE-2026-47010",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "A vulnerability in Oracle Java SE and Oracle GraalVM allows unauthenticated network attackers to potentially perform unauthorized data modifications via APIs, affecting multiple supported versions with a CVSS score of 3.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-47010 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47010.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-47010"
},
{
"cve": "CVE-2026-47013",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle Java SE 8u491\u0027s JavaFX component allows unauthenticated network attackers to cause partial denial of service by exploiting APIs, mainly impacting sandboxed Java Web Start applications or applets with a CVSS 3.1 score of 5.3.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-47013 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47013.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-47013"
},
{
"cve": "CVE-2026-47021",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"notes": [
{
"category": "other",
"text": "Inefficient Regular Expression Complexity",
"title": "CWE-1333"
},
{
"category": "description",
"text": "A vulnerability in Oracle Java SE and Oracle GraalVM 2D component APIs allows unauthenticated network attackers to cause a partial denial of service, with a CVSS score of 5.3.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-47021 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47021.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-47021"
},
{
"cve": "CVE-2026-47027",
"notes": [
{
"category": "description",
"text": "A vulnerability in multiple supported versions of Oracle Java SE libraries allows unauthenticated network attackers to cause a partial denial of service via APIs, including those used in sandboxed Java Web Start applications or applets, with a CVSS score of 5.3.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-47027 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47027.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-47027"
},
{
"cve": "CVE-2026-47030",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle Java SE 8u491\u0027s JavaFX component allows an unauthenticated network attacker, requiring user interaction, to potentially modify accessible data in sandboxed Java applications, with a CVSS 3.1 base score of 3.1.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-47030 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47030.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-47030"
},
{
"cve": "CVE-2026-47034",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle Java SE 8u491\u0027s JavaFX component allows an unauthenticated network attacker, requiring user interaction, to potentially modify accessible data in sandboxed Java applications, with a CVSS 3.1 base score of 3.1.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-47034 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47034.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-47034"
},
{
"cve": "CVE-2026-47035",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle Java SE 8u491\u0027s JavaFX component allows an unauthenticated network attacker, requiring user interaction, to potentially modify accessible data in sandboxed Java applications, with a CVSS 3.1 base score of 3.1.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-47035 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47035.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-47035"
},
{
"cve": "CVE-2026-47057",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "description",
"text": "A vulnerability in Oracle Java SE scripting component versions 8u491, 8u491-perf, and 11.0.31 allows unauthenticated attackers to cause denial of service via network access without affecting confidentiality or integrity.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-47057 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47057.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-47057"
},
{
"cve": "CVE-2026-47058",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "A vulnerability in Oracle Java SE Scripting component versions 8u491, 8u491-perf, and 11.0.31 allows unauthenticated network attackers to gain unauthorized access or modify critical data via APIs, with a CVSS 3.1 base score of 7.4.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-47058 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47058.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-47058"
},
{
"cve": "CVE-2026-47059",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "description",
"text": "A vulnerability in Oracle Java SE and Oracle GraalVM allows unauthenticated network attackers to cause a partial denial of service, mainly impacting sandboxed Java applications running untrusted code, with a CVSS score of 3.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-47059 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47059.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-47059"
},
{
"cve": "CVE-2026-47063",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"notes": [
{
"category": "other",
"text": "Improper Verification of Cryptographic Signature",
"title": "CWE-347"
},
{
"category": "description",
"text": "A critical vulnerability in Oracle Java SE and Oracle GraalVM allows unauthenticated network attackers to modify or delete critical data via exploitable APIs, with a CVSS integrity impact score of 7.5.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-47063 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47063.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-47063"
},
{
"cve": "CVE-2026-60147",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Certificate Validation",
"title": "CWE-295"
},
{
"category": "description",
"text": "A vulnerability in Oracle Java SE and Oracle GraalVM allows unauthenticated network attackers to gain unauthorized read and write access to certain data via exploitable APIs, affecting multiple supported versions with a CVSS score of 6.5.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-60147 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60147.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-60147"
},
{
"cve": "CVE-2026-60164",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle Java SE 8u491\u0027s JavaFX component allows an unauthenticated network attacker, requiring user interaction, to potentially gain unauthorized read access to data in sandboxed Java Web Start applications or applets, with a CVSS 3.1 score of 3.1.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-60164 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60164.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-60164"
},
{
"cve": "CVE-2026-60166",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle Java SE 8u491\u0027s JavaFX component allows an unauthenticated network attacker, requiring user interaction, to potentially gain unauthorized read access to data in sandboxed Java Web Start applications or applets, with a CVSS 3.1 score of 3.1.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-60166 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60166.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-60166"
},
{
"cve": "CVE-2026-60526",
"notes": [
{
"category": "description",
"text": "A vulnerability in Oracle Java SE 8u491 and 8u491-perf allows a low-privileged attacker with infrastructure access and user interaction to compromise confidentiality, integrity, and availability, with a CVSS score of 6.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-60526 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60526.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-60526"
},
{
"cve": "CVE-2026-62574",
"notes": [
{
"category": "description",
"text": "A high-severity vulnerability in multiple versions of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition allows low-privileged attackers with logon access to potentially compromise affected systems.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-62574 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-62574.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-62574"
}
]
}
NCSC-2026-0321
Vulnerability from csaf_ncscnl - Published: 2026-08-21 08:13 - Updated: 2026-08-21 08:13Summary
Meerdere kwetsbaarheden verholpen in IBM AIX en IBM PowerVM VIOS
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten: IBM heeft kwetsbaarheden verholpen in AIX en PowerVM VIOS.
Ook heeft IBM eerdere kwetsbaarheden in, onder andere, DB2, WebSphere, Oracle producten als Java en GraalVM, PostgreSQL, OpenSSH en Perl verholpen voor de producten geproduceerd voor AIX.
Interpretaties: Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:
- Denial-of-Service
- Omzeilen van een beveiligingsmaatregel
- Uitvoer van willekeurige code (root/admin-rechten)
- Uitvoer van willekeurige code (gebruikersrechten)
- Toegang tot gevoelige gegevens
- Manipulatie van gegevens
- Verhogen van privileges
Oplossingen: De leveranciers hebben updates uitgebracht voor PostgreSQL, IBM AIX, IBM PowerVM VIOS, Perl modules, OpenSSH, Oracle Java SE, Oracle GraalVM, OpenJDK, IBM Db2 Client en Server, en Oracle Communications Cloud Native Core Certificate Management om de beschreven kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.
Kans: medium
Schade: high
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-23: Relative Path Traversal
CWE-59: Improper Link Resolution Before File Access ('Link Following')
CWE-61: UNIX Symbolic Link (Symlink) Following
CWE-73: External Control of File Name or Path
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-94: Improper Control of Generation of Code ('Code Injection')
CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CWE-121: Stack-based Buffer Overflow
CWE-122: Heap-based Buffer Overflow
CWE-124: Buffer Underwrite ('Buffer Underflow')
CWE-125: Out-of-bounds Read
CWE-128: Wrap-around Error
CWE-129: Improper Validation of Array Index
CWE-134: Use of Externally-Controlled Format String
CWE-190: Integer Overflow or Wraparound
CWE-191: Integer Underflow (Wrap or Wraparound)
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-242: Use of Inherently Dangerous Function
CWE-248: Uncaught Exception
CWE-269: Improper Privilege Management
CWE-284: Improper Access Control
CWE-285: Improper Authorization
CWE-287: Improper Authentication
CWE-295: Improper Certificate Validation
CWE-307: Improper Restriction of Excessive Authentication Attempts
CWE-312: Cleartext Storage of Sensitive Information
CWE-319: Cleartext Transmission of Sensitive Information
CWE-327: Use of a Broken or Risky Cryptographic Algorithm
CWE-347: Improper Verification of Cryptographic Signature
CWE-348: Use of Less Trusted Source
CWE-358: Improperly Implemented Security Check for Standard
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition
CWE-369: Divide By Zero
CWE-385: Covert Timing Channel
CWE-400: Uncontrolled Resource Consumption
CWE-404: Improper Resource Shutdown or Release
CWE-407: Inefficient Algorithmic Complexity
CWE-416: Use After Free
CWE-426: Untrusted Search Path
CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CWE-476: NULL Pointer Dereference
CWE-502: Deserialization of Untrusted Data
CWE-522: Insufficiently Protected Credentials
CWE-611: Improper Restriction of XML External Entity Reference
CWE-674: Uncontrolled Recursion
CWE-693: Protection Mechanism Failure
CWE-696: Incorrect Behavior Order
CWE-707: Improper Neutralization
CWE-758: Reliance on Undefined, Unspecified, or Implementation-Defined Behavior
CWE-770: Allocation of Resources Without Limits or Throttling
CWE-787: Out-of-bounds Write
CWE-805: Buffer Access with Incorrect Length Value
CWE-822: Untrusted Pointer Dereference
CWE-825: Expired Pointer Dereference
CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')
CWE-862: Missing Authorization
CWE-908: Use of Uninitialized Resource
CWE-1284: Improper Validation of Specified Quantity in Input
CWE-1285: Improper Validation of Specified Index, Position, or Offset in Input
CWE-1287: Improper Validation of Specified Type of Input
CWE-1333: Inefficient Regular Expression Complexity
PostgreSQL versions prior to 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 have a vulnerability in the CREATE STATISTICS command due to missing schema CREATE privilege checks, enabling denial of service and potential information disclosure.
4.3 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
PostgreSQL libpq client library versions prior to 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 contain integer wraparound and privilege check vulnerabilities (CVE-2025-12817, CVE-2025-12818) causing memory corruption and denial of service.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Multiple security issues in Perl's IO::Uncompress::Unzip before version 2.215 include uncaught exceptions from malformed DOS date fields, heap buffer overflow in regex compilation on 32-bit builds, memory copying flaws in Socket's pack_ip_mreq_source(), integer overflow in pack/unpack, and regex trie branch-count overflow causing incorrect pattern matching.
5.5 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Multiple PostgreSQL versions prior to 18.2, 17.8, 16.12, 15.17, and 14.22 contain security vulnerabilities including improper 'oidvector' type validation, intarray input flaws, pgcrypto buffer overruns, and multibyte character length validation errors.
4.3 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Multiple PostgreSQL versions prior to 18.2, 17.8, 16.12, 15.17, and 14.22 contain critical security vulnerabilities including arbitrary code execution via intarray and pgcrypto extensions, memory disclosure, and multibyte character validation flaws.
8.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Multiple heap buffer overflow and memory handling vulnerabilities in PostgreSQL's pgcrypto, intarray, and related components across versions prior to 14.21, 15.16, 16.12, 17.8, and 18.2 allow arbitrary code execution, memory disclosure, and data corruption.
8.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Multiple PostgreSQL versions prior to 14.21, 15.16, 16.12, 17.8, and 18.2 contain vulnerabilities including missing multibyte character length validation, memory disclosure, and arbitrary code execution in intarray and pgcrypto modules.
8.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Multiple security vulnerabilities in PostgreSQL versions prior to 18.4, 17.10, 16.14, 15.18, and 14.23 include missing authorization checks in CREATE TYPE for multirange types, SQL injection, denial of service, buffer overflows, and information leaks.
5.4 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Multiple PostgreSQL versions prior to 18.4, 17.10, 16.14, 15.18, and 14.23 contain integer overflow vulnerabilities and other security flaws that allow unprivileged users to cause memory corruption, privilege bypass, SQL injection, and other critical issues.
8.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Multiple PostgreSQL versions prior to 14.23, 15.18, 16.14, 17.10, and 18.4 contain critical vulnerabilities including a format string flaw in the timeofday() function that leaks server memory, along with privilege bypass, SQL injection, and denial of service issues.
4.3 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Multiple PostgreSQL versions prior to 18.4, 17.10, 16.14, 15.18, and 14.23 contain critical vulnerabilities including symlink following in pg_basebackup and pg_rewind allowing origin superusers to overwrite local files, along with privilege bypass, SQL injection, timing attacks, and buffer overflows.
8.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Multiple PostgreSQL versions prior to 18.4, 17.10, 16.14, 15.18, and 14.23 contain critical vulnerabilities including buffer overflows in libpq lo_* and PQfn functions, privilege enforcement flaws, SQL injection, and timing attacks.
8.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Multiple security vulnerabilities in PostgreSQL versions prior to 18.4, 17.10, 16.14, 15.18, and 14.23 include a covert timing channel in MD5 password comparison, privilege bypass, SQL injection, integer overflows, and denial of service.
8.2 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Multiple PostgreSQL versions prior to 18.4, 17.10, 16.14, 15.18, and 14.23 contain critical vulnerabilities including a stack buffer overflow and SQL injection in the 'refint' module, along with various privilege, overflow, path traversal, and timing attack issues.
8.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
LWP::UserAgent versions prior to 6.83 for Perl leak Authorization and Proxy-Authorization headers during cross-origin redirects, exposing sensitive credentials to attacker-controlled hosts, addressed by CVE-2026-8368.
6.5 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM WebSphere Application Server versions 8.5, 9.0, and Liberty Continuous Delivery contain a vulnerability in the ORB component of IBM SDK, Java Technology Edition, allowing a malicious IIOP server to load and instantiate arbitrary classes, potentially enabling unauthorized code execution.
8.1 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
HTML::Entities versions before 3.84 for Perl contain a use-after-free vulnerability in the _decode_entities function that can lead to reading freed heap memory and potential disclosure of adjacent heap contents.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Socket versions prior to 2.041 for Perl contain an out-of-bounds heap read vulnerability in the pack_ip_mreq_source() function, allowing potential exposure of adjacent heap memory and information disclosure.
9.1 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, suffer from NIM server process crashes during client registration due to a buffer overflow vulnerability.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability in the nimesis registration service that permits remote attackers to overwrite files via path traversal.
8.2 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 NIM contain a security vulnerability that exposes intermediate certificate authority private keys in a public update file, enabling remote attackers to bypass security restrictions.
9.1 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 NIM contain a vulnerability that permits remote authenticated attackers to execute arbitrary commands via improper handling of special elements in OS commands.
9.9 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 NIM contain a vulnerability in TLS certificate validation that may allow remote attackers unauthorized access to AIX systems.
8.1 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Eclipse OMR versions up to 0.11 contain a flaw in the arraycmp SIMD implementation for Z and P architectures that fails to validate zero-length byte comparisons, enabling a low-privilege remote attacker to cause denial of service.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Eclipse OpenJ9 versions up to 0.60 contain a vulnerability in the -Xtrace option that can cause a buffer underflow when tracing method arguments, potentially leading to memory corruption.
9.1 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Eclipse OpenJ9 versions up to 0.60 contain a flaw where the JVM incorrectly delegates calls from a recompiled abstract superclass method to an interface default method, causing potential unexpected behavior and data integrity issues.
9.6 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits remote attackers to gain root privileges due to improper authentication mechanisms.
9.8 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits remote attackers to access NFS-exported filesystems due to improper authentication mechanisms.
8.2 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that enables remote attackers to cause denial of service via uncontrolled resource consumption.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits local attackers to escalate privileges due to improper privilege management.
7.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that permits remote attackers to cause a denial of service via an out-of-bounds write.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a heap buffer overflow vulnerability that enables remote attackers to execute arbitrary code.
8.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits remote authenticated attackers to execute arbitrary commands via improper neutralization of special elements in OS commands.
9.9 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that allows remote attackers to cause a denial of service via a NULL pointer dereference.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that enables remote attackers to cause denial of service via uncontrolled resource consumption.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a time-of-check time-of-use race condition vulnerability that enables local attackers to cause denial of service and compromise data integrity.
7.7 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability due to improper certificate validation that enables remote attackers to impersonate the TNC policy server and alter network traffic.
9.3 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that enables remote attackers to trigger a denial of service via unbounded recursion.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability enabling remote authenticated attackers to cause denial of service and access sensitive data via an out-of-bounds write.
4.2 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability involving an uninitialized stack pointer that can be exploited remotely to cause a denial of service.
5.9 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that allows remote attackers to cause a denial of service via a NULL pointer dereference.
5.3 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that enables remote attackers to cause denial of service via uncontrolled resource consumption.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits remote attackers to perform out-of-bounds reads, potentially disclosing kernel memory.
5.3 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability involving an integer underflow that can be exploited remotely to cause a denial of service condition.
9.8 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that enables remote attackers to cause denial of service via uncontrolled resource consumption.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability due to improper handling of missing SSL client certificates, enabling remote attackers to cause denial of service conditions.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a TOCTOU race condition vulnerability enabling local attackers to overwrite critical files and access sensitive data.
7.0 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability due to an integer underflow in the IPv4 IP-options parser that allows remote attackers to access sensitive information.
9.4 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability enabling remote attackers to execute arbitrary code via an out-of-bounds write.
9.8 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a stack buffer overflow vulnerability that enables remote attackers to execute arbitrary code on affected systems.
8.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability allowing remote attackers to execute arbitrary commands due to improper neutralization of special elements in OS commands.
8.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability allowing remote attackers to execute arbitrary commands due to improper neutralization of special elements in OS commands.
8.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a heap buffer overflow vulnerability that enables remote attackers to execute arbitrary code.
9.8 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that allows remote attackers to cause a denial of service via a NULL pointer dereference.
6.5 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a heap buffer overflow vulnerability that enables remote attackers to execute arbitrary code.
8.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits remote attackers to execute arbitrary commands via improper neutralization of shell metacharacters in DHCP options.
8.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability due to improper array index boundary checking that allows a remote attacker to cause a denial of service.
4.3 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 are susceptible to remote code execution via command injection triggered by specially crafted Router Advertisements.
8.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a use-after-free vulnerability that can be exploited remotely to cause a denial of service condition.
7.4 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that enables remote attackers to trigger a denial of service via an integer overflow.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that permits a local attacker to trigger a denial of service via a heap buffer overflow.
5.5 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability allowing remote attackers to manipulate network traffic and DNS settings due to improper authentication.
8.2 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a stack buffer overflow vulnerability that enables remote attackers to execute arbitrary code on affected systems.
9.8 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a stack buffer overflow vulnerability that enables remote attackers to execute arbitrary code on affected systems.
9.8 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a command injection vulnerability that enables remote attackers to execute arbitrary code on affected systems.
8.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that permits remote attackers to trigger a denial of service via an out-of-bounds read.
4.8 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits local attackers to execute arbitrary code by exploiting improperly sanitized environment variables.
7.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 have a stack-based buffer overflow vulnerability enabling remote attackers to execute arbitrary code.
9.8 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a local privilege escalation vulnerability due to an out-of-bounds write condition exploitable by an attacker.
7.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability allowing local attackers to escalate privileges to root by exploiting improper enforcement of RBAC authentication roles.
7.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability enabling local attackers to execute arbitrary commands via shell metacharacter injection.
7.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a stack-based buffer overflow vulnerability enabling remote authenticated attackers to execute arbitrary code.
8.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability allowing remote attackers to execute arbitrary commands due to improper neutralization of special elements in OS commands.
9.8 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that permits a local attacker to perform an out-of-bounds read, potentially exposing sensitive information.
5.5 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a stack buffer overflow vulnerability that enables remote attackers to execute arbitrary code on affected systems.
9.8 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that permits remote attackers to cause a denial of service via an out-of-bounds write.
4.3 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a path traversal vulnerability that enables remote attackers to access sensitive information.
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain an integer overflow vulnerability that may enable local attackers to access sensitive data or trigger denial of service conditions.
CWE-190 - Integer Overflow or WraparoundAffected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that permits a local attacker to perform an out-of-bounds read, potentially exposing sensitive information.
CWE-125 - Out-of-bounds ReadAffected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a stack buffer overflow vulnerability that enables remote attackers to execute arbitrary code on affected systems.
9.8 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that permits a local attacker to trigger a denial of service via an out-of-bounds write.
4.4 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability enabling remote attackers to execute arbitrary code via an out-of-bounds write.
8.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 have a vulnerability involving an out-of-bounds write that could enable remote code execution or denial of service.
9.6 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain an off-by-one bounds checking error that enables remote attackers to execute arbitrary code.
8.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a stack buffer overflow vulnerability that enables remote authenticated attackers to execute arbitrary code.
8.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a stack buffer overflow vulnerability that enables remote attackers to execute arbitrary code on affected systems.
9.8 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability enabling local attackers to execute arbitrary code via an out-of-bounds write.
6.7 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain an integer overflow vulnerability that enables remote attackers to execute arbitrary code on affected systems.
9.8 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability due to improper validation of network-supplied pointers, enabling remote attackers to execute arbitrary code.
9.8 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a TOCTOU race condition vulnerability that enables local attackers to execute arbitrary code.
7.0 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits local attackers to escalate privileges due to improper privilege management.
7.0 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability where improper memory offset calculation during IPsec decapsulation allows a remote attacker to cause a denial of service.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a local privilege escalation vulnerability caused by improper authorization controls.
7.1 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits remote attackers to overwrite arbitrary files by exploiting improper neutralization of special elements in input.
9.1 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a TOCTOU race condition vulnerability that allows local attackers to escalate privileges to root.
7.3 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a heap-based buffer overflow vulnerability that can be exploited remotely to cause a denial of service condition.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits local attackers to execute arbitrary commands by exploiting improper validation of the ODMDIR environment variable.
8.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 have a heap-based buffer overflow vulnerability that enables local attackers to escalate privileges.
8.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a TOCTOU race condition vulnerability that enables local attackers to escalate privileges.
7.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a buffer overflow vulnerability that permits local attackers to execute arbitrary code on affected systems.
8.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits local attackers to escalate privileges due to improper privilege management.
7.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 have a heap-based buffer overflow vulnerability that enables local attackers to execute arbitrary code.
8.2 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a stack-based buffer overflow vulnerability that enables local attackers to execute arbitrary code.
6.7 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a stack-based buffer overflow vulnerability that enables local attackers to execute arbitrary code.
7.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a heap buffer overflow vulnerability that enables local attackers to escalate privileges.
7.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a heap-based buffer overflow vulnerability that enables local authenticated attackers to execute arbitrary code.
6.7 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits a local attacker to cause denial of service by exhausting system resources.
5.5 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that permits remote attackers to cause a denial of service via an out-of-bounds write.
6.5 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that enables remote attackers to intercept messages and forge replies by exposing sensitive information.
6.5 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability due to improper authentication that could allow remote attackers to access sensitive information.
6.5 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits a local attacker to perform an out-of-bounds read, potentially disclosing sensitive kernel memory.
5.5 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability due to improper symbolic link validation that allows a local attacker to cause a denial of service condition.
6.3 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability involving improper symbolic link resolution that permits local attackers to escalate privileges.
7.1 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability involving improper symbolic link handling that may allow local attackers to escalate privileges.
7.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain an integer underflow vulnerability that enables local attackers to execute arbitrary code on affected systems.
8.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability due to improper privilege management that allows local attackers to execute arbitrary commands.
7.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits remote attackers to execute arbitrary code due to improper authentication mechanisms.
8.1 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain an out-of-bounds write vulnerability that could enable remote attackers to compromise system confidentiality and integrity.
7.7 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a heap buffer overflow vulnerability that enables remote attackers to execute arbitrary code.
8.3 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability enabling local attackers to perform out-of-bounds reads, potentially exposing sensitive information or causing denial of service.
6.7 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability allowing local attackers to cause denial of service via NULL pointer dereference.
4.7 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability due to improper certificate validation that enables remote attackers to execute arbitrary code.
7.7 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a buffer overflow vulnerability that enables remote attackers to execute arbitrary code.
9.8 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a kernel heap over-read vulnerability that enables remote attackers to access sensitive data and cause denial of service conditions.
8.1 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a use-after-free vulnerability that enables remote attackers to execute arbitrary code on affected systems.
9.8 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a buffer overflow vulnerability that may enable remote attackers to cause denial of service conditions.
5.3 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that enables remote attackers to cause a denial of service via uncontrolled recursion.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 have a stack-based buffer overflow vulnerability enabling remote attackers to execute arbitrary code.
9.8 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability due to an out-of-bounds read that allows local attackers to execute arbitrary code.
7.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a format string vulnerability that enables remote attackers to execute arbitrary code on affected systems.
9.8 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 have a stack-based buffer overflow vulnerability enabling remote attackers to execute arbitrary code.
8.1 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a buffer overflow vulnerability that enables remote attackers to execute arbitrary code.
9.8 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits remote attackers to execute arbitrary commands due to improper authentication mechanisms.
9.8 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability due to improper privilege management that allows remote attackers to execute arbitrary code.
9.8 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a buffer overflow vulnerability that enables remote attackers to execute arbitrary code.
9.8 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a stack buffer overflow vulnerability that enables remote attackers to execute arbitrary code on affected systems.
9.8 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that enables remote attackers to trigger a denial of service via an integer overflow.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain an integer overflow vulnerability during size computation that could enable remote attackers to execute arbitrary code.
9.8 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability due to improper validation of an array size field, enabling remote attackers to cause a denial of service condition.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that allows remote attackers to cause a denial of service via a NULL pointer dereference.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a stack-based buffer overflow vulnerability enabling remote authenticated attackers to execute arbitrary code.
8.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability due to improper allocation size validation that could enable a remote attacker to cause a denial of service.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits local attackers to overwrite arbitrary files by exploiting improper symbolic link handling.
7.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that permits a local attacker to trigger a denial of service via an out-of-bounds write.
6.5 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a buffer overflow vulnerability that permits local attackers to execute arbitrary code on affected systems.
9.3 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability involving an out-of-bounds read that may enable remote attackers to access sensitive data and cause denial of service.
7.7 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits remote attackers to bypass security restrictions by improperly limiting pathname access to restricted directories.
4.8 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a stack buffer overflow vulnerability that can be exploited remotely to cause a denial of service condition.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a heap-based buffer overflow vulnerability that enables remote attackers to execute arbitrary code.
8.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain an integer underflow vulnerability that may enable remote attackers to cause denial of service and potentially access sensitive information.
8.2 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability enabling remote authenticated attackers to perform out-of-bounds reads, potentially exposing sensitive information or causing denial of service.
7.9 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that enables local attackers to cause denial of service by exhausting resources during directory record parsing.
4.4 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits remote authenticated attackers to execute arbitrary commands via improper neutralization of special elements in OS commands.
8.4 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a stack-based buffer overflow vulnerability that can be exploited remotely to cause a denial of service condition.
5.4 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a heap-based buffer overflow vulnerability that enables remote attackers to execute arbitrary code.
8.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits remote authenticated attackers to execute arbitrary commands via improper neutralization of special elements in OS commands.
9.9 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits local attackers to execute arbitrary code by exploiting improper validation of an attacker-controlled pointer.
8.2 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain an out-of-bounds write vulnerability that allows local attackers to escalate privileges.
8.4 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a buffer overflow vulnerability that enables remote attackers to execute arbitrary code.
8.1 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 have a pointer validation flaw in the AIX Virtual SCSI initiator driver that can lead to denial of service, privilege escalation, or full kernel compromise of the client LPAR.
8.2 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 are susceptible to a remote unauthenticated denial-of-service attack via crafted UDP packets targeting an RPC service, resulting in complete system unavailability and necessitating an LPAR restart.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
A stack memory corruption vulnerability in the AIX IPsec ESP decapsulation handler affects IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1, potentially causing kernel stack corruption, system crashes, and denial of service.
6.5 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a local privilege escalation vulnerability in cmdnim that allows unprivileged users to execute code with root privileges.
8.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that allows a local attacker to cause denial of service by improperly handling memory page table configurations.
6.5 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability where a crafted filesystem image triggers kernel memory corruption via an out-of-bounds kernel-stack write, risking system crashes or privilege escalation.
6.7 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Multiple vulnerabilities affecting Oracle Java SE, Oracle GraalVM, OpenJDK versions 8, 11, 17, 21, 25, CRaC JDK variants, IBM Db2, and Oracle Communications Cloud Native Core Certificate Management allow unauthorized data access, denial of service, and data modification via various attack vectors.
CWE-327 - Use of a Broken or Risky Cryptographic AlgorithmAffected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Multiple vulnerabilities across Oracle Java SE, Oracle GraalVM, OpenJDK versions 8, 11, 17, 21, 25, CRaC JDK 17, 21, 25, IBM Java distributions, and Oracle Communications Cloud Native Core allow remote unauthenticated attackers to access sensitive data, cause denial of service, or modify data, with some requiring human interaction.
5.3 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Multiple critical vulnerabilities affect Oracle Java SE, Oracle GraalVM, OpenJDK (versions 8, 11, 17, 21, 25, 26), CRaC JDK (17, 21, 25), and Oracle Communications Cloud Native Core, enabling unauthorized data access, denial of service, and data modification with CVSS scores up to 7.5.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Multiple authentication, integer handling, and access control vulnerabilities in various OpenJDK, CRaC JDK, Oracle Java SE, Oracle GraalVM, and Oracle Communications products allow unauthenticated remote attackers to cause denial of service, unauthorized access, data modification, or data leakage.
CWE-125 - Out-of-bounds ReadAffected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Multiple authentication, integer handling, and denial of service vulnerabilities affect various versions of Oracle Java SE, Oracle GraalVM, OpenJDK, CRaC JDK, IBM Java distributions, IBM Db2, and Oracle Communications Cloud Native Core Certificate Management, allowing unauthenticated attackers network access to cause partial denial of service, unauthorized data access, or data modification.
5.3 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Multiple authentication, integer handling, and access control vulnerabilities affect various Oracle Java SE, OpenJDK, CRaC JDK, and Oracle Communications products, enabling unauthenticated attackers to gain unauthorized data access, cause denial of service, or modify data.
CWE-327 - Use of a Broken or Risky Cryptographic AlgorithmAffected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Multiple vulnerabilities in Little CMS, including integer overflows in the CubeSize function, affect various versions of Little CMS and Oracle Java SE products, enabling denial of service, information disclosure, and potential code execution.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Multiple vulnerabilities in Oracle Java SE and OpenJDK versions, including JSSE component flaws and client certificate verification issues, allow unauthenticated attackers network access via TLS to cause information disclosure, denial of service, and unauthorized data modification.
5.9 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Multiple security vulnerabilities affecting Oracle Java SE, Oracle GraalVM, and various OpenJDK versions allow unauthenticated network attackers to cause information disclosure, denial of service, and unauthorized data modification with CVSS scores around 3.7.
CWE-787 - Out-of-bounds WriteAffected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Multiple security vulnerabilities affecting Oracle Java SE, Oracle GraalVM, and OpenJDK versions include denial of service, information disclosure, and unauthorized data access via various components and protocols.
5.3 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Multiple vulnerabilities in Oracle Java SE and OpenJDK, including denial of service, information disclosure, and unauthorized data access, affect various versions and components such as SignatureFileVerifier and TLS protocols.
5.3 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Multiple vulnerabilities in Oracle Java SE versions 8u491, 8u491-perf, and 11.0.31, including an integer overflow in OpenJDK's TypedArray.prototype.set(), allow unauthenticated network attackers to cause denial of service and unauthorized data access.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Multiple vulnerabilities in Oracle Java SE versions 8u491, 8u491-perf, and 11.0.31, as well as OpenJDK 11.0.32, allow unauthenticated network attackers to compromise data confidentiality, integrity, and cause out-of-bounds memory access with a CVSS score up to 7.4.
7.4 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Multiple security vulnerabilities in Oracle Java SE, Oracle GraalVM, and OpenJDK versions allow unauthenticated attackers to cause partial denial of service and unauthorized data access, primarily affecting sandboxed Java client deployments.
CWE-476 - NULL Pointer DereferenceAffected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Multiple critical vulnerabilities in Oracle Java SE, GraalVM, and OpenJDK versions allow unauthenticated network attackers to modify or delete data, cause denial of service, and exploit flaws in APIs and JAR file signing.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IO::Uncompress::Unzip versions prior to 2.220 for Perl contain a vulnerability in the fastForward() function that causes a per-byte read loop, leading to CPU exhaustion when processing malicious zip files.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
IO::Compress versions before 2.220 for Perl contain a critical vulnerability in File::GlobMapper that allows arbitrary code execution via a maliciously crafted output glob.
7.8 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
OpenSSH versions prior to 10.4 contain multiple vulnerabilities including improper file placement by sftp and scp clients, argument handling flaws, authentication bypasses, and a use-after-free bug, potentially leading to data disclosure, modification, or denial of service.
5.4 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
OpenSSH versions prior to 10.4 contain multiple vulnerabilities including an scp flaw that places files in unintended parent directories during remote-to-remote copies, along with other issues affecting sftp, internal-sftp, GSSAPI options, forwarding, authentication, and client memory management.
5.4 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
OpenSSH versions prior to 10.4 contain multiple vulnerabilities including internal-sftp's limitation to nine command-line arguments, improper file location constraints, undocumented GSSAPI behavior, and authentication bypasses, potentially leading to data disclosure, modification, or DoS.
5.4 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
OpenSSH versions prior to 10.4 contain multiple vulnerabilities including a failure of DisableForwarding=yes to override PermitTunnel=yes, leading to unauthorized network tunneling and other security issues such as improper file constraints, argument handling flaws, and client use-after-free bugs.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
OpenSSH versions prior to 10.4 contain multiple vulnerabilities including improper MaxAuthTries handling during GSSAPIAuthentication, argument and file location issues in sftp/scp, and a client use-after-free flaw, leading to denial of service, data modification, or information disclosure.
7.5 (High)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
OpenSSH versions prior to 10.4 contain multiple vulnerabilities including inconsistent enforcement of minimum authentication delay, improper file location constraints, argument handling flaws, and a use-after-free during host key re-exchange, enabling unauthorized access, brute-force attacks, and potential code execution.
6.5 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
OpenSSH versions prior to 10.4 contain multiple vulnerabilities including a critical client-side use-after-free flaw during host key re-exchange, along with issues in sftp, scp, argument handling, configuration enforcement, and authentication bypasses.
9.4 (Critical)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
Multiple vulnerabilities in Oracle Java SE, Oracle GraalVM, and OpenJDK affect various versions, allowing unauthenticated network attackers to gain unauthorized data access, cause denial of service, and exploit certificate validation flaws.
6.5 (Medium)
Affected products
Known affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
IBM / AIX
|
vers:unknown/* | ||
|
vers:unknown/*
IBM / AIX, PowerVM VIOS
|
vers:unknown/* |
References
191 references
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "IBM heeft kwetsbaarheden verholpen in AIX en PowerVM VIOS.\nOok heeft IBM eerdere kwetsbaarheden in, onder andere, DB2, WebSphere, Oracle producten als Java en GraalVM, PostgreSQL, OpenSSH en Perl verholpen voor de producten geproduceerd voor AIX.",
"title": "Feiten"
},
{
"category": "description",
"text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorie\u00ebn schade:\n\n- Denial-of-Service\n- Omzeilen van een beveiligingsmaatregel\n- Uitvoer van willekeurige code (root/admin-rechten)\n- Uitvoer van willekeurige code (gebruikersrechten)\n- Toegang tot gevoelige gegevens\n- Manipulatie van gegevens\n- Verhogen van privileges",
"title": "Interpretaties"
},
{
"category": "description",
"text": "De leveranciers hebben updates uitgebracht voor PostgreSQL, IBM AIX, IBM PowerVM VIOS, Perl modules, OpenSSH, Oracle Java SE, Oracle GraalVM, OpenJDK, IBM Db2 Client en Server, en Oracle Communications Cloud Native Core Certificate Management om de beschreven kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"title": "CWE-22"
},
{
"category": "general",
"text": "Relative Path Traversal",
"title": "CWE-23"
},
{
"category": "general",
"text": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
"title": "CWE-59"
},
{
"category": "general",
"text": "UNIX Symbolic Link (Symlink) Following",
"title": "CWE-61"
},
{
"category": "general",
"text": "External Control of File Name or Path",
"title": "CWE-73"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "general",
"text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
"title": "CWE-88"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"title": "CWE-89"
},
{
"category": "general",
"text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"title": "CWE-94"
},
{
"category": "general",
"text": "Improper Neutralization of Directives in Dynamically Evaluated Code (\u0027Eval Injection\u0027)",
"title": "CWE-95"
},
{
"category": "general",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "general",
"text": "Stack-based Buffer Overflow",
"title": "CWE-121"
},
{
"category": "general",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
},
{
"category": "general",
"text": "Buffer Underwrite (\u0027Buffer Underflow\u0027)",
"title": "CWE-124"
},
{
"category": "general",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "general",
"text": "Wrap-around Error",
"title": "CWE-128"
},
{
"category": "general",
"text": "Improper Validation of Array Index",
"title": "CWE-129"
},
{
"category": "general",
"text": "Use of Externally-Controlled Format String",
"title": "CWE-134"
},
{
"category": "general",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "general",
"text": "Integer Underflow (Wrap or Wraparound)",
"title": "CWE-191"
},
{
"category": "general",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
},
{
"category": "general",
"text": "Use of Inherently Dangerous Function",
"title": "CWE-242"
},
{
"category": "general",
"text": "Uncaught Exception",
"title": "CWE-248"
},
{
"category": "general",
"text": "Improper Privilege Management",
"title": "CWE-269"
},
{
"category": "general",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "general",
"text": "Improper Authorization",
"title": "CWE-285"
},
{
"category": "general",
"text": "Improper Authentication",
"title": "CWE-287"
},
{
"category": "general",
"text": "Improper Certificate Validation",
"title": "CWE-295"
},
{
"category": "general",
"text": "Improper Restriction of Excessive Authentication Attempts",
"title": "CWE-307"
},
{
"category": "general",
"text": "Cleartext Storage of Sensitive Information",
"title": "CWE-312"
},
{
"category": "general",
"text": "Cleartext Transmission of Sensitive Information",
"title": "CWE-319"
},
{
"category": "general",
"text": "Use of a Broken or Risky Cryptographic Algorithm",
"title": "CWE-327"
},
{
"category": "general",
"text": "Improper Verification of Cryptographic Signature",
"title": "CWE-347"
},
{
"category": "general",
"text": "Use of Less Trusted Source",
"title": "CWE-348"
},
{
"category": "general",
"text": "Improperly Implemented Security Check for Standard",
"title": "CWE-358"
},
{
"category": "general",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "general",
"text": "Time-of-check Time-of-use (TOCTOU) Race Condition",
"title": "CWE-367"
},
{
"category": "general",
"text": "Divide By Zero",
"title": "CWE-369"
},
{
"category": "general",
"text": "Covert Timing Channel",
"title": "CWE-385"
},
{
"category": "general",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "general",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
},
{
"category": "general",
"text": "Inefficient Algorithmic Complexity",
"title": "CWE-407"
},
{
"category": "general",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "general",
"text": "Untrusted Search Path",
"title": "CWE-426"
},
{
"category": "general",
"text": "Use of Externally-Controlled Input to Select Classes or Code (\u0027Unsafe Reflection\u0027)",
"title": "CWE-470"
},
{
"category": "general",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "general",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
},
{
"category": "general",
"text": "Insufficiently Protected Credentials",
"title": "CWE-522"
},
{
"category": "general",
"text": "Improper Restriction of XML External Entity Reference",
"title": "CWE-611"
},
{
"category": "general",
"text": "Uncontrolled Recursion",
"title": "CWE-674"
},
{
"category": "general",
"text": "Protection Mechanism Failure",
"title": "CWE-693"
},
{
"category": "general",
"text": "Incorrect Behavior Order",
"title": "CWE-696"
},
{
"category": "general",
"text": "Improper Neutralization",
"title": "CWE-707"
},
{
"category": "general",
"text": "Reliance on Undefined, Unspecified, or Implementation-Defined Behavior",
"title": "CWE-758"
},
{
"category": "general",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "general",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "general",
"text": "Buffer Access with Incorrect Length Value",
"title": "CWE-805"
},
{
"category": "general",
"text": "Untrusted Pointer Dereference",
"title": "CWE-822"
},
{
"category": "general",
"text": "Expired Pointer Dereference",
"title": "CWE-825"
},
{
"category": "general",
"text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"title": "CWE-843"
},
{
"category": "general",
"text": "Missing Authorization",
"title": "CWE-862"
},
{
"category": "general",
"text": "Use of Uninitialized Resource",
"title": "CWE-908"
},
{
"category": "general",
"text": "Improper Validation of Specified Quantity in Input",
"title": "CWE-1284"
},
{
"category": "general",
"text": "Improper Validation of Specified Index, Position, or Offset in Input",
"title": "CWE-1285"
},
{
"category": "general",
"text": "Improper Validation of Specified Type of Input",
"title": "CWE-1287"
},
{
"category": "general",
"text": "Inefficient Regular Expression Complexity",
"title": "CWE-1333"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference",
"url": "https://www.ibm.com/support/pages/node/7283858"
}
],
"title": "Meerdere kwetsbaarheden verholpen in IBM AIX en IBM PowerVM VIOS",
"tracking": {
"current_release_date": "2026-08-21T08:13:11.874384Z",
"generator": {
"date": "2025-08-04T16:30:00Z",
"engine": {
"name": "V.A.",
"version": "1.3"
}
},
"id": "NCSC-2026-0321",
"initial_release_date": "2026-08-21T08:13:11.874384Z",
"revision_history": [
{
"date": "2026-08-21T08:13:11.874384Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-1"
}
}
],
"category": "product_name",
"name": "AIX"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-2"
}
}
],
"category": "product_name",
"name": "AIX, PowerVM VIOS"
}
],
"category": "vendor",
"name": "IBM"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-12817",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"notes": [
{
"category": "other",
"text": "Missing Authorization",
"title": "CWE-862"
},
{
"category": "description",
"text": "PostgreSQL versions prior to 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 have a vulnerability in the CREATE STATISTICS command due to missing schema CREATE privilege checks, enabling denial of service and potential information disclosure.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-12817 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-12817.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2025-12817"
},
{
"cve": "CVE-2025-12818",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "description",
"text": "PostgreSQL libpq client library versions prior to 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 contain integer wraparound and privilege check vulnerabilities (CVE-2025-12817, CVE-2025-12818) causing memory corruption and denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-12818 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-12818.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2025-12818"
},
{
"cve": "CVE-2025-15649",
"cwe": {
"id": "CWE-248",
"name": "Uncaught Exception"
},
"notes": [
{
"category": "other",
"text": "Uncaught Exception",
"title": "CWE-248"
},
{
"category": "description",
"text": "Multiple security issues in Perl\u0027s IO::Uncompress::Unzip before version 2.215 include uncaught exceptions from malformed DOS date fields, heap buffer overflow in regex compilation on 32-bit builds, memory copying flaws in Socket\u0027s pack_ip_mreq_source(), integer overflow in pack/unpack, and regex trie branch-count overflow causing incorrect pattern matching.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-15649 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-15649.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2025-15649"
},
{
"cve": "CVE-2026-2003",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"notes": [
{
"category": "other",
"text": "Improper Validation of Specified Type of Input",
"title": "CWE-1287"
},
{
"category": "description",
"text": "Multiple PostgreSQL versions prior to 18.2, 17.8, 16.12, 15.17, and 14.22 contain security vulnerabilities including improper \u0027oidvector\u0027 type validation, intarray input flaws, pgcrypto buffer overruns, and multibyte character length validation errors.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-2003 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-2003.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-2003"
},
{
"cve": "CVE-2026-2004",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"notes": [
{
"category": "other",
"text": "Improper Validation of Specified Type of Input",
"title": "CWE-1287"
},
{
"category": "description",
"text": "Multiple PostgreSQL versions prior to 18.2, 17.8, 16.12, 15.17, and 14.22 contain critical security vulnerabilities including arbitrary code execution via intarray and pgcrypto extensions, memory disclosure, and multibyte character validation flaws.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-2004 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-2004.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-2004"
},
{
"cve": "CVE-2026-2005",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
},
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "description",
"text": "Multiple heap buffer overflow and memory handling vulnerabilities in PostgreSQL\u0027s pgcrypto, intarray, and related components across versions prior to 14.21, 15.16, 16.12, 17.8, and 18.2 allow arbitrary code execution, memory disclosure, and data corruption.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-2005 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-2005.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-2005"
},
{
"cve": "CVE-2026-2006",
"cwe": {
"id": "CWE-129",
"name": "Improper Validation of Array Index"
},
"notes": [
{
"category": "other",
"text": "Improper Validation of Array Index",
"title": "CWE-129"
},
{
"category": "other",
"text": "Improper Validation of Specified Index, Position, or Offset in Input",
"title": "CWE-1285"
},
{
"category": "description",
"text": "Multiple PostgreSQL versions prior to 14.21, 15.16, 16.12, 17.8, and 18.2 contain vulnerabilities including missing multibyte character length validation, memory disclosure, and arbitrary code execution in intarray and pgcrypto modules.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-2006 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-2006.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-2006"
},
{
"cve": "CVE-2026-6472",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"notes": [
{
"category": "other",
"text": "Missing Authorization",
"title": "CWE-862"
},
{
"category": "description",
"text": "Multiple security vulnerabilities in PostgreSQL versions prior to 18.4, 17.10, 16.14, 15.18, and 14.23 include missing authorization checks in CREATE TYPE for multirange types, SQL injection, denial of service, buffer overflows, and information leaks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-6472 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-6472.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-6472"
},
{
"cve": "CVE-2026-6473",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "description",
"text": "Multiple PostgreSQL versions prior to 18.4, 17.10, 16.14, 15.18, and 14.23 contain integer overflow vulnerabilities and other security flaws that allow unprivileged users to cause memory corruption, privilege bypass, SQL injection, and other critical issues.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-6473 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-6473.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-6473"
},
{
"cve": "CVE-2026-6474",
"cwe": {
"id": "CWE-134",
"name": "Use of Externally-Controlled Format String"
},
"notes": [
{
"category": "other",
"text": "Use of Externally-Controlled Format String",
"title": "CWE-134"
},
{
"category": "description",
"text": "Multiple PostgreSQL versions prior to 14.23, 15.18, 16.14, 17.10, and 18.4 contain critical vulnerabilities including a format string flaw in the timeofday() function that leaks server memory, along with privilege bypass, SQL injection, and denial of service issues.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-6474 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-6474.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-6474"
},
{
"cve": "CVE-2026-6475",
"cwe": {
"id": "CWE-61",
"name": "UNIX Symbolic Link (Symlink) Following"
},
"notes": [
{
"category": "other",
"text": "UNIX Symbolic Link (Symlink) Following",
"title": "CWE-61"
},
{
"category": "other",
"text": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
"title": "CWE-59"
},
{
"category": "description",
"text": "Multiple PostgreSQL versions prior to 18.4, 17.10, 16.14, 15.18, and 14.23 contain critical vulnerabilities including symlink following in pg_basebackup and pg_rewind allowing origin superusers to overwrite local files, along with privilege bypass, SQL injection, timing attacks, and buffer overflows.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-6475 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-6475.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-6475"
},
{
"cve": "CVE-2026-6477",
"cwe": {
"id": "CWE-242",
"name": "Use of Inherently Dangerous Function"
},
"notes": [
{
"category": "other",
"text": "Use of Inherently Dangerous Function",
"title": "CWE-242"
},
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "description",
"text": "Multiple PostgreSQL versions prior to 18.4, 17.10, 16.14, 15.18, and 14.23 contain critical vulnerabilities including buffer overflows in libpq lo_* and PQfn functions, privilege enforcement flaws, SQL injection, and timing attacks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-6477 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-6477.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-6477"
},
{
"cve": "CVE-2026-6478",
"cwe": {
"id": "CWE-385",
"name": "Covert Timing Channel"
},
"notes": [
{
"category": "other",
"text": "Covert Timing Channel",
"title": "CWE-385"
},
{
"category": "description",
"text": "Multiple security vulnerabilities in PostgreSQL versions prior to 18.4, 17.10, 16.14, 15.18, and 14.23 include a covert timing channel in MD5 password comparison, privilege bypass, SQL injection, integer overflows, and denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-6478 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-6478.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-6478"
},
{
"cve": "CVE-2026-6637",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Stack-based Buffer Overflow",
"title": "CWE-121"
},
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"title": "CWE-89"
},
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "description",
"text": "Multiple PostgreSQL versions prior to 18.4, 17.10, 16.14, 15.18, and 14.23 contain critical vulnerabilities including a stack buffer overflow and SQL injection in the \u0027refint\u0027 module, along with various privilege, overflow, path traversal, and timing attack issues.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-6637 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-6637.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-6637"
},
{
"cve": "CVE-2026-8368",
"cwe": {
"id": "CWE-522",
"name": "Insufficiently Protected Credentials"
},
"notes": [
{
"category": "other",
"text": "Insufficiently Protected Credentials",
"title": "CWE-522"
},
{
"category": "description",
"text": "LWP::UserAgent versions prior to 6.83 for Perl leak Authorization and Proxy-Authorization headers during cross-origin redirects, exposing sensitive credentials to attacker-controlled hosts, addressed by CVE-2026-8368.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-8368 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-8368.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-8368"
},
{
"cve": "CVE-2026-8400",
"cwe": {
"id": "CWE-470",
"name": "Use of Externally-Controlled Input to Select Classes or Code (\u0027Unsafe Reflection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Use of Externally-Controlled Input to Select Classes or Code (\u0027Unsafe Reflection\u0027)",
"title": "CWE-470"
},
{
"category": "description",
"text": "IBM WebSphere Application Server versions 8.5, 9.0, and Liberty Continuous Delivery contain a vulnerability in the ORB component of IBM SDK, Java Technology Edition, allowing a malicious IIOP server to load and instantiate arbitrary classes, potentially enabling unauthorized code execution.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-8400 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-8400.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-8400"
},
{
"cve": "CVE-2026-8829",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "HTML::Entities versions before 3.84 for Perl contain a use-after-free vulnerability in the _decode_entities function that can lead to reading freed heap memory and potential disclosure of adjacent heap contents.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-8829 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-8829.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-8829"
},
{
"cve": "CVE-2026-12087",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "other",
"text": "Buffer Access with Incorrect Length Value",
"title": "CWE-805"
},
{
"category": "description",
"text": "Socket versions prior to 2.041 for Perl contain an out-of-bounds heap read vulnerability in the pack_ip_mreq_source() function, allowing potential exposure of adjacent heap memory and information disclosure.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-12087 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-12087.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-12087"
},
{
"cve": "CVE-2026-14970",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "description",
"text": "IBM AIX 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, suffer from NIM server process crashes during client registration due to a buffer overflow vulnerability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-14970 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-14970.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-14970"
},
{
"cve": "CVE-2026-15061",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"title": "CWE-22"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability in the nimesis registration service that permits remote attackers to overwrite files via path traversal.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-15061 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-15061.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-15061"
},
{
"cve": "CVE-2026-15065",
"cwe": {
"id": "CWE-312",
"name": "Cleartext Storage of Sensitive Information"
},
"notes": [
{
"category": "other",
"text": "Cleartext Storage of Sensitive Information",
"title": "CWE-312"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 NIM contain a security vulnerability that exposes intermediate certificate authority private keys in a public update file, enabling remote attackers to bypass security restrictions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-15065 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-15065.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-15065"
},
{
"cve": "CVE-2026-15068",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 NIM contain a vulnerability that permits remote authenticated attackers to execute arbitrary commands via improper handling of special elements in OS commands.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-15068 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-15068.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-15068"
},
{
"cve": "CVE-2026-15078",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Certificate Validation",
"title": "CWE-295"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 NIM contain a vulnerability in TLS certificate validation that may allow remote attackers unauthorized access to AIX systems.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-15078 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-15078.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-15078"
},
{
"cve": "CVE-2026-16243",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "other",
"text": "Improper Validation of Specified Quantity in Input",
"title": "CWE-1284"
},
{
"category": "description",
"text": "Eclipse OMR versions up to 0.11 contain a flaw in the arraycmp SIMD implementation for Z and P architectures that fails to validate zero-length byte comparisons, enabling a low-privilege remote attacker to cause denial of service.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16243 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16243.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16243"
},
{
"cve": "CVE-2026-16439",
"cwe": {
"id": "CWE-124",
"name": "Buffer Underwrite (\u0027Buffer Underflow\u0027)"
},
"notes": [
{
"category": "other",
"text": "Buffer Underwrite (\u0027Buffer Underflow\u0027)",
"title": "CWE-124"
},
{
"category": "description",
"text": "Eclipse OpenJ9 versions up to 0.60 contain a vulnerability in the -Xtrace option that can cause a buffer underflow when tracing method arguments, potentially leading to memory corruption.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:N/VI:H/VA:H/SC:N/SI:L/SA:L",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16439 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16439.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16439"
},
{
"cve": "CVE-2026-16441",
"cwe": {
"id": "CWE-758",
"name": "Reliance on Undefined, Unspecified, or Implementation-Defined Behavior"
},
"notes": [
{
"category": "other",
"text": "Reliance on Undefined, Unspecified, or Implementation-Defined Behavior",
"title": "CWE-758"
},
{
"category": "other",
"text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"title": "CWE-843"
},
{
"category": "description",
"text": "Eclipse OpenJ9 versions up to 0.60 contain a flaw where the JVM incorrectly delegates calls from a recompiled abstract superclass method to an interface default method, causing potential unexpected behavior and data integrity issues.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:N/VI:H/VA:L/SC:L/SI:H/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16441 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16441.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16441"
},
{
"cve": "CVE-2026-16656",
"notes": [
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits remote attackers to gain root privileges due to improper authentication mechanisms.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16656 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16656.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16656"
},
{
"cve": "CVE-2026-16686",
"notes": [
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits remote attackers to access NFS-exported filesystems due to improper authentication mechanisms.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16686 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16686.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16686"
},
{
"cve": "CVE-2026-16690",
"notes": [
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that enables remote attackers to cause denial of service via uncontrolled resource consumption.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16690 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16690.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16690"
},
{
"cve": "CVE-2026-16703",
"notes": [
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits local attackers to escalate privileges due to improper privilege management.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16703 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16703.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16703"
},
{
"cve": "CVE-2026-16706",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that permits remote attackers to cause a denial of service via an out-of-bounds write.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16706 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16706.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16706"
},
{
"cve": "CVE-2026-16814",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a heap buffer overflow vulnerability that enables remote attackers to execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16814 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16814.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16814"
},
{
"cve": "CVE-2026-16816",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits remote authenticated attackers to execute arbitrary commands via improper neutralization of special elements in OS commands.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16816 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16816.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16816"
},
{
"cve": "CVE-2026-16817",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that allows remote attackers to cause a denial of service via a NULL pointer dereference.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16817 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16817.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16817"
},
{
"cve": "CVE-2026-16818",
"notes": [
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that enables remote attackers to cause denial of service via uncontrolled resource consumption.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16818 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16818.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16818"
},
{
"cve": "CVE-2026-16819",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"notes": [
{
"category": "other",
"text": "Time-of-check Time-of-use (TOCTOU) Race Condition",
"title": "CWE-367"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a time-of-check time-of-use race condition vulnerability that enables local attackers to cause denial of service and compromise data integrity.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16819 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16819.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16819"
},
{
"cve": "CVE-2026-16822",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Certificate Validation",
"title": "CWE-295"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability due to improper certificate validation that enables remote attackers to impersonate the TNC policy server and alter network traffic.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16822 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16822.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16822"
},
{
"cve": "CVE-2026-16824",
"notes": [
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that enables remote attackers to trigger a denial of service via unbounded recursion.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16824 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16824.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16824"
},
{
"cve": "CVE-2026-16825",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability enabling remote authenticated attackers to cause denial of service and access sensitive data via an out-of-bounds write.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16825 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16825.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16825"
},
{
"cve": "CVE-2026-16827",
"cwe": {
"id": "CWE-908",
"name": "Use of Uninitialized Resource"
},
"notes": [
{
"category": "other",
"text": "Use of Uninitialized Resource",
"title": "CWE-908"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability involving an uninitialized stack pointer that can be exploited remotely to cause a denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16827 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16827.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16827"
},
{
"cve": "CVE-2026-16829",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that allows remote attackers to cause a denial of service via a NULL pointer dereference.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16829 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16829.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16829"
},
{
"cve": "CVE-2026-16831",
"notes": [
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that enables remote attackers to cause denial of service via uncontrolled resource consumption.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16831 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16831.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16831"
},
{
"cve": "CVE-2026-16833",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits remote attackers to perform out-of-bounds reads, potentially disclosing kernel memory.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16833 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16833.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16833"
},
{
"cve": "CVE-2026-16834",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability involving an integer underflow that can be exploited remotely to cause a denial of service condition.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16834 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16834.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16834"
},
{
"cve": "CVE-2026-16836",
"notes": [
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that enables remote attackers to cause denial of service via uncontrolled resource consumption.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16836 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16836.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16836"
},
{
"cve": "CVE-2026-16837",
"notes": [
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability due to improper handling of missing SSL client certificates, enabling remote attackers to cause denial of service conditions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16837 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16837.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16837"
},
{
"cve": "CVE-2026-16838",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"notes": [
{
"category": "other",
"text": "Time-of-check Time-of-use (TOCTOU) Race Condition",
"title": "CWE-367"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a TOCTOU race condition vulnerability enabling local attackers to overwrite critical files and access sensitive data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16838 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16838.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16838"
},
{
"cve": "CVE-2026-16839",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability due to an integer underflow in the IPv4 IP-options parser that allows remote attackers to access sensitive information.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16839 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16839.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16839"
},
{
"cve": "CVE-2026-16840",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability enabling remote attackers to execute arbitrary code via an out-of-bounds write.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16840 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16840.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16840"
},
{
"cve": "CVE-2026-16841",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a stack buffer overflow vulnerability that enables remote attackers to execute arbitrary code on affected systems.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16841 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16841.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16841"
},
{
"cve": "CVE-2026-16842",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability allowing remote attackers to execute arbitrary commands due to improper neutralization of special elements in OS commands.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16842 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16842.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16842"
},
{
"cve": "CVE-2026-16844",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability allowing remote attackers to execute arbitrary commands due to improper neutralization of special elements in OS commands.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16844 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16844.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16844"
},
{
"cve": "CVE-2026-16845",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a heap buffer overflow vulnerability that enables remote attackers to execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16845 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16845.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16845"
},
{
"cve": "CVE-2026-16846",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that allows remote attackers to cause a denial of service via a NULL pointer dereference.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16846 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16846.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16846"
},
{
"cve": "CVE-2026-16847",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a heap buffer overflow vulnerability that enables remote attackers to execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16847 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16847.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16847"
},
{
"cve": "CVE-2026-16848",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits remote attackers to execute arbitrary commands via improper neutralization of shell metacharacters in DHCP options.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16848 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16848.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16848"
},
{
"cve": "CVE-2026-16849",
"cwe": {
"id": "CWE-129",
"name": "Improper Validation of Array Index"
},
"notes": [
{
"category": "other",
"text": "Improper Validation of Array Index",
"title": "CWE-129"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability due to improper array index boundary checking that allows a remote attacker to cause a denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16849 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16849.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16849"
},
{
"cve": "CVE-2026-16850",
"notes": [
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 are susceptible to remote code execution via command injection triggered by specially crafted Router Advertisements.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16850 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16850.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16850"
},
{
"cve": "CVE-2026-16851",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a use-after-free vulnerability that can be exploited remotely to cause a denial of service condition.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16851 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16851.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16851"
},
{
"cve": "CVE-2026-16852",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that enables remote attackers to trigger a denial of service via an integer overflow.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16852 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16852.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16852"
},
{
"cve": "CVE-2026-16855",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that permits a local attacker to trigger a denial of service via a heap buffer overflow.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16855 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16855.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16855"
},
{
"cve": "CVE-2026-16857",
"notes": [
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability allowing remote attackers to manipulate network traffic and DNS settings due to improper authentication.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16857 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16857.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16857"
},
{
"cve": "CVE-2026-16862",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a stack buffer overflow vulnerability that enables remote attackers to execute arbitrary code on affected systems.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16862 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16862.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16862"
},
{
"cve": "CVE-2026-16864",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a stack buffer overflow vulnerability that enables remote attackers to execute arbitrary code on affected systems.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16864 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16864.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16864"
},
{
"cve": "CVE-2026-16865",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a command injection vulnerability that enables remote attackers to execute arbitrary code on affected systems.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16865 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16865.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16865"
},
{
"cve": "CVE-2026-16866",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that permits remote attackers to trigger a denial of service via an out-of-bounds read.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16866 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16866.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16866"
},
{
"cve": "CVE-2026-16869",
"cwe": {
"id": "CWE-426",
"name": "Untrusted Search Path"
},
"notes": [
{
"category": "other",
"text": "Untrusted Search Path",
"title": "CWE-426"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits local attackers to execute arbitrary code by exploiting improperly sanitized environment variables.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16869 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16869.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16869"
},
{
"cve": "CVE-2026-16872",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Stack-based Buffer Overflow",
"title": "CWE-121"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 have a stack-based buffer overflow vulnerability enabling remote attackers to execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16872 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16872.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16872"
},
{
"cve": "CVE-2026-16873",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a local privilege escalation vulnerability due to an out-of-bounds write condition exploitable by an attacker.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16873 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16873.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16873"
},
{
"cve": "CVE-2026-16874",
"notes": [
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability allowing local attackers to escalate privileges to root by exploiting improper enforcement of RBAC authentication roles.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16874 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16874.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16874"
},
{
"cve": "CVE-2026-16875",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability enabling local attackers to execute arbitrary commands via shell metacharacter injection.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16875 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16875.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16875"
},
{
"cve": "CVE-2026-16877",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Stack-based Buffer Overflow",
"title": "CWE-121"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a stack-based buffer overflow vulnerability enabling remote authenticated attackers to execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16877 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16877.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16877"
},
{
"cve": "CVE-2026-16882",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability allowing remote attackers to execute arbitrary commands due to improper neutralization of special elements in OS commands.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16882 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16882.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16882"
},
{
"cve": "CVE-2026-16883",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that permits a local attacker to perform an out-of-bounds read, potentially exposing sensitive information.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16883 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16883.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16883"
},
{
"cve": "CVE-2026-16885",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Stack-based Buffer Overflow",
"title": "CWE-121"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a stack buffer overflow vulnerability that enables remote attackers to execute arbitrary code on affected systems.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16885 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16885.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16885"
},
{
"cve": "CVE-2026-16886",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that permits remote attackers to cause a denial of service via an out-of-bounds write.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16886 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16886.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16886"
},
{
"cve": "CVE-2026-16888",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"title": "CWE-22"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a path traversal vulnerability that enables remote attackers to access sensitive information.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16888 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16888.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16888"
},
{
"cve": "CVE-2026-16890",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain an integer overflow vulnerability that may enable local attackers to access sensitive data or trigger denial of service conditions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16890 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16890.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.6,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16890"
},
{
"cve": "CVE-2026-16891",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that permits a local attacker to perform an out-of-bounds read, potentially exposing sensitive information.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16891 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16891.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16891"
},
{
"cve": "CVE-2026-16894",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a stack buffer overflow vulnerability that enables remote attackers to execute arbitrary code on affected systems.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16894 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16894.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16894"
},
{
"cve": "CVE-2026-16897",
"cwe": {
"id": "CWE-369",
"name": "Divide By Zero"
},
"notes": [
{
"category": "other",
"text": "Divide By Zero",
"title": "CWE-369"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that permits a local attacker to trigger a denial of service via an out-of-bounds write.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16897 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16897.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16897"
},
{
"cve": "CVE-2026-16901",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability enabling remote attackers to execute arbitrary code via an out-of-bounds write.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16901 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16901.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16901"
},
{
"cve": "CVE-2026-16903",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 have a vulnerability involving an out-of-bounds write that could enable remote code execution or denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16903 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16903.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16903"
},
{
"cve": "CVE-2026-16909",
"cwe": {
"id": "CWE-128",
"name": "Wrap-around Error"
},
"notes": [
{
"category": "other",
"text": "Wrap-around Error",
"title": "CWE-128"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain an off-by-one bounds checking error that enables remote attackers to execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16909 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16909.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16909"
},
{
"cve": "CVE-2026-16911",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Stack-based Buffer Overflow",
"title": "CWE-121"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a stack buffer overflow vulnerability that enables remote authenticated attackers to execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16911 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16911.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16911"
},
{
"cve": "CVE-2026-16913",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a stack buffer overflow vulnerability that enables remote attackers to execute arbitrary code on affected systems.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16913 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16913.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16913"
},
{
"cve": "CVE-2026-16914",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability enabling local attackers to execute arbitrary code via an out-of-bounds write.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16914 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16914.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16914"
},
{
"cve": "CVE-2026-16917",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain an integer overflow vulnerability that enables remote attackers to execute arbitrary code on affected systems.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16917 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16917.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16917"
},
{
"cve": "CVE-2026-16919",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"notes": [
{
"category": "other",
"text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"title": "CWE-843"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability due to improper validation of network-supplied pointers, enabling remote attackers to execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16919 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16919.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16919"
},
{
"cve": "CVE-2026-16922",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"notes": [
{
"category": "other",
"text": "Time-of-check Time-of-use (TOCTOU) Race Condition",
"title": "CWE-367"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a TOCTOU race condition vulnerability that enables local attackers to execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16922 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16922.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16922"
},
{
"cve": "CVE-2026-16923",
"notes": [
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits local attackers to escalate privileges due to improper privilege management.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16923 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16923.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16923"
},
{
"cve": "CVE-2026-16924",
"cwe": {
"id": "CWE-191",
"name": "Integer Underflow (Wrap or Wraparound)"
},
"notes": [
{
"category": "other",
"text": "Integer Underflow (Wrap or Wraparound)",
"title": "CWE-191"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability where improper memory offset calculation during IPsec decapsulation allows a remote attacker to cause a denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16924 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16924.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16924"
},
{
"cve": "CVE-2026-16925",
"notes": [
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a local privilege escalation vulnerability caused by improper authorization controls.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16925 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16925.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16925"
},
{
"cve": "CVE-2026-16926",
"cwe": {
"id": "CWE-73",
"name": "External Control of File Name or Path"
},
"notes": [
{
"category": "other",
"text": "External Control of File Name or Path",
"title": "CWE-73"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits remote attackers to overwrite arbitrary files by exploiting improper neutralization of special elements in input.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16926 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16926.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16926"
},
{
"cve": "CVE-2026-16927",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"notes": [
{
"category": "other",
"text": "Time-of-check Time-of-use (TOCTOU) Race Condition",
"title": "CWE-367"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a TOCTOU race condition vulnerability that allows local attackers to escalate privileges to root.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16927 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16927.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16927"
},
{
"cve": "CVE-2026-16928",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a heap-based buffer overflow vulnerability that can be exploited remotely to cause a denial of service condition.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16928 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16928.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16928"
},
{
"cve": "CVE-2026-16932",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits local attackers to execute arbitrary commands by exploiting improper validation of the ODMDIR environment variable.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16932 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16932.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16932"
},
{
"cve": "CVE-2026-16934",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 have a heap-based buffer overflow vulnerability that enables local attackers to escalate privileges.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16934 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16934.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16934"
},
{
"cve": "CVE-2026-16935",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"notes": [
{
"category": "other",
"text": "Time-of-check Time-of-use (TOCTOU) Race Condition",
"title": "CWE-367"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a TOCTOU race condition vulnerability that enables local attackers to escalate privileges.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16935 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16935.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16935"
},
{
"cve": "CVE-2026-16936",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a buffer overflow vulnerability that permits local attackers to execute arbitrary code on affected systems.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16936 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16936.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16936"
},
{
"cve": "CVE-2026-16937",
"notes": [
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits local attackers to escalate privileges due to improper privilege management.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16937 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16937.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16937"
},
{
"cve": "CVE-2026-16943",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 have a heap-based buffer overflow vulnerability that enables local attackers to execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16943 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16943.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16943"
},
{
"cve": "CVE-2026-16944",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a stack-based buffer overflow vulnerability that enables local attackers to execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16944 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16944.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16944"
},
{
"cve": "CVE-2026-16945",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Stack-based Buffer Overflow",
"title": "CWE-121"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a stack-based buffer overflow vulnerability that enables local attackers to execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16945 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16945.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16945"
},
{
"cve": "CVE-2026-16946",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a heap buffer overflow vulnerability that enables local attackers to escalate privileges.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16946 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16946.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16946"
},
{
"cve": "CVE-2026-16951",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a heap-based buffer overflow vulnerability that enables local authenticated attackers to execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16951 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16951.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16951"
},
{
"cve": "CVE-2026-16952",
"notes": [
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits a local attacker to cause denial of service by exhausting system resources.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16952 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16952.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16952"
},
{
"cve": "CVE-2026-16958",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that permits remote attackers to cause a denial of service via an out-of-bounds write.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16958 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16958.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16958"
},
{
"cve": "CVE-2026-16964",
"notes": [
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that enables remote attackers to intercept messages and forge replies by exposing sensitive information.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16964 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16964.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16964"
},
{
"cve": "CVE-2026-16972",
"notes": [
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability due to improper authentication that could allow remote attackers to access sensitive information.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16972 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16972.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16972"
},
{
"cve": "CVE-2026-16973",
"notes": [
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits a local attacker to perform an out-of-bounds read, potentially disclosing sensitive kernel memory.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16973 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16973.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16973"
},
{
"cve": "CVE-2026-16980",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
"title": "CWE-59"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability due to improper symbolic link validation that allows a local attacker to cause a denial of service condition.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16980 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16980.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16980"
},
{
"cve": "CVE-2026-16989",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
"title": "CWE-59"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability involving improper symbolic link resolution that permits local attackers to escalate privileges.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16989 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16989.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16989"
},
{
"cve": "CVE-2026-16991",
"notes": [
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability involving improper symbolic link handling that may allow local attackers to escalate privileges.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16991 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16991.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16991"
},
{
"cve": "CVE-2026-16996",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain an integer underflow vulnerability that enables local attackers to execute arbitrary code on affected systems.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16996 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16996.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16996"
},
{
"cve": "CVE-2026-16997",
"notes": [
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability due to improper privilege management that allows local attackers to execute arbitrary commands.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-16997 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-16997.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-16997"
},
{
"cve": "CVE-2026-17000",
"notes": [
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits remote attackers to execute arbitrary code due to improper authentication mechanisms.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17000 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17000.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17000"
},
{
"cve": "CVE-2026-17003",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain an out-of-bounds write vulnerability that could enable remote attackers to compromise system confidentiality and integrity.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17003 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17003.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17003"
},
{
"cve": "CVE-2026-17006",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a heap buffer overflow vulnerability that enables remote attackers to execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17006 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17006.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17006"
},
{
"cve": "CVE-2026-17007",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability enabling local attackers to perform out-of-bounds reads, potentially exposing sensitive information or causing denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17007 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17007.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17007"
},
{
"cve": "CVE-2026-17009",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability allowing local attackers to cause denial of service via NULL pointer dereference.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17009 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17009.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17009"
},
{
"cve": "CVE-2026-17024",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Certificate Validation",
"title": "CWE-295"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability due to improper certificate validation that enables remote attackers to execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17024 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17024.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17024"
},
{
"cve": "CVE-2026-17040",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a buffer overflow vulnerability that enables remote attackers to execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17040 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17040.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17040"
},
{
"cve": "CVE-2026-17060",
"notes": [
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a kernel heap over-read vulnerability that enables remote attackers to access sensitive data and cause denial of service conditions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17060 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17060.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17060"
},
{
"cve": "CVE-2026-17118",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a use-after-free vulnerability that enables remote attackers to execute arbitrary code on affected systems.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17118 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17118.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17118"
},
{
"cve": "CVE-2026-17120",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a buffer overflow vulnerability that may enable remote attackers to cause denial of service conditions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17120 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17120.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17120"
},
{
"cve": "CVE-2026-17121",
"notes": [
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that enables remote attackers to cause a denial of service via uncontrolled recursion.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17121 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17121.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17121"
},
{
"cve": "CVE-2026-17122",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 have a stack-based buffer overflow vulnerability enabling remote attackers to execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17122 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17122.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17122"
},
{
"cve": "CVE-2026-17124",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability due to an out-of-bounds read that allows local attackers to execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17124 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17124.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17124"
},
{
"cve": "CVE-2026-17136",
"cwe": {
"id": "CWE-134",
"name": "Use of Externally-Controlled Format String"
},
"notes": [
{
"category": "other",
"text": "Use of Externally-Controlled Format String",
"title": "CWE-134"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a format string vulnerability that enables remote attackers to execute arbitrary code on affected systems.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17136 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17136.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17136"
},
{
"cve": "CVE-2026-17138",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Stack-based Buffer Overflow",
"title": "CWE-121"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 have a stack-based buffer overflow vulnerability enabling remote attackers to execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17138 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17138.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17138"
},
{
"cve": "CVE-2026-17141",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a buffer overflow vulnerability that enables remote attackers to execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17141 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17141.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17141"
},
{
"cve": "CVE-2026-17142",
"notes": [
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits remote attackers to execute arbitrary commands due to improper authentication mechanisms.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17142 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17142.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17142"
},
{
"cve": "CVE-2026-17145",
"notes": [
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability due to improper privilege management that allows remote attackers to execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17145 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17145.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17145"
},
{
"cve": "CVE-2026-17152",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a buffer overflow vulnerability that enables remote attackers to execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17152 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17152.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17152"
},
{
"cve": "CVE-2026-17157",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a stack buffer overflow vulnerability that enables remote attackers to execute arbitrary code on affected systems.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17157 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17157.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17157"
},
{
"cve": "CVE-2026-17159",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that enables remote attackers to trigger a denial of service via an integer overflow.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17159 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17159.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17159"
},
{
"cve": "CVE-2026-17160",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain an integer overflow vulnerability during size computation that could enable remote attackers to execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17160 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17160.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17160"
},
{
"cve": "CVE-2026-17163",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability due to improper validation of an array size field, enabling remote attackers to cause a denial of service condition.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17163 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17163.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17163"
},
{
"cve": "CVE-2026-17165",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that allows remote attackers to cause a denial of service via a NULL pointer dereference.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17165 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17165.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17165"
},
{
"cve": "CVE-2026-17168",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a stack-based buffer overflow vulnerability enabling remote authenticated attackers to execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17168 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17168.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17168"
},
{
"cve": "CVE-2026-17170",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability due to improper allocation size validation that could enable a remote attacker to cause a denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17170 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17170.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17170"
},
{
"cve": "CVE-2026-17171",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
"title": "CWE-59"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits local attackers to overwrite arbitrary files by exploiting improper symbolic link handling.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17171 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17171.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17171"
},
{
"cve": "CVE-2026-17195",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a vulnerability that permits a local attacker to trigger a denial of service via an out-of-bounds write.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17195 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17195.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17195"
},
{
"cve": "CVE-2026-17422",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a buffer overflow vulnerability that permits local attackers to execute arbitrary code on affected systems.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17422 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17422.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17422"
},
{
"cve": "CVE-2026-17423",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability involving an out-of-bounds read that may enable remote attackers to access sensitive data and cause denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17423 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17423.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17423"
},
{
"cve": "CVE-2026-17424",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"title": "CWE-22"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits remote attackers to bypass security restrictions by improperly limiting pathname access to restricted directories.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17424 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17424.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17424"
},
{
"cve": "CVE-2026-17425",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a stack buffer overflow vulnerability that can be exploited remotely to cause a denial of service condition.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17425 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17425.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17425"
},
{
"cve": "CVE-2026-17436",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a heap-based buffer overflow vulnerability that enables remote attackers to execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-17436 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-17436.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-17436"
},
{
"cve": "CVE-2026-18670",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain an integer underflow vulnerability that may enable remote attackers to cause denial of service and potentially access sensitive information.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-18670 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-18670.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-18670"
},
{
"cve": "CVE-2026-18716",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability enabling remote authenticated attackers to perform out-of-bounds reads, potentially exposing sensitive information or causing denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-18716 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-18716.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.9,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-18716"
},
{
"cve": "CVE-2026-18822",
"notes": [
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that enables local attackers to cause denial of service by exhausting resources during directory record parsing.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-18822 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-18822.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-18822"
},
{
"cve": "CVE-2026-18824",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits remote authenticated attackers to execute arbitrary commands via improper neutralization of special elements in OS commands.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-18824 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-18824.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-18824"
},
{
"cve": "CVE-2026-18828",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a stack-based buffer overflow vulnerability that can be exploited remotely to cause a denial of service condition.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-18828 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-18828.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-18828"
},
{
"cve": "CVE-2026-18832",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a heap-based buffer overflow vulnerability that enables remote attackers to execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-18832 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-18832.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-18832"
},
{
"cve": "CVE-2026-18835",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits remote authenticated attackers to execute arbitrary commands via improper neutralization of special elements in OS commands.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-18835 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-18835.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-18835"
},
{
"cve": "CVE-2026-18840",
"cwe": {
"id": "CWE-822",
"name": "Untrusted Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "Untrusted Pointer Dereference",
"title": "CWE-822"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that permits local attackers to execute arbitrary code by exploiting improper validation of an attacker-controlled pointer.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-18840 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-18840.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-18840"
},
{
"cve": "CVE-2026-18842",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain an out-of-bounds write vulnerability that allows local attackers to escalate privileges.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-18842 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-18842.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-18842"
},
{
"cve": "CVE-2026-19437",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a buffer overflow vulnerability that enables remote attackers to execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-19437 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-19437.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-19437"
},
{
"cve": "CVE-2026-19442",
"cwe": {
"id": "CWE-822",
"name": "Untrusted Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "Untrusted Pointer Dereference",
"title": "CWE-822"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 have a pointer validation flaw in the AIX Virtual SCSI initiator driver that can lead to denial of service, privilege escalation, or full kernel compromise of the client LPAR.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-19442 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-19442.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-19442"
},
{
"cve": "CVE-2026-19446",
"notes": [
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 are susceptible to a remote unauthenticated denial-of-service attack via crafted UDP packets targeting an RPC service, resulting in complete system unavailability and necessitating an LPAR restart.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-19446 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-19446.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-19446"
},
{
"cve": "CVE-2026-19448",
"cwe": {
"id": "CWE-908",
"name": "Use of Uninitialized Resource"
},
"notes": [
{
"category": "other",
"text": "Use of Uninitialized Resource",
"title": "CWE-908"
},
{
"category": "description",
"text": "A stack memory corruption vulnerability in the AIX IPsec ESP decapsulation handler affects IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1, potentially causing kernel stack corruption, system crashes, and denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-19448 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-19448.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-19448"
},
{
"cve": "CVE-2026-19449",
"notes": [
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a local privilege escalation vulnerability in cmdnim that allows unprivileged users to execute code with root privileges.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-19449 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-19449.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-19449"
},
{
"cve": "CVE-2026-19653",
"notes": [
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability that allows a local attacker to cause denial of service by improperly handling memory page table configurations.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-19653 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-19653.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-19653"
},
{
"cve": "CVE-2026-19783",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 contain a vulnerability where a crafted filesystem image triggers kernel memory corruption via an out-of-bounds kernel-stack write, risking system crashes or privilege escalation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-19783 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-19783.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-19783"
},
{
"cve": "CVE-2026-22007",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"notes": [
{
"category": "other",
"text": "Use of a Broken or Risky Cryptographic Algorithm",
"title": "CWE-327"
},
{
"category": "description",
"text": "Multiple vulnerabilities affecting Oracle Java SE, Oracle GraalVM, OpenJDK versions 8, 11, 17, 21, 25, CRaC JDK variants, IBM Db2, and Oracle Communications Cloud Native Core Certificate Management allow unauthorized data access, denial of service, and data modification via various attack vectors.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-22007 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-22007.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.9,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-22007"
},
{
"cve": "CVE-2026-22013",
"cwe": {
"id": "CWE-319",
"name": "Cleartext Transmission of Sensitive Information"
},
"notes": [
{
"category": "other",
"text": "Cleartext Transmission of Sensitive Information",
"title": "CWE-319"
},
{
"category": "description",
"text": "Multiple vulnerabilities across Oracle Java SE, Oracle GraalVM, OpenJDK versions 8, 11, 17, 21, 25, CRaC JDK 17, 21, 25, IBM Java distributions, and Oracle Communications Cloud Native Core allow remote unauthenticated attackers to access sensitive data, cause denial of service, or modify data, with some requiring human interaction.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-22013 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-22013.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-22013"
},
{
"cve": "CVE-2026-22016",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"notes": [
{
"category": "other",
"text": "Improper Restriction of XML External Entity Reference",
"title": "CWE-611"
},
{
"category": "other",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
},
{
"category": "description",
"text": "Multiple critical vulnerabilities affect Oracle Java SE, Oracle GraalVM, OpenJDK (versions 8, 11, 17, 21, 25, 26), CRaC JDK (17, 21, 25), and Oracle Communications Cloud Native Core, enabling unauthorized data access, denial of service, and data modification with CVSS scores up to 7.5.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-22016 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-22016.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-22016"
},
{
"cve": "CVE-2026-22018",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "Multiple authentication, integer handling, and access control vulnerabilities in various OpenJDK, CRaC JDK, Oracle Java SE, Oracle GraalVM, and Oracle Communications products allow unauthenticated remote attackers to cause denial of service, unauthorized access, data modification, or data leakage.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-22018 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-22018.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-22018"
},
{
"cve": "CVE-2026-22021",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Recursion",
"title": "CWE-674"
},
{
"category": "description",
"text": "Multiple authentication, integer handling, and denial of service vulnerabilities affect various versions of Oracle Java SE, Oracle GraalVM, OpenJDK, CRaC JDK, IBM Java distributions, IBM Db2, and Oracle Communications Cloud Native Core Certificate Management, allowing unauthenticated attackers network access to cause partial denial of service, unauthorized data access, or data modification.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-22021 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-22021.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-22021"
},
{
"cve": "CVE-2026-34268",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"notes": [
{
"category": "other",
"text": "Use of a Broken or Risky Cryptographic Algorithm",
"title": "CWE-327"
},
{
"category": "description",
"text": "Multiple authentication, integer handling, and access control vulnerabilities affect various Oracle Java SE, OpenJDK, CRaC JDK, and Oracle Communications products, enabling unauthenticated attackers to gain unauthorized data access, cause denial of service, or modify data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-34268 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-34268.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.9,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-34268"
},
{
"cve": "CVE-2026-41254",
"cwe": {
"id": "CWE-696",
"name": "Incorrect Behavior Order"
},
"notes": [
{
"category": "other",
"text": "Incorrect Behavior Order",
"title": "CWE-696"
},
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Little CMS, including integer overflows in the CubeSize function, affect various versions of Little CMS and Oracle Java SE products, enabling denial of service, information disclosure, and potential code execution.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-41254 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-41254.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-41254"
},
{
"cve": "CVE-2026-46968",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Certificate Validation",
"title": "CWE-295"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Oracle Java SE and OpenJDK versions, including JSSE component flaws and client certificate verification issues, allow unauthenticated attackers network access via TLS to cause information disclosure, denial of service, and unauthorized data modification.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-46968 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-46968.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-46968"
},
{
"cve": "CVE-2026-47010",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "Multiple security vulnerabilities affecting Oracle Java SE, Oracle GraalVM, and various OpenJDK versions allow unauthenticated network attackers to cause information disclosure, denial of service, and unauthorized data modification with CVSS scores around 3.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-47010 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47010.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-47010"
},
{
"cve": "CVE-2026-47021",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"notes": [
{
"category": "other",
"text": "Inefficient Regular Expression Complexity",
"title": "CWE-1333"
},
{
"category": "description",
"text": "Multiple security vulnerabilities affecting Oracle Java SE, Oracle GraalVM, and OpenJDK versions include denial of service, information disclosure, and unauthorized data access via various components and protocols.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-47021 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47021.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-47021"
},
{
"cve": "CVE-2026-47027",
"notes": [
{
"category": "description",
"text": "Multiple vulnerabilities in Oracle Java SE and OpenJDK, including denial of service, information disclosure, and unauthorized data access, affect various versions and components such as SignatureFileVerifier and TLS protocols.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-47027 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47027.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-47027"
},
{
"cve": "CVE-2026-47057",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Oracle Java SE versions 8u491, 8u491-perf, and 11.0.31, including an integer overflow in OpenJDK\u0027s TypedArray.prototype.set(), allow unauthenticated network attackers to cause denial of service and unauthorized data access.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-47057 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47057.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-47057"
},
{
"cve": "CVE-2026-47058",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "other",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Oracle Java SE versions 8u491, 8u491-perf, and 11.0.31, as well as OpenJDK 11.0.32, allow unauthenticated network attackers to compromise data confidentiality, integrity, and cause out-of-bounds memory access with a CVSS score up to 7.4.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-47058 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47058.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-47058"
},
{
"cve": "CVE-2026-47059",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "description",
"text": "Multiple security vulnerabilities in Oracle Java SE, Oracle GraalVM, and OpenJDK versions allow unauthenticated attackers to cause partial denial of service and unauthorized data access, primarily affecting sandboxed Java client deployments.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-47059 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47059.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-47059"
},
{
"cve": "CVE-2026-47063",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"notes": [
{
"category": "other",
"text": "Improper Verification of Cryptographic Signature",
"title": "CWE-347"
},
{
"category": "description",
"text": "Multiple critical vulnerabilities in Oracle Java SE, GraalVM, and OpenJDK versions allow unauthenticated network attackers to modify or delete data, cause denial of service, and exploit flaws in APIs and JAR file signing.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-47063 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-47063.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-47063"
},
{
"cve": "CVE-2026-48959",
"cwe": {
"id": "CWE-407",
"name": "Inefficient Algorithmic Complexity"
},
"notes": [
{
"category": "other",
"text": "Inefficient Algorithmic Complexity",
"title": "CWE-407"
},
{
"category": "description",
"text": "IO::Uncompress::Unzip versions prior to 2.220 for Perl contain a vulnerability in the fastForward() function that causes a per-byte read loop, leading to CPU exhaustion when processing malicious zip files.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-48959 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-48959.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-48959"
},
{
"cve": "CVE-2026-48962",
"cwe": {
"id": "CWE-95",
"name": "Improper Neutralization of Directives in Dynamically Evaluated Code (\u0027Eval Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Directives in Dynamically Evaluated Code (\u0027Eval Injection\u0027)",
"title": "CWE-95"
},
{
"category": "other",
"text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"title": "CWE-94"
},
{
"category": "description",
"text": "IO::Compress versions before 2.220 for Perl contain a critical vulnerability in File::GlobMapper that allows arbitrary code execution via a maliciously crafted output glob.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-48962 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-48962.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-48962"
},
{
"cve": "CVE-2026-59995",
"cwe": {
"id": "CWE-23",
"name": "Relative Path Traversal"
},
"notes": [
{
"category": "other",
"text": "Relative Path Traversal",
"title": "CWE-23"
},
{
"category": "other",
"text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"title": "CWE-22"
},
{
"category": "description",
"text": "OpenSSH versions prior to 10.4 contain multiple vulnerabilities including improper file placement by sftp and scp clients, argument handling flaws, authentication bypasses, and a use-after-free bug, potentially leading to data disclosure, modification, or denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-59995 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-59995.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-59995"
},
{
"cve": "CVE-2026-59996",
"cwe": {
"id": "CWE-23",
"name": "Relative Path Traversal"
},
"notes": [
{
"category": "other",
"text": "Relative Path Traversal",
"title": "CWE-23"
},
{
"category": "other",
"text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"title": "CWE-22"
},
{
"category": "description",
"text": "OpenSSH versions prior to 10.4 contain multiple vulnerabilities including an scp flaw that places files in unintended parent directories during remote-to-remote copies, along with other issues affecting sftp, internal-sftp, GSSAPI options, forwarding, authentication, and client memory management.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-59996 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-59996.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-59996"
},
{
"cve": "CVE-2026-59997",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"notes": [
{
"category": "other",
"text": "Improper Validation of Specified Quantity in Input",
"title": "CWE-1284"
},
{
"category": "other",
"text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
"title": "CWE-88"
},
{
"category": "description",
"text": "OpenSSH versions prior to 10.4 contain multiple vulnerabilities including internal-sftp\u0027s limitation to nine command-line arguments, improper file location constraints, undocumented GSSAPI behavior, and authentication bypasses, potentially leading to data disclosure, modification, or DoS.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-59997 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-59997.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-59997"
},
{
"cve": "CVE-2026-59999",
"cwe": {
"id": "CWE-348",
"name": "Use of Less Trusted Source"
},
"notes": [
{
"category": "other",
"text": "Use of Less Trusted Source",
"title": "CWE-348"
},
{
"category": "other",
"text": "Improperly Implemented Security Check for Standard",
"title": "CWE-358"
},
{
"category": "description",
"text": "OpenSSH versions prior to 10.4 contain multiple vulnerabilities including a failure of DisableForwarding=yes to override PermitTunnel=yes, leading to unauthorized network tunneling and other security issues such as improper file constraints, argument handling flaws, and client use-after-free bugs.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-59999 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-59999.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-59999"
},
{
"cve": "CVE-2026-60000",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "other",
"text": "Improper Restriction of Excessive Authentication Attempts",
"title": "CWE-307"
},
{
"category": "description",
"text": "OpenSSH versions prior to 10.4 contain multiple vulnerabilities including improper MaxAuthTries handling during GSSAPIAuthentication, argument and file location issues in sftp/scp, and a client use-after-free flaw, leading to denial of service, data modification, or information disclosure.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-60000 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60000.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-60000"
},
{
"cve": "CVE-2026-60001",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "other",
"text": "Improper Restriction of Excessive Authentication Attempts",
"title": "CWE-307"
},
{
"category": "description",
"text": "OpenSSH versions prior to 10.4 contain multiple vulnerabilities including inconsistent enforcement of minimum authentication delay, improper file location constraints, argument handling flaws, and a use-after-free during host key re-exchange, enabling unauthorized access, brute-force attacks, and potential code execution.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-60001 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60001.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-60001"
},
{
"cve": "CVE-2026-60002",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "other",
"text": "Expired Pointer Dereference",
"title": "CWE-825"
},
{
"category": "description",
"text": "OpenSSH versions prior to 10.4 contain multiple vulnerabilities including a critical client-side use-after-free flaw during host key re-exchange, along with issues in sftp, scp, argument handling, configuration enforcement, and authentication bypasses.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-60002 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60002.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-60002"
},
{
"cve": "CVE-2026-60147",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Certificate Validation",
"title": "CWE-295"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Oracle Java SE, Oracle GraalVM, and OpenJDK affect various versions, allowing unauthenticated network attackers to gain unauthorized data access, cause denial of service, and exploit certificate validation flaws.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-60147 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-60147.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2"
]
}
],
"title": "CVE-2026-60147"
}
]
}
OPENSUSE-SU-2026:11335-1
Vulnerability from csaf_opensuse - Published: 2026-07-22 00:00 - Updated: 2026-07-22 00:00Summary
java-11-openjdk-11.0.32.0-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: java-11-openjdk-11.0.32.0-1.1 on GA media
Description of the patch: These are all security issues fixed in the java-11-openjdk-11.0.32.0-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-11335
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
5.3 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.4 (High)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
7.5 (High)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
35 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "java-11-openjdk-11.0.32.0-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the java-11-openjdk-11.0.32.0-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-11335",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11335-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-41254 page",
"url": "https://www.suse.com/security/cve/CVE-2026-41254/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46917 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46917/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46968 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46968/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47010 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47010/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47021 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47021/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47027 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47027/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47057 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47057/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47058 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47058/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47059 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47059/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47063 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47063/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-60147 page",
"url": "https://www.suse.com/security/cve/CVE-2026-60147/"
}
],
"title": "java-11-openjdk-11.0.32.0-1.1 on GA media",
"tracking": {
"current_release_date": "2026-07-22T00:00:00Z",
"generator": {
"date": "2026-07-22T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:11335-1",
"initial_release_date": "2026-07-22T00:00:00Z",
"revision_history": [
{
"date": "2026-07-22T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-11-openjdk-11.0.32.0-1.1.aarch64",
"product": {
"name": "java-11-openjdk-11.0.32.0-1.1.aarch64",
"product_id": "java-11-openjdk-11.0.32.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"product": {
"name": "java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"product_id": "java-11-openjdk-demo-11.0.32.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"product": {
"name": "java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"product_id": "java-11-openjdk-devel-11.0.32.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"product": {
"name": "java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"product_id": "java-11-openjdk-headless-11.0.32.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"product": {
"name": "java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"product_id": "java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"product": {
"name": "java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"product_id": "java-11-openjdk-jmods-11.0.32.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"product": {
"name": "java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"product_id": "java-11-openjdk-src-11.0.32.0-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-11-openjdk-11.0.32.0-1.1.ppc64le",
"product": {
"name": "java-11-openjdk-11.0.32.0-1.1.ppc64le",
"product_id": "java-11-openjdk-11.0.32.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"product": {
"name": "java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"product_id": "java-11-openjdk-demo-11.0.32.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"product": {
"name": "java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"product_id": "java-11-openjdk-devel-11.0.32.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"product": {
"name": "java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"product_id": "java-11-openjdk-headless-11.0.32.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"product": {
"name": "java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"product_id": "java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"product": {
"name": "java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"product_id": "java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"product": {
"name": "java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"product_id": "java-11-openjdk-src-11.0.32.0-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-11-openjdk-11.0.32.0-1.1.s390x",
"product": {
"name": "java-11-openjdk-11.0.32.0-1.1.s390x",
"product_id": "java-11-openjdk-11.0.32.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"product": {
"name": "java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"product_id": "java-11-openjdk-demo-11.0.32.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"product": {
"name": "java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"product_id": "java-11-openjdk-devel-11.0.32.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"product": {
"name": "java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"product_id": "java-11-openjdk-headless-11.0.32.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"product": {
"name": "java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"product_id": "java-11-openjdk-javadoc-11.0.32.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"product": {
"name": "java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"product_id": "java-11-openjdk-jmods-11.0.32.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-src-11.0.32.0-1.1.s390x",
"product": {
"name": "java-11-openjdk-src-11.0.32.0-1.1.s390x",
"product_id": "java-11-openjdk-src-11.0.32.0-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-11-openjdk-11.0.32.0-1.1.x86_64",
"product": {
"name": "java-11-openjdk-11.0.32.0-1.1.x86_64",
"product_id": "java-11-openjdk-11.0.32.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"product": {
"name": "java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"product_id": "java-11-openjdk-demo-11.0.32.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"product": {
"name": "java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"product_id": "java-11-openjdk-devel-11.0.32.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"product": {
"name": "java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"product_id": "java-11-openjdk-headless-11.0.32.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"product": {
"name": "java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"product_id": "java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"product": {
"name": "java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"product_id": "java-11-openjdk-jmods-11.0.32.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-11-openjdk-src-11.0.32.0-1.1.x86_64",
"product": {
"name": "java-11-openjdk-src-11.0.32.0-1.1.x86_64",
"product_id": "java-11-openjdk-src-11.0.32.0-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.32.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64"
},
"product_reference": "java-11-openjdk-11.0.32.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.32.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le"
},
"product_reference": "java-11-openjdk-11.0.32.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.32.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x"
},
"product_reference": "java-11-openjdk-11.0.32.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-11.0.32.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64"
},
"product_reference": "java-11-openjdk-11.0.32.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.32.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64"
},
"product_reference": "java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.32.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le"
},
"product_reference": "java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.32.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x"
},
"product_reference": "java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-demo-11.0.32.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64"
},
"product_reference": "java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.32.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64"
},
"product_reference": "java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.32.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le"
},
"product_reference": "java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.32.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x"
},
"product_reference": "java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-devel-11.0.32.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64"
},
"product_reference": "java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.32.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64"
},
"product_reference": "java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.32.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le"
},
"product_reference": "java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.32.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x"
},
"product_reference": "java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-headless-11.0.32.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64"
},
"product_reference": "java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64"
},
"product_reference": "java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le"
},
"product_reference": "java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-javadoc-11.0.32.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x"
},
"product_reference": "java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64"
},
"product_reference": "java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-jmods-11.0.32.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64"
},
"product_reference": "java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le"
},
"product_reference": "java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-jmods-11.0.32.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x"
},
"product_reference": "java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-jmods-11.0.32.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64"
},
"product_reference": "java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-src-11.0.32.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64"
},
"product_reference": "java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-src-11.0.32.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le"
},
"product_reference": "java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-src-11.0.32.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x"
},
"product_reference": "java-11-openjdk-src-11.0.32.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-11-openjdk-src-11.0.32.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
},
"product_reference": "java-11-openjdk-src-11.0.32.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-41254",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-41254"
}
],
"notes": [
{
"category": "general",
"text": "Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-41254",
"url": "https://www.suse.com/security/cve/CVE-2026-41254"
},
{
"category": "external",
"summary": "SUSE Bug 1264994 for CVE-2026-41254",
"url": "https://bugzilla.suse.com/1264994"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.9,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-41254"
},
{
"cve": "CVE-2026-46917",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46917"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46917",
"url": "https://www.suse.com/security/cve/CVE-2026-46917"
},
{
"category": "external",
"summary": "SUSE Bug 1272223 for CVE-2026-46917",
"url": "https://bugzilla.suse.com/1272223"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46917"
},
{
"cve": "CVE-2026-46968",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46968"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46968",
"url": "https://www.suse.com/security/cve/CVE-2026-46968"
},
{
"category": "external",
"summary": "SUSE Bug 1272224 for CVE-2026-46968",
"url": "https://bugzilla.suse.com/1272224"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46968"
},
{
"cve": "CVE-2026-47010",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47010"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47010",
"url": "https://www.suse.com/security/cve/CVE-2026-47010"
},
{
"category": "external",
"summary": "SUSE Bug 1272225 for CVE-2026-47010",
"url": "https://bugzilla.suse.com/1272225"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-47010"
},
{
"cve": "CVE-2026-47021",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47021"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47021",
"url": "https://www.suse.com/security/cve/CVE-2026-47021"
},
{
"category": "external",
"summary": "SUSE Bug 1272227 for CVE-2026-47021",
"url": "https://bugzilla.suse.com/1272227"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-47021"
},
{
"cve": "CVE-2026-47027",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47027"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47027",
"url": "https://www.suse.com/security/cve/CVE-2026-47027"
},
{
"category": "external",
"summary": "SUSE Bug 1272228 for CVE-2026-47027",
"url": "https://bugzilla.suse.com/1272228"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-47027"
},
{
"cve": "CVE-2026-47057",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47057"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47057",
"url": "https://www.suse.com/security/cve/CVE-2026-47057"
},
{
"category": "external",
"summary": "SUSE Bug 1272233 for CVE-2026-47057",
"url": "https://bugzilla.suse.com/1272233"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-47057"
},
{
"cve": "CVE-2026-47058",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47058"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47058",
"url": "https://www.suse.com/security/cve/CVE-2026-47058"
},
{
"category": "external",
"summary": "SUSE Bug 1272234 for CVE-2026-47058",
"url": "https://bugzilla.suse.com/1272234"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-47058"
},
{
"cve": "CVE-2026-47059",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47059"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47059",
"url": "https://www.suse.com/security/cve/CVE-2026-47059"
},
{
"category": "external",
"summary": "SUSE Bug 1272235 for CVE-2026-47059",
"url": "https://bugzilla.suse.com/1272235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-47059"
},
{
"cve": "CVE-2026-47063",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47063"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47063",
"url": "https://www.suse.com/security/cve/CVE-2026-47063"
},
{
"category": "external",
"summary": "SUSE Bug 1272236 for CVE-2026-47063",
"url": "https://bugzilla.suse.com/1272236"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-47063"
},
{
"cve": "CVE-2026-60147",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-60147"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-60147",
"url": "https://www.suse.com/security/cve/CVE-2026-60147"
},
{
"category": "external",
"summary": "SUSE Bug 1272237 for CVE-2026-60147",
"url": "https://bugzilla.suse.com/1272237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-demo-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-devel-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-headless-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.32.0-1.1.x86_64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.aarch64",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.s390x",
"openSUSE Tumbleweed:java-11-openjdk-src-11.0.32.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-60147"
}
]
}
OPENSUSE-SU-2026:11336-1
Vulnerability from csaf_opensuse - Published: 2026-07-22 00:00 - Updated: 2026-07-22 00:00Summary
java-17-openjdk-17.0.20.0-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: java-17-openjdk-17.0.20.0-1.1 on GA media
Description of the patch: These are all security issues fixed in the java-17-openjdk-17.0.20.0-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-11336
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
5.3 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
7.5 (High)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
29 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "java-17-openjdk-17.0.20.0-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the java-17-openjdk-17.0.20.0-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-11336",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11336-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-41254 page",
"url": "https://www.suse.com/security/cve/CVE-2026-41254/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46917 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46917/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46968 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46968/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47010 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47010/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47021 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47021/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47027 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47027/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47059 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47059/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47063 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47063/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-60147 page",
"url": "https://www.suse.com/security/cve/CVE-2026-60147/"
}
],
"title": "java-17-openjdk-17.0.20.0-1.1 on GA media",
"tracking": {
"current_release_date": "2026-07-22T00:00:00Z",
"generator": {
"date": "2026-07-22T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:11336-1",
"initial_release_date": "2026-07-22T00:00:00Z",
"revision_history": [
{
"date": "2026-07-22T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-17-openjdk-17.0.20.0-1.1.aarch64",
"product": {
"name": "java-17-openjdk-17.0.20.0-1.1.aarch64",
"product_id": "java-17-openjdk-17.0.20.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-demo-17.0.20.0-1.1.aarch64",
"product": {
"name": "java-17-openjdk-demo-17.0.20.0-1.1.aarch64",
"product_id": "java-17-openjdk-demo-17.0.20.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-devel-17.0.20.0-1.1.aarch64",
"product": {
"name": "java-17-openjdk-devel-17.0.20.0-1.1.aarch64",
"product_id": "java-17-openjdk-devel-17.0.20.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-headless-17.0.20.0-1.1.aarch64",
"product": {
"name": "java-17-openjdk-headless-17.0.20.0-1.1.aarch64",
"product_id": "java-17-openjdk-headless-17.0.20.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64",
"product": {
"name": "java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64",
"product_id": "java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-jmods-17.0.20.0-1.1.aarch64",
"product": {
"name": "java-17-openjdk-jmods-17.0.20.0-1.1.aarch64",
"product_id": "java-17-openjdk-jmods-17.0.20.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-src-17.0.20.0-1.1.aarch64",
"product": {
"name": "java-17-openjdk-src-17.0.20.0-1.1.aarch64",
"product_id": "java-17-openjdk-src-17.0.20.0-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-17-openjdk-17.0.20.0-1.1.ppc64le",
"product": {
"name": "java-17-openjdk-17.0.20.0-1.1.ppc64le",
"product_id": "java-17-openjdk-17.0.20.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-demo-17.0.20.0-1.1.ppc64le",
"product": {
"name": "java-17-openjdk-demo-17.0.20.0-1.1.ppc64le",
"product_id": "java-17-openjdk-demo-17.0.20.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-devel-17.0.20.0-1.1.ppc64le",
"product": {
"name": "java-17-openjdk-devel-17.0.20.0-1.1.ppc64le",
"product_id": "java-17-openjdk-devel-17.0.20.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-headless-17.0.20.0-1.1.ppc64le",
"product": {
"name": "java-17-openjdk-headless-17.0.20.0-1.1.ppc64le",
"product_id": "java-17-openjdk-headless-17.0.20.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le",
"product": {
"name": "java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le",
"product_id": "java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le",
"product": {
"name": "java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le",
"product_id": "java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-src-17.0.20.0-1.1.ppc64le",
"product": {
"name": "java-17-openjdk-src-17.0.20.0-1.1.ppc64le",
"product_id": "java-17-openjdk-src-17.0.20.0-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-17-openjdk-17.0.20.0-1.1.s390x",
"product": {
"name": "java-17-openjdk-17.0.20.0-1.1.s390x",
"product_id": "java-17-openjdk-17.0.20.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-demo-17.0.20.0-1.1.s390x",
"product": {
"name": "java-17-openjdk-demo-17.0.20.0-1.1.s390x",
"product_id": "java-17-openjdk-demo-17.0.20.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-devel-17.0.20.0-1.1.s390x",
"product": {
"name": "java-17-openjdk-devel-17.0.20.0-1.1.s390x",
"product_id": "java-17-openjdk-devel-17.0.20.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-headless-17.0.20.0-1.1.s390x",
"product": {
"name": "java-17-openjdk-headless-17.0.20.0-1.1.s390x",
"product_id": "java-17-openjdk-headless-17.0.20.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-javadoc-17.0.20.0-1.1.s390x",
"product": {
"name": "java-17-openjdk-javadoc-17.0.20.0-1.1.s390x",
"product_id": "java-17-openjdk-javadoc-17.0.20.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-jmods-17.0.20.0-1.1.s390x",
"product": {
"name": "java-17-openjdk-jmods-17.0.20.0-1.1.s390x",
"product_id": "java-17-openjdk-jmods-17.0.20.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-src-17.0.20.0-1.1.s390x",
"product": {
"name": "java-17-openjdk-src-17.0.20.0-1.1.s390x",
"product_id": "java-17-openjdk-src-17.0.20.0-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-17-openjdk-17.0.20.0-1.1.x86_64",
"product": {
"name": "java-17-openjdk-17.0.20.0-1.1.x86_64",
"product_id": "java-17-openjdk-17.0.20.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-demo-17.0.20.0-1.1.x86_64",
"product": {
"name": "java-17-openjdk-demo-17.0.20.0-1.1.x86_64",
"product_id": "java-17-openjdk-demo-17.0.20.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-devel-17.0.20.0-1.1.x86_64",
"product": {
"name": "java-17-openjdk-devel-17.0.20.0-1.1.x86_64",
"product_id": "java-17-openjdk-devel-17.0.20.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-headless-17.0.20.0-1.1.x86_64",
"product": {
"name": "java-17-openjdk-headless-17.0.20.0-1.1.x86_64",
"product_id": "java-17-openjdk-headless-17.0.20.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64",
"product": {
"name": "java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64",
"product_id": "java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-jmods-17.0.20.0-1.1.x86_64",
"product": {
"name": "java-17-openjdk-jmods-17.0.20.0-1.1.x86_64",
"product_id": "java-17-openjdk-jmods-17.0.20.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-src-17.0.20.0-1.1.x86_64",
"product": {
"name": "java-17-openjdk-src-17.0.20.0-1.1.x86_64",
"product_id": "java-17-openjdk-src-17.0.20.0-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-17.0.20.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64"
},
"product_reference": "java-17-openjdk-17.0.20.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-17.0.20.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le"
},
"product_reference": "java-17-openjdk-17.0.20.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-17.0.20.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x"
},
"product_reference": "java-17-openjdk-17.0.20.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-17.0.20.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64"
},
"product_reference": "java-17-openjdk-17.0.20.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-demo-17.0.20.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64"
},
"product_reference": "java-17-openjdk-demo-17.0.20.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-demo-17.0.20.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le"
},
"product_reference": "java-17-openjdk-demo-17.0.20.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-demo-17.0.20.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x"
},
"product_reference": "java-17-openjdk-demo-17.0.20.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-demo-17.0.20.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64"
},
"product_reference": "java-17-openjdk-demo-17.0.20.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-devel-17.0.20.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64"
},
"product_reference": "java-17-openjdk-devel-17.0.20.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-devel-17.0.20.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le"
},
"product_reference": "java-17-openjdk-devel-17.0.20.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-devel-17.0.20.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x"
},
"product_reference": "java-17-openjdk-devel-17.0.20.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-devel-17.0.20.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64"
},
"product_reference": "java-17-openjdk-devel-17.0.20.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-headless-17.0.20.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64"
},
"product_reference": "java-17-openjdk-headless-17.0.20.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-headless-17.0.20.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le"
},
"product_reference": "java-17-openjdk-headless-17.0.20.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-headless-17.0.20.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x"
},
"product_reference": "java-17-openjdk-headless-17.0.20.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-headless-17.0.20.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64"
},
"product_reference": "java-17-openjdk-headless-17.0.20.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64"
},
"product_reference": "java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le"
},
"product_reference": "java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-javadoc-17.0.20.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x"
},
"product_reference": "java-17-openjdk-javadoc-17.0.20.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64"
},
"product_reference": "java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-jmods-17.0.20.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64"
},
"product_reference": "java-17-openjdk-jmods-17.0.20.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le"
},
"product_reference": "java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-jmods-17.0.20.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x"
},
"product_reference": "java-17-openjdk-jmods-17.0.20.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-jmods-17.0.20.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64"
},
"product_reference": "java-17-openjdk-jmods-17.0.20.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-src-17.0.20.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64"
},
"product_reference": "java-17-openjdk-src-17.0.20.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-src-17.0.20.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le"
},
"product_reference": "java-17-openjdk-src-17.0.20.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-src-17.0.20.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x"
},
"product_reference": "java-17-openjdk-src-17.0.20.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-src-17.0.20.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64"
},
"product_reference": "java-17-openjdk-src-17.0.20.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-41254",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-41254"
}
],
"notes": [
{
"category": "general",
"text": "Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-41254",
"url": "https://www.suse.com/security/cve/CVE-2026-41254"
},
{
"category": "external",
"summary": "SUSE Bug 1264994 for CVE-2026-41254",
"url": "https://bugzilla.suse.com/1264994"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.9,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-41254"
},
{
"cve": "CVE-2026-46917",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46917"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46917",
"url": "https://www.suse.com/security/cve/CVE-2026-46917"
},
{
"category": "external",
"summary": "SUSE Bug 1272223 for CVE-2026-46917",
"url": "https://bugzilla.suse.com/1272223"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46917"
},
{
"cve": "CVE-2026-46968",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46968"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46968",
"url": "https://www.suse.com/security/cve/CVE-2026-46968"
},
{
"category": "external",
"summary": "SUSE Bug 1272224 for CVE-2026-46968",
"url": "https://bugzilla.suse.com/1272224"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46968"
},
{
"cve": "CVE-2026-47010",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47010"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47010",
"url": "https://www.suse.com/security/cve/CVE-2026-47010"
},
{
"category": "external",
"summary": "SUSE Bug 1272225 for CVE-2026-47010",
"url": "https://bugzilla.suse.com/1272225"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-47010"
},
{
"cve": "CVE-2026-47021",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47021"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47021",
"url": "https://www.suse.com/security/cve/CVE-2026-47021"
},
{
"category": "external",
"summary": "SUSE Bug 1272227 for CVE-2026-47021",
"url": "https://bugzilla.suse.com/1272227"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-47021"
},
{
"cve": "CVE-2026-47027",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47027"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47027",
"url": "https://www.suse.com/security/cve/CVE-2026-47027"
},
{
"category": "external",
"summary": "SUSE Bug 1272228 for CVE-2026-47027",
"url": "https://bugzilla.suse.com/1272228"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-47027"
},
{
"cve": "CVE-2026-47059",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47059"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47059",
"url": "https://www.suse.com/security/cve/CVE-2026-47059"
},
{
"category": "external",
"summary": "SUSE Bug 1272235 for CVE-2026-47059",
"url": "https://bugzilla.suse.com/1272235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-47059"
},
{
"cve": "CVE-2026-47063",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47063"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47063",
"url": "https://www.suse.com/security/cve/CVE-2026-47063"
},
{
"category": "external",
"summary": "SUSE Bug 1272236 for CVE-2026-47063",
"url": "https://bugzilla.suse.com/1272236"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-47063"
},
{
"cve": "CVE-2026-60147",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-60147"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-60147",
"url": "https://www.suse.com/security/cve/CVE-2026-60147"
},
{
"category": "external",
"summary": "SUSE Bug 1272237 for CVE-2026-60147",
"url": "https://bugzilla.suse.com/1272237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-demo-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-devel-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-headless-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.20.0-1.1.x86_64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.aarch64",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.s390x",
"openSUSE Tumbleweed:java-17-openjdk-src-17.0.20.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-60147"
}
]
}
OPENSUSE-SU-2026:11337-1
Vulnerability from csaf_opensuse - Published: 2026-07-22 00:00 - Updated: 2026-07-22 00:00Summary
java-26-openjdk-26.0.2.0-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: java-26-openjdk-26.0.2.0-1.1 on GA media
Description of the patch: These are all security issues fixed in the java-26-openjdk-26.0.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-11337
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
5.3 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
7.5 (High)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
26 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "java-26-openjdk-26.0.2.0-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the java-26-openjdk-26.0.2.0-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-11337",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11337-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46917 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46917/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46968 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46968/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47010 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47010/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47021 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47021/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47027 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47027/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47059 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47059/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47063 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47063/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-60147 page",
"url": "https://www.suse.com/security/cve/CVE-2026-60147/"
}
],
"title": "java-26-openjdk-26.0.2.0-1.1 on GA media",
"tracking": {
"current_release_date": "2026-07-22T00:00:00Z",
"generator": {
"date": "2026-07-22T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:11337-1",
"initial_release_date": "2026-07-22T00:00:00Z",
"revision_history": [
{
"date": "2026-07-22T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-26-openjdk-26.0.2.0-1.1.aarch64",
"product": {
"name": "java-26-openjdk-26.0.2.0-1.1.aarch64",
"product_id": "java-26-openjdk-26.0.2.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-26-openjdk-demo-26.0.2.0-1.1.aarch64",
"product": {
"name": "java-26-openjdk-demo-26.0.2.0-1.1.aarch64",
"product_id": "java-26-openjdk-demo-26.0.2.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-26-openjdk-devel-26.0.2.0-1.1.aarch64",
"product": {
"name": "java-26-openjdk-devel-26.0.2.0-1.1.aarch64",
"product_id": "java-26-openjdk-devel-26.0.2.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-26-openjdk-headless-26.0.2.0-1.1.aarch64",
"product": {
"name": "java-26-openjdk-headless-26.0.2.0-1.1.aarch64",
"product_id": "java-26-openjdk-headless-26.0.2.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64",
"product": {
"name": "java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64",
"product_id": "java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-26-openjdk-jmods-26.0.2.0-1.1.aarch64",
"product": {
"name": "java-26-openjdk-jmods-26.0.2.0-1.1.aarch64",
"product_id": "java-26-openjdk-jmods-26.0.2.0-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-26-openjdk-src-26.0.2.0-1.1.aarch64",
"product": {
"name": "java-26-openjdk-src-26.0.2.0-1.1.aarch64",
"product_id": "java-26-openjdk-src-26.0.2.0-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-26-openjdk-26.0.2.0-1.1.ppc64le",
"product": {
"name": "java-26-openjdk-26.0.2.0-1.1.ppc64le",
"product_id": "java-26-openjdk-26.0.2.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-26-openjdk-demo-26.0.2.0-1.1.ppc64le",
"product": {
"name": "java-26-openjdk-demo-26.0.2.0-1.1.ppc64le",
"product_id": "java-26-openjdk-demo-26.0.2.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-26-openjdk-devel-26.0.2.0-1.1.ppc64le",
"product": {
"name": "java-26-openjdk-devel-26.0.2.0-1.1.ppc64le",
"product_id": "java-26-openjdk-devel-26.0.2.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-26-openjdk-headless-26.0.2.0-1.1.ppc64le",
"product": {
"name": "java-26-openjdk-headless-26.0.2.0-1.1.ppc64le",
"product_id": "java-26-openjdk-headless-26.0.2.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le",
"product": {
"name": "java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le",
"product_id": "java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le",
"product": {
"name": "java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le",
"product_id": "java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-26-openjdk-src-26.0.2.0-1.1.ppc64le",
"product": {
"name": "java-26-openjdk-src-26.0.2.0-1.1.ppc64le",
"product_id": "java-26-openjdk-src-26.0.2.0-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-26-openjdk-26.0.2.0-1.1.s390x",
"product": {
"name": "java-26-openjdk-26.0.2.0-1.1.s390x",
"product_id": "java-26-openjdk-26.0.2.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "java-26-openjdk-demo-26.0.2.0-1.1.s390x",
"product": {
"name": "java-26-openjdk-demo-26.0.2.0-1.1.s390x",
"product_id": "java-26-openjdk-demo-26.0.2.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "java-26-openjdk-devel-26.0.2.0-1.1.s390x",
"product": {
"name": "java-26-openjdk-devel-26.0.2.0-1.1.s390x",
"product_id": "java-26-openjdk-devel-26.0.2.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "java-26-openjdk-headless-26.0.2.0-1.1.s390x",
"product": {
"name": "java-26-openjdk-headless-26.0.2.0-1.1.s390x",
"product_id": "java-26-openjdk-headless-26.0.2.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "java-26-openjdk-javadoc-26.0.2.0-1.1.s390x",
"product": {
"name": "java-26-openjdk-javadoc-26.0.2.0-1.1.s390x",
"product_id": "java-26-openjdk-javadoc-26.0.2.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "java-26-openjdk-jmods-26.0.2.0-1.1.s390x",
"product": {
"name": "java-26-openjdk-jmods-26.0.2.0-1.1.s390x",
"product_id": "java-26-openjdk-jmods-26.0.2.0-1.1.s390x"
}
},
{
"category": "product_version",
"name": "java-26-openjdk-src-26.0.2.0-1.1.s390x",
"product": {
"name": "java-26-openjdk-src-26.0.2.0-1.1.s390x",
"product_id": "java-26-openjdk-src-26.0.2.0-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-26-openjdk-26.0.2.0-1.1.x86_64",
"product": {
"name": "java-26-openjdk-26.0.2.0-1.1.x86_64",
"product_id": "java-26-openjdk-26.0.2.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-26-openjdk-demo-26.0.2.0-1.1.x86_64",
"product": {
"name": "java-26-openjdk-demo-26.0.2.0-1.1.x86_64",
"product_id": "java-26-openjdk-demo-26.0.2.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-26-openjdk-devel-26.0.2.0-1.1.x86_64",
"product": {
"name": "java-26-openjdk-devel-26.0.2.0-1.1.x86_64",
"product_id": "java-26-openjdk-devel-26.0.2.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-26-openjdk-headless-26.0.2.0-1.1.x86_64",
"product": {
"name": "java-26-openjdk-headless-26.0.2.0-1.1.x86_64",
"product_id": "java-26-openjdk-headless-26.0.2.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64",
"product": {
"name": "java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64",
"product_id": "java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-26-openjdk-jmods-26.0.2.0-1.1.x86_64",
"product": {
"name": "java-26-openjdk-jmods-26.0.2.0-1.1.x86_64",
"product_id": "java-26-openjdk-jmods-26.0.2.0-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-26-openjdk-src-26.0.2.0-1.1.x86_64",
"product": {
"name": "java-26-openjdk-src-26.0.2.0-1.1.x86_64",
"product_id": "java-26-openjdk-src-26.0.2.0-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-26-openjdk-26.0.2.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64"
},
"product_reference": "java-26-openjdk-26.0.2.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-26-openjdk-26.0.2.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le"
},
"product_reference": "java-26-openjdk-26.0.2.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-26-openjdk-26.0.2.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x"
},
"product_reference": "java-26-openjdk-26.0.2.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-26-openjdk-26.0.2.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64"
},
"product_reference": "java-26-openjdk-26.0.2.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-26-openjdk-demo-26.0.2.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64"
},
"product_reference": "java-26-openjdk-demo-26.0.2.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-26-openjdk-demo-26.0.2.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le"
},
"product_reference": "java-26-openjdk-demo-26.0.2.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-26-openjdk-demo-26.0.2.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x"
},
"product_reference": "java-26-openjdk-demo-26.0.2.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-26-openjdk-demo-26.0.2.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64"
},
"product_reference": "java-26-openjdk-demo-26.0.2.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-26-openjdk-devel-26.0.2.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64"
},
"product_reference": "java-26-openjdk-devel-26.0.2.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-26-openjdk-devel-26.0.2.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le"
},
"product_reference": "java-26-openjdk-devel-26.0.2.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-26-openjdk-devel-26.0.2.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x"
},
"product_reference": "java-26-openjdk-devel-26.0.2.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-26-openjdk-devel-26.0.2.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64"
},
"product_reference": "java-26-openjdk-devel-26.0.2.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-26-openjdk-headless-26.0.2.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64"
},
"product_reference": "java-26-openjdk-headless-26.0.2.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-26-openjdk-headless-26.0.2.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le"
},
"product_reference": "java-26-openjdk-headless-26.0.2.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-26-openjdk-headless-26.0.2.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x"
},
"product_reference": "java-26-openjdk-headless-26.0.2.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-26-openjdk-headless-26.0.2.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64"
},
"product_reference": "java-26-openjdk-headless-26.0.2.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64"
},
"product_reference": "java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le"
},
"product_reference": "java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-26-openjdk-javadoc-26.0.2.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x"
},
"product_reference": "java-26-openjdk-javadoc-26.0.2.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64"
},
"product_reference": "java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-26-openjdk-jmods-26.0.2.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64"
},
"product_reference": "java-26-openjdk-jmods-26.0.2.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le"
},
"product_reference": "java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-26-openjdk-jmods-26.0.2.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x"
},
"product_reference": "java-26-openjdk-jmods-26.0.2.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-26-openjdk-jmods-26.0.2.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64"
},
"product_reference": "java-26-openjdk-jmods-26.0.2.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-26-openjdk-src-26.0.2.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64"
},
"product_reference": "java-26-openjdk-src-26.0.2.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-26-openjdk-src-26.0.2.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le"
},
"product_reference": "java-26-openjdk-src-26.0.2.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-26-openjdk-src-26.0.2.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x"
},
"product_reference": "java-26-openjdk-src-26.0.2.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-26-openjdk-src-26.0.2.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64"
},
"product_reference": "java-26-openjdk-src-26.0.2.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-46917",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46917"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46917",
"url": "https://www.suse.com/security/cve/CVE-2026-46917"
},
{
"category": "external",
"summary": "SUSE Bug 1272223 for CVE-2026-46917",
"url": "https://bugzilla.suse.com/1272223"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46917"
},
{
"cve": "CVE-2026-46968",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46968"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46968",
"url": "https://www.suse.com/security/cve/CVE-2026-46968"
},
{
"category": "external",
"summary": "SUSE Bug 1272224 for CVE-2026-46968",
"url": "https://bugzilla.suse.com/1272224"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46968"
},
{
"cve": "CVE-2026-47010",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47010"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47010",
"url": "https://www.suse.com/security/cve/CVE-2026-47010"
},
{
"category": "external",
"summary": "SUSE Bug 1272225 for CVE-2026-47010",
"url": "https://bugzilla.suse.com/1272225"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-47010"
},
{
"cve": "CVE-2026-47021",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47021"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47021",
"url": "https://www.suse.com/security/cve/CVE-2026-47021"
},
{
"category": "external",
"summary": "SUSE Bug 1272227 for CVE-2026-47021",
"url": "https://bugzilla.suse.com/1272227"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-47021"
},
{
"cve": "CVE-2026-47027",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47027"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47027",
"url": "https://www.suse.com/security/cve/CVE-2026-47027"
},
{
"category": "external",
"summary": "SUSE Bug 1272228 for CVE-2026-47027",
"url": "https://bugzilla.suse.com/1272228"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-47027"
},
{
"cve": "CVE-2026-47059",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47059"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47059",
"url": "https://www.suse.com/security/cve/CVE-2026-47059"
},
{
"category": "external",
"summary": "SUSE Bug 1272235 for CVE-2026-47059",
"url": "https://bugzilla.suse.com/1272235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-47059"
},
{
"cve": "CVE-2026-47063",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47063"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47063",
"url": "https://www.suse.com/security/cve/CVE-2026-47063"
},
{
"category": "external",
"summary": "SUSE Bug 1272236 for CVE-2026-47063",
"url": "https://bugzilla.suse.com/1272236"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-47063"
},
{
"cve": "CVE-2026-60147",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-60147"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-60147",
"url": "https://www.suse.com/security/cve/CVE-2026-60147"
},
{
"category": "external",
"summary": "SUSE Bug 1272237 for CVE-2026-60147",
"url": "https://bugzilla.suse.com/1272237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-demo-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-devel-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-headless-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-javadoc-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-jmods-26.0.2.0-1.1.x86_64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.aarch64",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.ppc64le",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.s390x",
"openSUSE Tumbleweed:java-26-openjdk-src-26.0.2.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-60147"
}
]
}
OPENSUSE-SU-2026:11453-1
Vulnerability from csaf_opensuse - Published: 2026-08-05 00:00 - Updated: 2026-08-05 00:00Summary
java-1_8_0-openjdk-1.8.0.502-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: java-1_8_0-openjdk-1.8.0.502-1.1 on GA media
Description of the patch: These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.502-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-11453
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
5.3 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.4 (High)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
7.5 (High)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
33 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "java-1_8_0-openjdk-1.8.0.502-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.502-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-11453",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11453-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-41254 page",
"url": "https://www.suse.com/security/cve/CVE-2026-41254/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46968 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46968/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47010 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47010/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47021 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47021/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47027 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47027/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47057 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47057/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47058 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47058/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47059 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47059/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47063 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47063/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-60147 page",
"url": "https://www.suse.com/security/cve/CVE-2026-60147/"
}
],
"title": "java-1_8_0-openjdk-1.8.0.502-1.1 on GA media",
"tracking": {
"current_release_date": "2026-08-05T00:00:00Z",
"generator": {
"date": "2026-08-05T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:11453-1",
"initial_release_date": "2026-08-05T00:00:00Z",
"revision_history": [
{
"date": "2026-08-05T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"product_id": "java-1_8_0-openjdk-1.8.0.502-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"product": {
"name": "java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"product_id": "java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"product_id": "java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"product_id": "java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"product_id": "java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"product_id": "java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"product_id": "java-1_8_0-openjdk-1.8.0.502-1.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"product": {
"name": "java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"product_id": "java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"product_id": "java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"product_id": "java-1_8_0-openjdk-1.8.0.502-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"product": {
"name": "java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"product_id": "java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64",
"product_id": "java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.502-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.502-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.502-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64"
},
"product_reference": "java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x"
},
"product_reference": "java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64"
},
"product_reference": "java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x"
},
"product_reference": "java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64"
},
"product_reference": "java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le"
},
"product_reference": "java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x"
},
"product_reference": "java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-41254",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-41254"
}
],
"notes": [
{
"category": "general",
"text": "Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-41254",
"url": "https://www.suse.com/security/cve/CVE-2026-41254"
},
{
"category": "external",
"summary": "SUSE Bug 1264994 for CVE-2026-41254",
"url": "https://bugzilla.suse.com/1264994"
},
{
"category": "external",
"summary": "SUSE Bug 1272458 for CVE-2026-41254",
"url": "https://bugzilla.suse.com/1272458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.9,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-41254"
},
{
"cve": "CVE-2026-46968",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46968"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46968",
"url": "https://www.suse.com/security/cve/CVE-2026-46968"
},
{
"category": "external",
"summary": "SUSE Bug 1272224 for CVE-2026-46968",
"url": "https://bugzilla.suse.com/1272224"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46968"
},
{
"cve": "CVE-2026-47010",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47010"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47010",
"url": "https://www.suse.com/security/cve/CVE-2026-47010"
},
{
"category": "external",
"summary": "SUSE Bug 1272225 for CVE-2026-47010",
"url": "https://bugzilla.suse.com/1272225"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-05T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-47010"
},
{
"cve": "CVE-2026-47021",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47021"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47021",
"url": "https://www.suse.com/security/cve/CVE-2026-47021"
},
{
"category": "external",
"summary": "SUSE Bug 1272227 for CVE-2026-47021",
"url": "https://bugzilla.suse.com/1272227"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-47021"
},
{
"cve": "CVE-2026-47027",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47027"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47027",
"url": "https://www.suse.com/security/cve/CVE-2026-47027"
},
{
"category": "external",
"summary": "SUSE Bug 1272228 for CVE-2026-47027",
"url": "https://bugzilla.suse.com/1272228"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-47027"
},
{
"cve": "CVE-2026-47057",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47057"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47057",
"url": "https://www.suse.com/security/cve/CVE-2026-47057"
},
{
"category": "external",
"summary": "SUSE Bug 1272233 for CVE-2026-47057",
"url": "https://bugzilla.suse.com/1272233"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-05T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-47057"
},
{
"cve": "CVE-2026-47058",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47058"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47058",
"url": "https://www.suse.com/security/cve/CVE-2026-47058"
},
{
"category": "external",
"summary": "SUSE Bug 1272234 for CVE-2026-47058",
"url": "https://bugzilla.suse.com/1272234"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-05T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-47058"
},
{
"cve": "CVE-2026-47059",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47059"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47059",
"url": "https://www.suse.com/security/cve/CVE-2026-47059"
},
{
"category": "external",
"summary": "SUSE Bug 1272235 for CVE-2026-47059",
"url": "https://bugzilla.suse.com/1272235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-05T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-47059"
},
{
"cve": "CVE-2026-47063",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47063"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47063",
"url": "https://www.suse.com/security/cve/CVE-2026-47063"
},
{
"category": "external",
"summary": "SUSE Bug 1272236 for CVE-2026-47063",
"url": "https://bugzilla.suse.com/1272236"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-05T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-47063"
},
{
"cve": "CVE-2026-60147",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-60147"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-60147",
"url": "https://www.suse.com/security/cve/CVE-2026-60147"
},
{
"category": "external",
"summary": "SUSE Bug 1272237 for CVE-2026-60147",
"url": "https://bugzilla.suse.com/1272237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-accessibility-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-demo-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-devel-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-headless-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-javadoc-1.8.0.502-1.1.x86_64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.aarch64",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.ppc64le",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.s390x",
"openSUSE Tumbleweed:java-1_8_0-openjdk-src-1.8.0.502-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-05T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-60147"
}
]
}
OPENSUSE-SU-2026:21470-1
Vulnerability from csaf_opensuse - Published: 2026-07-28 20:35 - Updated: 2026-07-28 20:35Summary
Security update for java-21-openjdk
Severity
Important
Notes
Title of the patch: Security update for java-21-openjdk
Description of the patch: This update for java-21-openjdk fixes the following issues:
- CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994).
- CVE-2026-46917: partial denial of service via TLS (bsc#1272223).
- CVE-2026-46968: unauthorized creation, deletion or modification access to critical data (bsc#1272224).
- CVE-2026-47010: unauthorized update, insert or delete access (bsc#1272225).
- CVE-2026-47021: partial denial of service via multiple network protocols (bsc#1272227).
- CVE-2026-47027: partial denial of service via multiple network protocols (bsc#1272228).
- CVE-2026-47059: partial denial of service via multiple network protocols (bsc#1272235).
- CVE-2026-47063: unauthorized creation, deletion or modification access to critical data (bsc#1272236).
- CVE-2026-60147: unauthorized update, insert or delete access (bsc#1272237).
Changes for java-21-openjdk:
- Update to upstream tag jdk-21.0.12+8 (July 2026 CPU):
+ JDK-7184899: Test sun/java2d/X11SurfaceData/
/SharedMemoryPixmapsTest/SharedMemoryPixmapsTest.sh fail
+ JDK-8015444: java/awt/Focus/KeyStrokeTest.java sometimes fails
+ JDK-8064922: [macos] Test javax/swing/JTabbedPane/4624207/
/bug4624207.java fails
+ JDK-8068293: [TEST_BUG] Test closed/com/sun/java/swing/plaf/
/motif/InternalFrame/4150591/bug4150591.java fails with
GTKLookAndFeel
+ JDK-8068310: [TEST_BUG] Test javax/swing/JColorChooser/
/Test4234761.java fails with GTKL&F
+ JDK-8068378: [TEST_BUG]The java/awt/Modal/PrintDialogsTest/
/PrintDialogsTest.java instruction need to update
+ JDK-8129418: JShell: better highlighting of errors in imports
on demand
+ JDK-8144124: [macosx] The tabs can't be aligned when we
pressing the key of 'R','B','L','C' or 'T'.
+ JDK-8183336: Better cleanup for jdk/test/java/lang/module/
/customfs/ModulesInCustomFileSystem.java
+ JDK-8203004: UnixMultiResolutionSplashTest.java fails on
Ubuntu16.04
+ JDK-8212084: G1: Implement UseGCOverheadLimit
+ JDK-8213530: Test java/awt/Modal/ToFront/
/DialogToFrontModeless1Test.java fails on Linux
+ JDK-8221451: PIT: sun/java2d/X11SurfaceData/
/SharedMemoryPixmapsTest/SharedMemoryPixmapsTest.sh fails
+ JDK-8225787: java/awt/Window/GetScreenLocation/
/GetScreenLocationTest.java fails on Ubuntu
+ JDK-8255463: java/nio/channels/spi/SelectorProvider/
/inheritedChannel/InheritedChannelTest.java failed with
ThreadTimeoutException
+ JDK-8274082: Wrong test name in jtreg run tag for
java/awt/print/PrinterJob/SwingUIText.java
+ JDK-8277444: Data race between
JvmtiClassFileReconstituter::copy_bytecodes and class linking
+ JDK-8278102: containers/docker/TestJcmd.java failed with
"RuntimeException: Could not find specified process"
+ JDK-8286258: [Accessibility,macOS,VoiceOver] VoiceOver reads
the spinner value wrong and sometime partially
+ JDK-8286865: vmTestbase/vm/mlvm/meth/stress/jni/nativeAndMH/
/Test.java fails with Out of space in CodeCache
+ JDK-8293484: AArch64:
TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails on CPU
with SHA512 feature support
+ JDK-8297191: [macos] Printing a page range with starting
page > 1 results in missing pages
+ JDK-8298783: java/lang/ref/FinalizerHistogramTest.java failed
with "RuntimeException: MyObject is not found in test output"
+ JDK-8298823: [macos] java/awt/Mouse/EnterExitEvents/
/DragWindowTest.java continues to fail with "No MouseReleased
event on label!"
+ JDK-8299304: Test "java/awt/print/PrinterJob/
/PageDialogTest.java" fails on macOS 13 x64 because the Page
Dialog blocks the Toolkit
+ JDK-8310645: CancelledResponse.java does not use HTTP/2 when
testing the HttpClient
+ JDK-8311538: CDS InternSharedString test fails on huge pages
host - cannot find shared string
+ JDK-8315588: JShell does not accept underscore from JEP 443
even with --enable-preview
+ JDK-8318365: Test runtime/cds/appcds/sharedStrings/
/InternSharedString.java fails after JDK-8311538
+ JDK-8318662: Refactor some jdk/java/net/httpclient/http2 tests
to JUnit
+ JDK-8319326: GC: Make TestParallelRefProc use
createTestJavaProcessBuilder
+ JDK-8319540: GC: Make TestSelectDefaultGC use
+ JDK-8320677: Printer tests use invalid '@run main/manual=yesno
+ JDK-8321303: Intermittent open/test/jdk/java/awt/
/KeyboardFocusmanager/ConsumeNextMnemonicKeyTypedTest/
/ConsumeNextMnemonicKeyTypedTest.java failure on Linux
+ JDK-8321687: Test vmTestbase/nsk/jvmti/scenarios/contention/
/TC03/tc03t002/TestDescription.java failed:
JVMTI_ERROR_THREAD_NOT_ALIVE
+ JDK-8322532: JShell : Unnamed variable issue
+ JDK-8323089: networkaddress.cache.ttl is not a system property
+ JDK-8323545: java/awt/GraphicsDevice/CheckDisplayModes.java
fails with "exit code: 133"
+ JDK-8323672: Suppress unwanted autoconf added flags in CC and
CXX
+ JDK-8323792: ThreadSnapshot::initialize can cause assert in
Thread::check_for_dangling_thread_pointer (possibility of
dangling Thread pointer)
+ JDK-8326458: Menu mnemonics don't toggle in Windows LAF when
F10 is pressed
+ JDK-8328300: Convert PrintDialogsTest.java from Applet to main
program
+ JDK-8329273: C2 SuperWord: Some basic MemorySegment IR tests
+ JDK-8330704: Clean up non-standard use of /** comments in some
langtools tests
+ JDK-8330806: test/hotspot/jtreg/compiler/c1/
/TestLargeMonitorOffset.java fails on ARM32
+ JDK-8332495: java/util/logging/LoggingDeadlock2.java fails
with AssertionError: Some tests failed
+ JDK-8333729: C2 SuperWord: remove some @requires usages in
test/hotspot/jtreg/compiler/loopopts/superword
+ JDK-8334928: Test sun/security/ssl/SSLSocketImpl/
/ReuseAddr.java failed: java.net.BindException: Address
already in use
+ JDK-8338103: Stabilize and open source a Swing OGL
ButtonResizeTest
+ JDK-8338554: Fix inconsistencies in javadoc/doclet/
/testLinkOption/TestRedirectLinks.java
+ JDK-8338883: Show warning when CreateCoredumpOnCrash set, but
core dump will not happen
+ JDK-8339233: Test javax/swing/JButton/
/SwingButtonResizeTestWithOpenGL.java#id failed: Button
renderings are different after window resize
+ JDK-8339638: Update vmTestbase/nsk/jvmti/*Field*Watch tests to
use virtual thread factory
+ JDK-8339879: Open some dialog awt tests
+ JDK-8339975: Open some dialog awt tests 2
+ JDK-8340140: Open some dialog awt tests 3
+ JDK-8340336: Open some checkbox awt tests
+ JDK-8340494: Open some dialog awt tests 4
+ JDK-8340818: Add a new jtreg test root to test the generated
documentation
+ JDK-8340851: Open some TextArea awt tests
+ JDK-8340987: Open some TextArea awt tests 1
+ JDK-8341055: Open some TextArea awt tests 2
+ JDK-8341292: Open some TextArea awt tests 3
+ JDK-8341376: Open some TextArea awt tests 4
+ JDK-8341427: JFR: Adjust object sampler span handling
+ JDK-8341436: containers/docker/TestJcmdWithSideCar.java takes
needlessly long to run
+ JDK-8341833: incomplete snippet from loaded files from command
line is ignored
+ JDK-8342401: [TESTBUG] javax/swing/JSpinner/8223788/
/JSpinnerButtonFocusTest.java test fails in ubuntu 22.04 on
SBR Hosts
+ JDK-8342836: Automatically determine that a test in the docs
test root is requested
+ JDK-8344128: Regression: make help broken after JDK-8340818
+ JDK-8345618: javax/swing/text/Caret/8163124/
/CaretFloatingPointAPITest.java leaves Caret is not complete
+ JDK-8346154: [XWayland] Some tests fail intermittently in the
CI, but not locally
+ JDK-8346683: Problem list automated tests that fail on macOS15
+ JDK-8347836: Disabled PopupMenu shows shortcuts on Mac
+ JDK-8349084: Update vectors used in several PQC benchmarks
+ JDK-8349192: jvmti/scenarios/contention/TC05/tc05t001 fails:
ERROR: tc05t001.cpp, 281: (waitedThreadCpuTime -
waitThreadCpuTime) < (EXPECTED_ACCURACY * 1000000)
+ JDK-8349533: Refactor validator tests shell files to java
+ JDK-8349699: XSL transform fails with certain UTF-8 characters
on 1024 byte boundaries
+ JDK-8349959: Test CR6740048.java passes unexpectedly missing
CR6740048.xsd
+ JDK-8350749: Upgrade JLine to 3.29.0
+ JDK-8350808: Small typos in JShell method SnippetEvent
.toString()
+ JDK-8352020: [CompileFramework] enable compilation for
VectorAPI
+ JDK-8352147: G1: TestEagerReclaimHumongousRegionsClearMarkBits
test takes very long
+ JDK-8352149: Test java/awt/Frame/MultiScreenTest.java fails:
Window list is empty
+ JDK-8352431: java/net/httpclient/EmptyAuthenticate.java uses
"localhost"
+ JDK-8352685: Opensource JInternalFrame tests - series2
+ JDK-8352733: Improve RotFontBoundsTest test
+ JDK-8352877: Opensource Several Font related tests - Batch 1
+ JDK-8353124: java/lang/Thread/virtual/stress/Skynet.java#Z
times out on macosx-x64-debug
+ JDK-8353488: Open some JComboBox bugs 3
+ JDK-8353552: Opensource Several Font related tests - Batch 3
+ JDK-8354163: Open source Swing tests Batch 1
+ JDK-8354695: Open source several swing tests batch7
+ JDK-8354900: javax/swing/AbstractButton/bug4133768.java
failing on macosx-aarch64
+ JDK-8354910: Output by java.io.IO or System.console()
corrupted for some non-ASCII characters
+ JDK-8355048: ProblemList TestGlyphVectorLayout.java on all
platforms
+ JDK-8355179: Reinstate javax/swing/JScrollBar/4865918/
/bug4865918.java headful and macos run
+ JDK-8355332: Fix failing semi-manual test EDT issue
+ JDK-8355371: NegativeArraySizeException in print methods in IO
or System.console() in JShell
+ JDK-8355443: [java.io] Use @requires tag instead of exiting
based on File.separatorChar value
+ JDK-8356695: java/lang/StringBuilder/HugeCapacity.java failing
with OOME
+ JDK-8356868: Not all cgroup parameters are made available
+ JDK-8357062: Update Public Suffix List to 823beb1
+ JDK-8357082: Stabilize and add debug logs to CopyAreaOOB.java
+ JDK-8357086: os::xxx functions returning memory size should
return size_t
+ JDK-8357280: (bf) Remove @requires tags from java/nio/Buffer/
/LimitDirectMemory[NegativeTest].java
+ JDK-8357390: java/awt/Toolkit/ScreenInsetsTest/
/ScreenInsetsTest.java Test failing on Ubuntu 24.04 Vm Hosts
used by Oracle's internal CI system
+ JDK-8358058: sun/java2d/OpenGL/DrawImageBg.java Test fails
intermittently
+ JDK-8359364: java/net/URL/EarlyOrDelayedParsing test fails
+ JDK-8359472: JVM crashes when attaching a dynamic agent before
JVMTI_PHASE_LIVE
+ JDK-8359978: Test javax/net/ssl/SSLSocket/Tls13PacketSize.java
failed again with java.net.SocketException: An established
connection was aborted by the software in your host machine
+ JDK-8360160: ubuntu-22-04 machine is failing client tests
+ JDK-8360395: sun/security/tools/keytool/i18n.java user country
is current user location instead of the language
+ JDK-8360562: sun/security/tools/keytool/i18n.java add an
ability to add comment for failures
+ JDK-8360702: runtime/Thread/AsyncExceptionTest.java timed out
+ JDK-8360882: Tests throw SkippedException when they should
fail
+ JDK-8361106: [TEST] com/sun/net/httpserver/Test9.java fails
with java.nio.file.FileSystemException
+ JDK-8361606: ConsumeNextMnemonicKeyTypedTest.java fails on
Windows: character typed with VK_A: a
+ JDK-8361894: sun/security/krb5/config/native/
/TestDynamicStore.java ensure that the test is run with sudo
+ JDK-8362428: Update IANA Language Subtag Registry to Version
2025-08-25
+ JDK-8363943: ARM32: Represent Registers as values
+ JDK-8363949: Incorrect jtreg header in
MonitorWithDeadObjectTest.java
+ JDK-8364190: JFR: RemoteRecordingStream withers don't work
+ JDK-8364315: Remove unused xml files from test/jaxp/javax/xml/
/jaxp/functional/javax/xml/transform/xmlfiles
+ JDK-8364756: JFR: Improve slow tests
+ JDK-8364927: Add @requires annotation to
TestReclaimStringsLeaksMemory.java
+ JDK-8365379: SU3.applyInsets may produce wrong results
+ JDK-8365398: TEST_BUG: java/rmi/transport/checkLeaseInfoLeak/
/CheckLeaseLeak.java failing intermittently
+ JDK-8365423: [macos26] java/awt/MenuBar/8007006/
/bug8007006.java fails on macOS 26
+ JDK-8365424: [macos26] java/awt/Frame/DisposeTest.java fails
on macOS 26
+ JDK-8365623: test/jdk/sun/security/pkcs11/tls/ tests skipped
without skip exception
+ JDK-8365625: Can't change accelerator colors in Windows L&F
+ JDK-8365776: Convert JShell tests to use JUnit instead of
TestNG
+ JDK-8365861: test/jdk/sun/security/pkcs11/Provider/ tests
skipped without SkippedException
+ JDK-8365863: /test/jdk/sun/security/pkcs11/Cipher tests skip
without SkippedException
+ JDK-8365893: test/jdk/java/lang/Thread/virtual/JfrEvents.java
failing intermittently
+ JDK-8366031: Mark com/sun/nio/sctp/SctpChannel/
/CloseDescriptors.java as intermittent
+ JDK-8366182: Some PKCS11Tests are being skipped when they
shouldn't
+ JDK-8366369: Add @requires linux for GTK L&F tests
+ JDK-8366852: java/awt/Choice/ChoiceMouseWheelTest/
/ChoiceMouseWheelTest.java test is failing
+ JDK-8367096: jdk/open/test/jdk/sun/security/pkcs11/ rsa, ec,
config, secmod and sslecc tests are skipping but showing as
pass
+ JDK-8367485: os::physical_memory is broken in 32-bit JVMs when
running on 64-bit OSes
+ JDK-8367784: java/awt/Focus/InitialFocusTest/
/InitialFocusTest1.java failed with Wrong focus owner
+ JDK-8368029: Several tests in httpserver/simpleserver should
throw SkipException
+ JDK-8368041: Enhance TLS certificate handling
+ JDK-8368181: ProblemList java/awt/Dialog/ModalExcludedTest/
/ModalExcludedTest.java
+ JDK-8368335: Refactor the rest of Locale TestNG based tests to
JUnit
+ JDK-8368498: Use JUnit instead of TestNG for jdk_text tests
+ JDK-8368524: Tests are skipped and shown as passed in
test/jdk/sun/security/pkcs11/Cipher/KeyWrap
+ JDK-8368551: Core dump warning may be confusing
+ JDK-8368625: com/sun/net/httpserver/
/ServerStopTerminationTest.java fails intermittently
+ JDK-8368670: Deadlock in JFR on event register + class load
+ JDK-8368754: runtime/cds/appcds/SignedJar.java log regex is
too strict
+ JDK-8368866: compiler/codecache/stress/
/UnexpectedDeoptimizationTest.java intermittent timed out
+ JDK-8368885: NMT CommandLine tests can check for error better
+ JDK-8368892: Make JEditorPane/TestBrowserBGColor.java headless
+ JDK-8369251: Opensource few tests
+ JDK-8369335: Two sun/java2d/OpenGL tests fail on Windows
after JDK-8358058
+ JDK-8369516: Delete duplicate imaging test
+ JDK-8369561: sun/java2d/OpenGL/DrawBitmaskImage.java#id0:
Incorrect color for first pixel (actual=ff000000)
+ JDK-8369683: Exclude runtime/Monitor/
/MonitorWithDeadObjectTest.java#DumpThreadsBeforeDetach on
Alpine Linux debug
+ JDK-8369851: Remove darcy author tags from langtools tests
+ JDK-8369950: TLS connection to IPv6 address fails with BCJSSE
due to IllegalArgumentException
+ JDK-8370378: Some compiler tests inadvertently exclude
particular platforms
+ JDK-8370489: Some compiler tests miss the @key randomness
+ JDK-8370492: [Linux] Update cpu shares to cpu.weight mapping
function
+ JDK-8370511: test/jdk/javax/swing/JSlider/bug4382876.java does
not release previously pressed keys
+ JDK-8370732: Use WhiteBox.getWhiteBox().fullGC() to provoking
gc for nsk/jvmti tests
+ JDK-8370905: Update vm.defmeth tests to use virtual threads
+ JDK-8370942: test/jdk/java/security/Provider/NewInstance.java
and /test/jdk/java/security/cert/CertStore/NoLDAP.java may
skip without notifying
+ JDK-8371262: sun/security/pkcs11/Cipher/KeyWrap tests may
silently skip
+ JDK-8371349: Update NSS library to 3.117
+ JDK-8371364: Refactor javax/swing/JFileChooser/
/FileSizeCheck.java to use Util.findComponent()
+ JDK-8371365: Update javax/swing/JFileChooser/bug4759934.java
to use Util.findComponent()
+ JDK-8371366: java/net/httpclient/whitebox/
/RawChannelTestDriver.java fails intermittently in jtreg
timeout
+ JDK-8371383: Test sun/security/tools/jarsigner/
/DefaultOptions.java failed due to
CertificateNotYetValidException
+ JDK-8371503: RETAIN_IMAGE_AFTER_TEST do not work for some
tests
+ JDK-8371895: Lower GCTimeLimit in TestUseGCOverheadLimit.java
+ JDK-8371967: Add Visual Studio 2026 to build toolchain for
Windows
+ JDK-8372120: Add missing sound keyword to MIDI tests
+ JDK-8372272: Hotspot shared lib loading - add load attempts to
Events::log
+ JDK-8372351: Add 2 WISeKey roots
+ JDK-8372609: Bug4944439 does not enforce locale correctly
+ JDK-8372661: Add a null-safe static factory method to
"jdk.test.lib.net.SimpleSSLContext"
+ JDK-8373101: JdkClient and JdkServer test classes ignore
namedGroups field
+ JDK-8373239: Test java/awt/print/PrinterJob/PageRanges.java
fails with incorrect selection of printed pages
+ JDK-8373275: Improve DTLS handshaking
+ JDK-8373537: Migrate "test/jdk/com/sun/net/httpserver/" to
null-safe "SimpleSSLContext" methods
+ JDK-8373593: Support latest VS2026 MSC_VER in
abstract_vm_version.cpp
+ JDK-8373623: Refactor Serialization tests for Records to JUnit
+ JDK-8373632: Some sound tests failing in CI due to lack of
sound key
+ JDK-8373650: Test "javax/swing/JMenuItem/6458123/
/ManualBug6458123.java" fails because the check icons are not
aligned properly as expected
+ JDK-8373690: Unexpected Keystore message using
jdk.crypto.disabledAlgorithms
+ JDK-8373704: Improve "SocketException: Protocol family
unavailable" message
+ JDK-8373716: Refactor further java/util tests from TestNG to
+ JDK-8373793: TestDynamicStore.java '/manual' disables use of
'/timeout'
+ JDK-8373796: Refactor java/net/httpclient/
/ThrowingPublishers*.java tests to use JUnit5
+ JDK-8373807: test/jdk/java/net/httpclient/websocket/
/DummyWebSocketServer.java getURI() uses "localhost"
+ JDK-8373832: Test java/lang/invoke/TestVHInvokerCaching.java
tests nothing
+ JDK-8373847: Test javax/swing/JMenuItem/MenuItemTest/
/bug6197830.java failed because The test case automatically
fails when clicking any items in the "Nothing" menu in all
four windows (Left-to-right)-Menu Item Test and
(Right-to-left)-Menu Item Test
+ JDK-8373866: Refactor java/net/httpclient/
/ThrowingSubscribers*.java tests to use JUnit5
+ JDK-8373869: Refactor java/net/httpclient/
/ThrowingPushPromises*.java tests to use JUnit5
+ JDK-8373928: 4 Dangling pointer defect groups in java.c
+ JDK-8373931: Test javax/sound/sampled/Clip/
/AutoCloseTimeCheck.java timed out
+ JDK-8374058: Enhance JPEG handling
+ JDK-8374304: MultiResolutionSplashTest.java fails in CI:
"Image with wrong resolution is used for splash screen!"
+ JDK-8374322: TestMemoryWithSubgroups.java fails Permission
denied
+ JDK-8374434: Several JShell tests report JUnit discovery
warnings
+ JDK-8374506: Incorrect positioning of arrow icon in parent
JMenu in Windows L&F
+ JDK-8374711: Hotspot runtime/CommandLine/OptionsValidation/
/TestOptionsWithRanges fails without printing the option name
+ JDK-8374769: PPC: MASM::pop_cont_fastpath() should reset
_cont_fastpath if SP == _cont_fastpath
+ JDK-8374888: Implement internal test cache to help
UserIterCount test performance
+ JDK-8374998: Failing os::write - remove bad file
+ JDK-8375065: Update LCMS to 2.18
+ JDK-8375080: The tools/jpackage/windows/Win8365790Test.java
may fail with ClassNotFoundException: jtreg.SkippedException
+ JDK-8375231: Refactor util/ServiceLoader tests to use JUnit
+ JDK-8375232: Refactor util/StringJoiner tests to use JUnit
+ JDK-8375233: Refactor util/Vector tests to use JUnit
+ JDK-8375742: Test java/lang/invoke/MethodHandleProxies/
/Driver.java does not run Unnamed.java
+ JDK-8376031: HttpsURLConnection.getServerCertificates() throws
"java.lang.IllegalStateException: connection not yet open" for
the HEAD method
+ JDK-8376151: Test javax/swing/JFileChooser/4966171/
/bug4966171.java is failing with OOME
+ JDK-8376152: Test javax/sound/sampled/Clip/bug5070081.java
timed out then completed
+ JDK-8376233: Clean up code in Desktop native peer
+ JDK-8376889: Enhance JfrRecorder::on_create_vm_3() assert
output
+ JDK-8377158: Enhance XBM image support
+ JDK-8377167: javax/imageio/ReadAbortTest.java throw NPE when
x11 unavailable
+ JDK-8377347: jdk/jfr/event/gc/detailed/
/TestZAllocationStallEvent.java intermittent OOME
+ JDK-8377498: Improve HttpServer handling
+ JDK-8377602: Create automated test for PageRange
+ JDK-8377727: Ghost caret and focus appear in non-editable text
fields
+ JDK-8377833: Enhance Jar file processing
+ JDK-8377910: Minor cleanup of java/io/FileDescriptor/
/Sharing.java
+ JDK-8377944: LowMemoryTest2.java#id1 intermittent fails OOME:
Metaspace
+ JDK-8378113: Add sun/java2d/OpenGL/ScaleParamsOOB.java to the
ProblemList.txt file
+ JDK-8378201: [OGL] glXMakeContextCurrent() drops the buffers
of the unbound drawable
+ JDK-8378353: [PPC64] StringCoding.countPositives causes errors
when the length is not a proper 32 bit int
+ JDK-8378417: Printing All pages results in NPE for 1.1
PrintJob
+ JDK-8378561: Mark gc/shenandoah/compiler/
/TestLinkToNativeRBP.java as /native
+ JDK-8378687: Improve delegation of HttpURLConnection
+ JDK-8378775: Bump update version for OpenJDK: jdk-21.0.12
+ JDK-8378802: [21u] backport changes to TKit.java by
JDK-8352419
+ JDK-8378810: Enable missing FFM test via jtreg requires for
RISC-V
+ JDK-8378878: Refactor java/nio/channels/
/AsynchronousSocketChannel test to use JUnit
+ JDK-8379464: Enable missing stack walking test via jtreg
requires for RISC-V
+ JDK-8380011: Path-to-gcroots search should not trigger stack
overflows
+ JDK-8380222: Refactor test/jdk/java/lang/Character TestNG
tests to JUnit
+ JDK-8380316: Test runtime/os/AvailableProcessors.java fails
Invalid argument
+ JDK-8380428: ProblemList containers/docker/
/TestJcmdWithSideCar.java on linux-all
+ JDK-8380474: Crash SEGV in ThreadIdTable::lazy_initialize
after JDK-8323792
+ JDK-8380565: PPC64: deoptimization stub should save vector
registers
+ JDK-8380672: Improve certification checking
+ JDK-8380947: Add pull request template
+ JDK-8381039: Enhance AWT ImagingLib
+ JDK-8381049: Enhance Jar handling
+ JDK-8381205: GHA: Upgrade Node.js 20 to 24
+ JDK-8381315: compiler/vectorapi/TestVectorReallocation.java
fails with -XX:UseAVX=1 after JDK-8380565
+ JDK-8381519: Enhance Der Value Handling
+ JDK-8381796: Enhance Certificate parsing
+ JDK-8382018: test/jdk/java/nio/file/spi/
/SetDefaultProvider.java leaves a directory in /tmp
+ JDK-8382242: JFR: Metadata reconstruction invalidates
ConstantMap for java.lang.String
+ JDK-8382419: Add missed @key randomness after JDK-8370489
+ JDK-8383175: (tz) Update Timezone Data to 2026b
+ JDK-8383185: [21u] Backport of JDK-8382925 causes test failure
in SetDefaultProvider
+ JDK-8383354: Update LCMS to 2.19.1
+ JDK-8383473: Follow on from tzdata2026b time change to include
temporary hack BC time change
+ JDK-8383601: RISC-V:
ShenandoahBarrierSetAssembler::load_reference_barrier calls
"weak" on "phantom" path
+ JDK-8383630: Fix iteration in tests doing class redefinition
+ JDK-8384158: GHA: Downgrade Windows GHA runners to
windows-2022 temporarily
+ JDK-8384486: NTLM tests fail on Windows 11 and Windows Server
2025
+ JDK-8384495: Update Libpng to 1.6.58
+ JDK-8384540: [25u, 21u, 17u] Update GHA JDKs after Apr/26
updates
+ JDK-8384815: SelectOneKeyOutOfMany and PreferredKey fail after
expired test certificate
+ JDK-8384902: Update GIFlib to 6.1.3
+ JDK-8385390: Update FreeType to 2.14.3
+ JDK-8385490: Update HarfBuzz to 14.2.0
+ JDK-8386551: Windows build broken because of MSys2/Make update
Patchnames: openSUSE-Leap-16.0-1385
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
5.3 (Medium)
Affected products
Recommended
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
7.5 (High)
Affected products
Recommended
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
39 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-21-openjdk",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-21-openjdk fixes the following issues:\n\n- CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994).\n- CVE-2026-46917: partial denial of service via TLS (bsc#1272223).\n- CVE-2026-46968: unauthorized creation, deletion or modification access to critical data (bsc#1272224).\n- CVE-2026-47010: unauthorized update, insert or delete access (bsc#1272225).\n- CVE-2026-47021: partial denial of service via multiple network protocols (bsc#1272227).\n- CVE-2026-47027: partial denial of service via multiple network protocols (bsc#1272228).\n- CVE-2026-47059: partial denial of service via multiple network protocols (bsc#1272235).\n- CVE-2026-47063: unauthorized creation, deletion or modification access to critical data (bsc#1272236).\n- CVE-2026-60147: unauthorized update, insert or delete access (bsc#1272237).\n\nChanges for java-21-openjdk:\n\n- Update to upstream tag jdk-21.0.12+8 (July 2026 CPU):\n\n + JDK-7184899: Test sun/java2d/X11SurfaceData/\n /SharedMemoryPixmapsTest/SharedMemoryPixmapsTest.sh fail\n + JDK-8015444: java/awt/Focus/KeyStrokeTest.java sometimes fails\n + JDK-8064922: [macos] Test javax/swing/JTabbedPane/4624207/\n /bug4624207.java fails\n + JDK-8068293: [TEST_BUG] Test closed/com/sun/java/swing/plaf/\n /motif/InternalFrame/4150591/bug4150591.java fails with\n GTKLookAndFeel\n + JDK-8068310: [TEST_BUG] Test javax/swing/JColorChooser/\n /Test4234761.java fails with GTKL\u0026F\n + JDK-8068378: [TEST_BUG]The java/awt/Modal/PrintDialogsTest/\n /PrintDialogsTest.java instruction need to update\n + JDK-8129418: JShell: better highlighting of errors in imports\n on demand\n + JDK-8144124: [macosx] The tabs can\u0027t be aligned when we\n pressing the key of \u0027R\u0027,\u0027B\u0027,\u0027L\u0027,\u0027C\u0027 or \u0027T\u0027.\n + JDK-8183336: Better cleanup for jdk/test/java/lang/module/\n /customfs/ModulesInCustomFileSystem.java\n + JDK-8203004: UnixMultiResolutionSplashTest.java fails on\n Ubuntu16.04\n + JDK-8212084: G1: Implement UseGCOverheadLimit\n + JDK-8213530: Test java/awt/Modal/ToFront/\n /DialogToFrontModeless1Test.java fails on Linux\n + JDK-8221451: PIT: sun/java2d/X11SurfaceData/\n /SharedMemoryPixmapsTest/SharedMemoryPixmapsTest.sh fails\n + JDK-8225787: java/awt/Window/GetScreenLocation/\n /GetScreenLocationTest.java fails on Ubuntu\n + JDK-8255463: java/nio/channels/spi/SelectorProvider/\n /inheritedChannel/InheritedChannelTest.java failed with\n ThreadTimeoutException\n + JDK-8274082: Wrong test name in jtreg run tag for\n java/awt/print/PrinterJob/SwingUIText.java\n + JDK-8277444: Data race between\n JvmtiClassFileReconstituter::copy_bytecodes and class linking\n + JDK-8278102: containers/docker/TestJcmd.java failed with\n \"RuntimeException: Could not find specified process\"\n + JDK-8286258: [Accessibility,macOS,VoiceOver] VoiceOver reads\n the spinner value wrong and sometime partially\n + JDK-8286865: vmTestbase/vm/mlvm/meth/stress/jni/nativeAndMH/\n /Test.java fails with Out of space in CodeCache\n + JDK-8293484: AArch64:\n TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails on CPU\n with SHA512 feature support\n + JDK-8297191: [macos] Printing a page range with starting\n page \u003e 1 results in missing pages\n + JDK-8298783: java/lang/ref/FinalizerHistogramTest.java failed\n with \"RuntimeException: MyObject is not found in test output\"\n + JDK-8298823: [macos] java/awt/Mouse/EnterExitEvents/\n /DragWindowTest.java continues to fail with \"No MouseReleased\n event on label!\"\n + JDK-8299304: Test \"java/awt/print/PrinterJob/\n /PageDialogTest.java\" fails on macOS 13 x64 because the Page\n Dialog blocks the Toolkit\n + JDK-8310645: CancelledResponse.java does not use HTTP/2 when\n testing the HttpClient\n + JDK-8311538: CDS InternSharedString test fails on huge pages\n host - cannot find shared string\n + JDK-8315588: JShell does not accept underscore from JEP 443\n even with --enable-preview\n + JDK-8318365: Test runtime/cds/appcds/sharedStrings/\n /InternSharedString.java fails after JDK-8311538\n + JDK-8318662: Refactor some jdk/java/net/httpclient/http2 tests\n to JUnit\n + JDK-8319326: GC: Make TestParallelRefProc use\n createTestJavaProcessBuilder\n + JDK-8319540: GC: Make TestSelectDefaultGC use\n + JDK-8320677: Printer tests use invalid \u0027@run main/manual=yesno\n + JDK-8321303: Intermittent open/test/jdk/java/awt/\n /KeyboardFocusmanager/ConsumeNextMnemonicKeyTypedTest/\n /ConsumeNextMnemonicKeyTypedTest.java failure on Linux\n + JDK-8321687: Test vmTestbase/nsk/jvmti/scenarios/contention/\n /TC03/tc03t002/TestDescription.java failed:\n JVMTI_ERROR_THREAD_NOT_ALIVE\n + JDK-8322532: JShell : Unnamed variable issue\n + JDK-8323089: networkaddress.cache.ttl is not a system property\n + JDK-8323545: java/awt/GraphicsDevice/CheckDisplayModes.java\n fails with \"exit code: 133\"\n + JDK-8323672: Suppress unwanted autoconf added flags in CC and\n CXX\n + JDK-8323792: ThreadSnapshot::initialize can cause assert in\n Thread::check_for_dangling_thread_pointer (possibility of\n dangling Thread pointer)\n + JDK-8326458: Menu mnemonics don\u0027t toggle in Windows LAF when\n F10 is pressed\n + JDK-8328300: Convert PrintDialogsTest.java from Applet to main\n program\n + JDK-8329273: C2 SuperWord: Some basic MemorySegment IR tests\n + JDK-8330704: Clean up non-standard use of /** comments in some\n langtools tests\n + JDK-8330806: test/hotspot/jtreg/compiler/c1/\n /TestLargeMonitorOffset.java fails on ARM32\n + JDK-8332495: java/util/logging/LoggingDeadlock2.java fails\n with AssertionError: Some tests failed\n + JDK-8333729: C2 SuperWord: remove some @requires usages in\n test/hotspot/jtreg/compiler/loopopts/superword\n + JDK-8334928: Test sun/security/ssl/SSLSocketImpl/\n /ReuseAddr.java failed: java.net.BindException: Address\n already in use\n + JDK-8338103: Stabilize and open source a Swing OGL\n ButtonResizeTest\n + JDK-8338554: Fix inconsistencies in javadoc/doclet/\n /testLinkOption/TestRedirectLinks.java\n + JDK-8338883: Show warning when CreateCoredumpOnCrash set, but\n core dump will not happen\n + JDK-8339233: Test javax/swing/JButton/\n /SwingButtonResizeTestWithOpenGL.java#id failed: Button\n renderings are different after window resize\n + JDK-8339638: Update vmTestbase/nsk/jvmti/*Field*Watch tests to\n use virtual thread factory\n + JDK-8339879: Open some dialog awt tests\n + JDK-8339975: Open some dialog awt tests 2\n + JDK-8340140: Open some dialog awt tests 3\n + JDK-8340336: Open some checkbox awt tests\n + JDK-8340494: Open some dialog awt tests 4\n + JDK-8340818: Add a new jtreg test root to test the generated\n documentation\n + JDK-8340851: Open some TextArea awt tests\n + JDK-8340987: Open some TextArea awt tests 1\n + JDK-8341055: Open some TextArea awt tests 2\n + JDK-8341292: Open some TextArea awt tests 3\n + JDK-8341376: Open some TextArea awt tests 4\n + JDK-8341427: JFR: Adjust object sampler span handling\n + JDK-8341436: containers/docker/TestJcmdWithSideCar.java takes\n needlessly long to run\n + JDK-8341833: incomplete snippet from loaded files from command\n line is ignored\n + JDK-8342401: [TESTBUG] javax/swing/JSpinner/8223788/\n /JSpinnerButtonFocusTest.java test fails in ubuntu 22.04 on\n SBR Hosts\n + JDK-8342836: Automatically determine that a test in the docs\n test root is requested\n + JDK-8344128: Regression: make help broken after JDK-8340818\n + JDK-8345618: javax/swing/text/Caret/8163124/\n /CaretFloatingPointAPITest.java leaves Caret is not complete\n + JDK-8346154: [XWayland] Some tests fail intermittently in the\n CI, but not locally\n + JDK-8346683: Problem list automated tests that fail on macOS15\n + JDK-8347836: Disabled PopupMenu shows shortcuts on Mac\n + JDK-8349084: Update vectors used in several PQC benchmarks\n + JDK-8349192: jvmti/scenarios/contention/TC05/tc05t001 fails:\n ERROR: tc05t001.cpp, 281: (waitedThreadCpuTime -\n waitThreadCpuTime) \u003c (EXPECTED_ACCURACY * 1000000)\n + JDK-8349533: Refactor validator tests shell files to java\n + JDK-8349699: XSL transform fails with certain UTF-8 characters\n on 1024 byte boundaries\n + JDK-8349959: Test CR6740048.java passes unexpectedly missing\n CR6740048.xsd\n + JDK-8350749: Upgrade JLine to 3.29.0\n + JDK-8350808: Small typos in JShell method SnippetEvent\n .toString()\n + JDK-8352020: [CompileFramework] enable compilation for\n VectorAPI\n + JDK-8352147: G1: TestEagerReclaimHumongousRegionsClearMarkBits\n test takes very long\n + JDK-8352149: Test java/awt/Frame/MultiScreenTest.java fails:\n Window list is empty\n + JDK-8352431: java/net/httpclient/EmptyAuthenticate.java uses\n \"localhost\"\n + JDK-8352685: Opensource JInternalFrame tests - series2\n + JDK-8352733: Improve RotFontBoundsTest test\n + JDK-8352877: Opensource Several Font related tests - Batch 1\n + JDK-8353124: java/lang/Thread/virtual/stress/Skynet.java#Z\n times out on macosx-x64-debug\n + JDK-8353488: Open some JComboBox bugs 3\n + JDK-8353552: Opensource Several Font related tests - Batch 3\n + JDK-8354163: Open source Swing tests Batch 1\n + JDK-8354695: Open source several swing tests batch7\n + JDK-8354900: javax/swing/AbstractButton/bug4133768.java\n failing on macosx-aarch64\n + JDK-8354910: Output by java.io.IO or System.console()\n corrupted for some non-ASCII characters\n + JDK-8355048: ProblemList TestGlyphVectorLayout.java on all\n platforms\n + JDK-8355179: Reinstate javax/swing/JScrollBar/4865918/\n /bug4865918.java headful and macos run\n + JDK-8355332: Fix failing semi-manual test EDT issue\n + JDK-8355371: NegativeArraySizeException in print methods in IO\n or System.console() in JShell\n + JDK-8355443: [java.io] Use @requires tag instead of exiting\n based on File.separatorChar value\n + JDK-8356695: java/lang/StringBuilder/HugeCapacity.java failing\n with OOME\n + JDK-8356868: Not all cgroup parameters are made available\n + JDK-8357062: Update Public Suffix List to 823beb1\n + JDK-8357082: Stabilize and add debug logs to CopyAreaOOB.java\n + JDK-8357086: os::xxx functions returning memory size should\n return size_t\n + JDK-8357280: (bf) Remove @requires tags from java/nio/Buffer/\n /LimitDirectMemory[NegativeTest].java\n + JDK-8357390: java/awt/Toolkit/ScreenInsetsTest/\n /ScreenInsetsTest.java Test failing on Ubuntu 24.04 Vm Hosts\n used by Oracle\u0027s internal CI system\n + JDK-8358058: sun/java2d/OpenGL/DrawImageBg.java Test fails\n intermittently\n + JDK-8359364: java/net/URL/EarlyOrDelayedParsing test fails\n + JDK-8359472: JVM crashes when attaching a dynamic agent before\n JVMTI_PHASE_LIVE\n + JDK-8359978: Test javax/net/ssl/SSLSocket/Tls13PacketSize.java\n failed again with java.net.SocketException: An established\n connection was aborted by the software in your host machine\n + JDK-8360160: ubuntu-22-04 machine is failing client tests\n + JDK-8360395: sun/security/tools/keytool/i18n.java user country\n is current user location instead of the language\n + JDK-8360562: sun/security/tools/keytool/i18n.java add an\n ability to add comment for failures\n + JDK-8360702: runtime/Thread/AsyncExceptionTest.java timed out\n + JDK-8360882: Tests throw SkippedException when they should\n fail\n + JDK-8361106: [TEST] com/sun/net/httpserver/Test9.java fails\n with java.nio.file.FileSystemException\n + JDK-8361606: ConsumeNextMnemonicKeyTypedTest.java fails on\n Windows: character typed with VK_A: a\n + JDK-8361894: sun/security/krb5/config/native/\n /TestDynamicStore.java ensure that the test is run with sudo\n + JDK-8362428: Update IANA Language Subtag Registry to Version\n 2025-08-25\n + JDK-8363943: ARM32: Represent Registers as values\n + JDK-8363949: Incorrect jtreg header in\n MonitorWithDeadObjectTest.java\n + JDK-8364190: JFR: RemoteRecordingStream withers don\u0027t work\n + JDK-8364315: Remove unused xml files from test/jaxp/javax/xml/\n /jaxp/functional/javax/xml/transform/xmlfiles\n + JDK-8364756: JFR: Improve slow tests\n + JDK-8364927: Add @requires annotation to\n TestReclaimStringsLeaksMemory.java\n + JDK-8365379: SU3.applyInsets may produce wrong results\n + JDK-8365398: TEST_BUG: java/rmi/transport/checkLeaseInfoLeak/\n /CheckLeaseLeak.java failing intermittently\n + JDK-8365423: [macos26] java/awt/MenuBar/8007006/\n /bug8007006.java fails on macOS 26\n + JDK-8365424: [macos26] java/awt/Frame/DisposeTest.java fails\n on macOS 26\n + JDK-8365623: test/jdk/sun/security/pkcs11/tls/ tests skipped\n without skip exception\n + JDK-8365625: Can\u0027t change accelerator colors in Windows L\u0026F\n + JDK-8365776: Convert JShell tests to use JUnit instead of\n TestNG\n + JDK-8365861: test/jdk/sun/security/pkcs11/Provider/ tests\n skipped without SkippedException\n + JDK-8365863: /test/jdk/sun/security/pkcs11/Cipher tests skip\n without SkippedException\n + JDK-8365893: test/jdk/java/lang/Thread/virtual/JfrEvents.java\n failing intermittently\n + JDK-8366031: Mark com/sun/nio/sctp/SctpChannel/\n /CloseDescriptors.java as intermittent\n + JDK-8366182: Some PKCS11Tests are being skipped when they\n shouldn\u0027t\n + JDK-8366369: Add @requires linux for GTK L\u0026F tests\n + JDK-8366852: java/awt/Choice/ChoiceMouseWheelTest/\n /ChoiceMouseWheelTest.java test is failing\n + JDK-8367096: jdk/open/test/jdk/sun/security/pkcs11/ rsa, ec,\n config, secmod and sslecc tests are skipping but showing as\n pass\n + JDK-8367485: os::physical_memory is broken in 32-bit JVMs when\n running on 64-bit OSes\n + JDK-8367784: java/awt/Focus/InitialFocusTest/\n /InitialFocusTest1.java failed with Wrong focus owner\n + JDK-8368029: Several tests in httpserver/simpleserver should\n throw SkipException\n + JDK-8368041: Enhance TLS certificate handling\n + JDK-8368181: ProblemList java/awt/Dialog/ModalExcludedTest/\n /ModalExcludedTest.java\n + JDK-8368335: Refactor the rest of Locale TestNG based tests to\n JUnit\n + JDK-8368498: Use JUnit instead of TestNG for jdk_text tests\n + JDK-8368524: Tests are skipped and shown as passed in\n test/jdk/sun/security/pkcs11/Cipher/KeyWrap\n + JDK-8368551: Core dump warning may be confusing\n + JDK-8368625: com/sun/net/httpserver/\n /ServerStopTerminationTest.java fails intermittently\n + JDK-8368670: Deadlock in JFR on event register + class load\n + JDK-8368754: runtime/cds/appcds/SignedJar.java log regex is\n too strict\n + JDK-8368866: compiler/codecache/stress/\n /UnexpectedDeoptimizationTest.java intermittent timed out\n + JDK-8368885: NMT CommandLine tests can check for error better\n + JDK-8368892: Make JEditorPane/TestBrowserBGColor.java headless\n + JDK-8369251: Opensource few tests\n + JDK-8369335: Two sun/java2d/OpenGL tests fail on Windows\n after JDK-8358058\n + JDK-8369516: Delete duplicate imaging test\n + JDK-8369561: sun/java2d/OpenGL/DrawBitmaskImage.java#id0:\n Incorrect color for first pixel (actual=ff000000)\n + JDK-8369683: Exclude runtime/Monitor/\n /MonitorWithDeadObjectTest.java#DumpThreadsBeforeDetach on\n Alpine Linux debug\n + JDK-8369851: Remove darcy author tags from langtools tests\n + JDK-8369950: TLS connection to IPv6 address fails with BCJSSE\n due to IllegalArgumentException\n + JDK-8370378: Some compiler tests inadvertently exclude\n particular platforms\n + JDK-8370489: Some compiler tests miss the @key randomness\n + JDK-8370492: [Linux] Update cpu shares to cpu.weight mapping\n function\n + JDK-8370511: test/jdk/javax/swing/JSlider/bug4382876.java does\n not release previously pressed keys\n + JDK-8370732: Use WhiteBox.getWhiteBox().fullGC() to provoking\n gc for nsk/jvmti tests\n + JDK-8370905: Update vm.defmeth tests to use virtual threads\n + JDK-8370942: test/jdk/java/security/Provider/NewInstance.java\n and /test/jdk/java/security/cert/CertStore/NoLDAP.java may\n skip without notifying\n + JDK-8371262: sun/security/pkcs11/Cipher/KeyWrap tests may\n silently skip\n + JDK-8371349: Update NSS library to 3.117\n + JDK-8371364: Refactor javax/swing/JFileChooser/\n /FileSizeCheck.java to use Util.findComponent()\n + JDK-8371365: Update javax/swing/JFileChooser/bug4759934.java\n to use Util.findComponent()\n + JDK-8371366: java/net/httpclient/whitebox/\n /RawChannelTestDriver.java fails intermittently in jtreg\n timeout\n + JDK-8371383: Test sun/security/tools/jarsigner/\n /DefaultOptions.java failed due to\n CertificateNotYetValidException\n + JDK-8371503: RETAIN_IMAGE_AFTER_TEST do not work for some\n tests\n + JDK-8371895: Lower GCTimeLimit in TestUseGCOverheadLimit.java\n + JDK-8371967: Add Visual Studio 2026 to build toolchain for\n Windows\n + JDK-8372120: Add missing sound keyword to MIDI tests\n + JDK-8372272: Hotspot shared lib loading - add load attempts to\n Events::log\n + JDK-8372351: Add 2 WISeKey roots\n + JDK-8372609: Bug4944439 does not enforce locale correctly\n + JDK-8372661: Add a null-safe static factory method to\n \"jdk.test.lib.net.SimpleSSLContext\"\n + JDK-8373101: JdkClient and JdkServer test classes ignore\n namedGroups field\n + JDK-8373239: Test java/awt/print/PrinterJob/PageRanges.java\n fails with incorrect selection of printed pages\n + JDK-8373275: Improve DTLS handshaking\n + JDK-8373537: Migrate \"test/jdk/com/sun/net/httpserver/\" to\n null-safe \"SimpleSSLContext\" methods\n + JDK-8373593: Support latest VS2026 MSC_VER in\n abstract_vm_version.cpp\n + JDK-8373623: Refactor Serialization tests for Records to JUnit\n + JDK-8373632: Some sound tests failing in CI due to lack of\n sound key\n + JDK-8373650: Test \"javax/swing/JMenuItem/6458123/\n /ManualBug6458123.java\" fails because the check icons are not\n aligned properly as expected\n + JDK-8373690: Unexpected Keystore message using\n jdk.crypto.disabledAlgorithms\n + JDK-8373704: Improve \"SocketException: Protocol family\n unavailable\" message\n + JDK-8373716: Refactor further java/util tests from TestNG to\n + JDK-8373793: TestDynamicStore.java \u0027/manual\u0027 disables use of\n \u0027/timeout\u0027\n + JDK-8373796: Refactor java/net/httpclient/\n /ThrowingPublishers*.java tests to use JUnit5\n + JDK-8373807: test/jdk/java/net/httpclient/websocket/\n /DummyWebSocketServer.java getURI() uses \"localhost\"\n + JDK-8373832: Test java/lang/invoke/TestVHInvokerCaching.java\n tests nothing\n + JDK-8373847: Test javax/swing/JMenuItem/MenuItemTest/\n /bug6197830.java failed because The test case automatically\n fails when clicking any items in the \"Nothing\" menu in all\n four windows (Left-to-right)-Menu Item Test and\n (Right-to-left)-Menu Item Test\n + JDK-8373866: Refactor java/net/httpclient/\n /ThrowingSubscribers*.java tests to use JUnit5\n + JDK-8373869: Refactor java/net/httpclient/\n /ThrowingPushPromises*.java tests to use JUnit5\n + JDK-8373928: 4 Dangling pointer defect groups in java.c\n + JDK-8373931: Test javax/sound/sampled/Clip/\n /AutoCloseTimeCheck.java timed out\n + JDK-8374058: Enhance JPEG handling\n + JDK-8374304: MultiResolutionSplashTest.java fails in CI:\n \"Image with wrong resolution is used for splash screen!\"\n + JDK-8374322: TestMemoryWithSubgroups.java fails Permission\n denied\n + JDK-8374434: Several JShell tests report JUnit discovery\n warnings\n + JDK-8374506: Incorrect positioning of arrow icon in parent\n JMenu in Windows L\u0026F\n + JDK-8374711: Hotspot runtime/CommandLine/OptionsValidation/\n /TestOptionsWithRanges fails without printing the option name\n + JDK-8374769: PPC: MASM::pop_cont_fastpath() should reset\n _cont_fastpath if SP == _cont_fastpath\n + JDK-8374888: Implement internal test cache to help\n UserIterCount test performance\n + JDK-8374998: Failing os::write - remove bad file\n + JDK-8375065: Update LCMS to 2.18\n + JDK-8375080: The tools/jpackage/windows/Win8365790Test.java\n may fail with ClassNotFoundException: jtreg.SkippedException\n + JDK-8375231: Refactor util/ServiceLoader tests to use JUnit\n + JDK-8375232: Refactor util/StringJoiner tests to use JUnit\n + JDK-8375233: Refactor util/Vector tests to use JUnit\n + JDK-8375742: Test java/lang/invoke/MethodHandleProxies/\n /Driver.java does not run Unnamed.java\n + JDK-8376031: HttpsURLConnection.getServerCertificates() throws\n \"java.lang.IllegalStateException: connection not yet open\" for\n the HEAD method\n + JDK-8376151: Test javax/swing/JFileChooser/4966171/\n /bug4966171.java is failing with OOME\n + JDK-8376152: Test javax/sound/sampled/Clip/bug5070081.java\n timed out then completed\n + JDK-8376233: Clean up code in Desktop native peer\n + JDK-8376889: Enhance JfrRecorder::on_create_vm_3() assert\n output\n + JDK-8377158: Enhance XBM image support\n + JDK-8377167: javax/imageio/ReadAbortTest.java throw NPE when\n x11 unavailable\n + JDK-8377347: jdk/jfr/event/gc/detailed/\n /TestZAllocationStallEvent.java intermittent OOME\n + JDK-8377498: Improve HttpServer handling\n + JDK-8377602: Create automated test for PageRange\n + JDK-8377727: Ghost caret and focus appear in non-editable text\n fields\n + JDK-8377833: Enhance Jar file processing\n + JDK-8377910: Minor cleanup of java/io/FileDescriptor/\n /Sharing.java\n + JDK-8377944: LowMemoryTest2.java#id1 intermittent fails OOME:\n Metaspace\n + JDK-8378113: Add sun/java2d/OpenGL/ScaleParamsOOB.java to the\n ProblemList.txt file\n + JDK-8378201: [OGL] glXMakeContextCurrent() drops the buffers\n of the unbound drawable\n + JDK-8378353: [PPC64] StringCoding.countPositives causes errors\n when the length is not a proper 32 bit int\n + JDK-8378417: Printing All pages results in NPE for 1.1\n PrintJob\n + JDK-8378561: Mark gc/shenandoah/compiler/\n /TestLinkToNativeRBP.java as /native\n + JDK-8378687: Improve delegation of HttpURLConnection\n + JDK-8378775: Bump update version for OpenJDK: jdk-21.0.12\n + JDK-8378802: [21u] backport changes to TKit.java by\n JDK-8352419\n + JDK-8378810: Enable missing FFM test via jtreg requires for\n RISC-V\n + JDK-8378878: Refactor java/nio/channels/\n /AsynchronousSocketChannel test to use JUnit\n + JDK-8379464: Enable missing stack walking test via jtreg\n requires for RISC-V\n + JDK-8380011: Path-to-gcroots search should not trigger stack\n overflows\n + JDK-8380222: Refactor test/jdk/java/lang/Character TestNG\n tests to JUnit\n + JDK-8380316: Test runtime/os/AvailableProcessors.java fails\n Invalid argument\n + JDK-8380428: ProblemList containers/docker/\n /TestJcmdWithSideCar.java on linux-all\n + JDK-8380474: Crash SEGV in ThreadIdTable::lazy_initialize\n after JDK-8323792\n + JDK-8380565: PPC64: deoptimization stub should save vector\n registers\n + JDK-8380672: Improve certification checking\n + JDK-8380947: Add pull request template\n + JDK-8381039: Enhance AWT ImagingLib\n + JDK-8381049: Enhance Jar handling\n + JDK-8381205: GHA: Upgrade Node.js 20 to 24\n + JDK-8381315: compiler/vectorapi/TestVectorReallocation.java\n fails with -XX:UseAVX=1 after JDK-8380565\n + JDK-8381519: Enhance Der Value Handling\n + JDK-8381796: Enhance Certificate parsing\n + JDK-8382018: test/jdk/java/nio/file/spi/\n /SetDefaultProvider.java leaves a directory in /tmp\n + JDK-8382242: JFR: Metadata reconstruction invalidates\n ConstantMap for java.lang.String\n + JDK-8382419: Add missed @key randomness after JDK-8370489\n + JDK-8383175: (tz) Update Timezone Data to 2026b\n + JDK-8383185: [21u] Backport of JDK-8382925 causes test failure\n in SetDefaultProvider\n + JDK-8383354: Update LCMS to 2.19.1\n + JDK-8383473: Follow on from tzdata2026b time change to include\n temporary hack BC time change\n + JDK-8383601: RISC-V:\n ShenandoahBarrierSetAssembler::load_reference_barrier calls\n \"weak\" on \"phantom\" path\n + JDK-8383630: Fix iteration in tests doing class redefinition\n + JDK-8384158: GHA: Downgrade Windows GHA runners to\n windows-2022 temporarily\n + JDK-8384486: NTLM tests fail on Windows 11 and Windows Server\n 2025\n + JDK-8384495: Update Libpng to 1.6.58\n + JDK-8384540: [25u, 21u, 17u] Update GHA JDKs after Apr/26\n updates\n + JDK-8384815: SelectOneKeyOutOfMany and PreferredKey fail after\n expired test certificate\n + JDK-8384902: Update GIFlib to 6.1.3\n + JDK-8385390: Update FreeType to 2.14.3\n + JDK-8385490: Update HarfBuzz to 14.2.0\n + JDK-8386551: Windows build broken because of MSys2/Make update\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Leap-16.0-1385",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21470-1.json"
},
{
"category": "self",
"summary": "SUSE Bug 1264994",
"url": "https://bugzilla.suse.com/1264994"
},
{
"category": "self",
"summary": "SUSE Bug 1272223",
"url": "https://bugzilla.suse.com/1272223"
},
{
"category": "self",
"summary": "SUSE Bug 1272224",
"url": "https://bugzilla.suse.com/1272224"
},
{
"category": "self",
"summary": "SUSE Bug 1272225",
"url": "https://bugzilla.suse.com/1272225"
},
{
"category": "self",
"summary": "SUSE Bug 1272227",
"url": "https://bugzilla.suse.com/1272227"
},
{
"category": "self",
"summary": "SUSE Bug 1272228",
"url": "https://bugzilla.suse.com/1272228"
},
{
"category": "self",
"summary": "SUSE Bug 1272235",
"url": "https://bugzilla.suse.com/1272235"
},
{
"category": "self",
"summary": "SUSE Bug 1272236",
"url": "https://bugzilla.suse.com/1272236"
},
{
"category": "self",
"summary": "SUSE Bug 1272237",
"url": "https://bugzilla.suse.com/1272237"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-41254 page",
"url": "https://www.suse.com/security/cve/CVE-2026-41254/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46917 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46917/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46968 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46968/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47010 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47010/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47021 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47021/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47027 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47027/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47059 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47059/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47063 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47063/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-60147 page",
"url": "https://www.suse.com/security/cve/CVE-2026-60147/"
}
],
"title": "Security update for java-21-openjdk",
"tracking": {
"current_release_date": "2026-07-28T20:35:22Z",
"generator": {
"date": "2026-07-28T20:35:22Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:21470-1",
"initial_release_date": "2026-07-28T20:35:22Z",
"revision_history": [
{
"date": "2026-07-28T20:35:22Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"product": {
"name": "java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"product_id": "java-21-openjdk-21.0.12.0-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"product": {
"name": "java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"product_id": "java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"product": {
"name": "java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"product_id": "java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"product": {
"name": "java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"product_id": "java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"product": {
"name": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"product_id": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"product": {
"name": "java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"product_id": "java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"product": {
"name": "java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"product_id": "java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"product": {
"name": "java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"product_id": "java-21-openjdk-21.0.12.0-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"product": {
"name": "java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"product_id": "java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"product": {
"name": "java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"product_id": "java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"product": {
"name": "java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"product_id": "java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"product": {
"name": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"product_id": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"product": {
"name": "java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"product_id": "java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"product": {
"name": "java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"product_id": "java-21-openjdk-21.0.12.0-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"product": {
"name": "java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"product_id": "java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"product": {
"name": "java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"product_id": "java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"product": {
"name": "java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"product_id": "java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"product": {
"name": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"product_id": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"product": {
"name": "java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"product_id": "java-21-openjdk-src-21.0.12.0-160000.1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"product": {
"name": "java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"product_id": "java-21-openjdk-21.0.12.0-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"product": {
"name": "java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"product_id": "java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"product": {
"name": "java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"product_id": "java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"product": {
"name": "java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"product_id": "java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"product": {
"name": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"product_id": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64",
"product": {
"name": "java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64",
"product_id": "java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 16.0",
"product": {
"name": "openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-21-openjdk-21.0.12.0-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64"
},
"product_reference": "java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-21-openjdk-21.0.12.0-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le"
},
"product_reference": "java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-21-openjdk-21.0.12.0-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x"
},
"product_reference": "java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-21-openjdk-21.0.12.0-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64"
},
"product_reference": "java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64"
},
"product_reference": "java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le"
},
"product_reference": "java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x"
},
"product_reference": "java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64"
},
"product_reference": "java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64"
},
"product_reference": "java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le"
},
"product_reference": "java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x"
},
"product_reference": "java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64"
},
"product_reference": "java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64"
},
"product_reference": "java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le"
},
"product_reference": "java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x"
},
"product_reference": "java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64"
},
"product_reference": "java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch"
},
"product_reference": "java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64"
},
"product_reference": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le"
},
"product_reference": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x"
},
"product_reference": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64"
},
"product_reference": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64"
},
"product_reference": "java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le"
},
"product_reference": "java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-21-openjdk-src-21.0.12.0-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x"
},
"product_reference": "java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
},
"product_reference": "java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-41254",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-41254"
}
],
"notes": [
{
"category": "general",
"text": "Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-41254",
"url": "https://www.suse.com/security/cve/CVE-2026-41254"
},
{
"category": "external",
"summary": "SUSE Bug 1264994 for CVE-2026-41254",
"url": "https://bugzilla.suse.com/1264994"
},
{
"category": "external",
"summary": "SUSE Bug 1272458 for CVE-2026-41254",
"url": "https://bugzilla.suse.com/1272458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.9,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-28T20:35:22Z",
"details": "moderate"
}
],
"title": "CVE-2026-41254"
},
{
"cve": "CVE-2026-46917",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46917"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46917",
"url": "https://www.suse.com/security/cve/CVE-2026-46917"
},
{
"category": "external",
"summary": "SUSE Bug 1272223 for CVE-2026-46917",
"url": "https://bugzilla.suse.com/1272223"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-28T20:35:22Z",
"details": "moderate"
}
],
"title": "CVE-2026-46917"
},
{
"cve": "CVE-2026-46968",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46968"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46968",
"url": "https://www.suse.com/security/cve/CVE-2026-46968"
},
{
"category": "external",
"summary": "SUSE Bug 1272224 for CVE-2026-46968",
"url": "https://bugzilla.suse.com/1272224"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-28T20:35:22Z",
"details": "moderate"
}
],
"title": "CVE-2026-46968"
},
{
"cve": "CVE-2026-47010",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47010"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47010",
"url": "https://www.suse.com/security/cve/CVE-2026-47010"
},
{
"category": "external",
"summary": "SUSE Bug 1272225 for CVE-2026-47010",
"url": "https://bugzilla.suse.com/1272225"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-28T20:35:22Z",
"details": "low"
}
],
"title": "CVE-2026-47010"
},
{
"cve": "CVE-2026-47021",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47021"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47021",
"url": "https://www.suse.com/security/cve/CVE-2026-47021"
},
{
"category": "external",
"summary": "SUSE Bug 1272227 for CVE-2026-47021",
"url": "https://bugzilla.suse.com/1272227"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-28T20:35:22Z",
"details": "moderate"
}
],
"title": "CVE-2026-47021"
},
{
"cve": "CVE-2026-47027",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47027"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47027",
"url": "https://www.suse.com/security/cve/CVE-2026-47027"
},
{
"category": "external",
"summary": "SUSE Bug 1272228 for CVE-2026-47027",
"url": "https://bugzilla.suse.com/1272228"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-28T20:35:22Z",
"details": "moderate"
}
],
"title": "CVE-2026-47027"
},
{
"cve": "CVE-2026-47059",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47059"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47059",
"url": "https://www.suse.com/security/cve/CVE-2026-47059"
},
{
"category": "external",
"summary": "SUSE Bug 1272235 for CVE-2026-47059",
"url": "https://bugzilla.suse.com/1272235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-28T20:35:22Z",
"details": "low"
}
],
"title": "CVE-2026-47059"
},
{
"cve": "CVE-2026-47063",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47063"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47063",
"url": "https://www.suse.com/security/cve/CVE-2026-47063"
},
{
"category": "external",
"summary": "SUSE Bug 1272236 for CVE-2026-47063",
"url": "https://bugzilla.suse.com/1272236"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-28T20:35:22Z",
"details": "important"
}
],
"title": "CVE-2026-47063"
},
{
"cve": "CVE-2026-60147",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-60147"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-60147",
"url": "https://www.suse.com/security/cve/CVE-2026-60147"
},
{
"category": "external",
"summary": "SUSE Bug 1272237 for CVE-2026-60147",
"url": "https://bugzilla.suse.com/1272237"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
"openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-28T20:35:22Z",
"details": "moderate"
}
],
"title": "CVE-2026-60147"
}
]
}
RHSA-2026:42876
Vulnerability from csaf_redhat - Published: 2026-07-23 12:13 - Updated: 2026-08-10 20:33Summary
Red Hat Security Advisory: java-1.8.0-openjdk security update
Severity
Important
Notes
Topic: An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.
Security Fix(es):
* JDK: Enhance TLS certificate handling (CVE-2026-46968)
* JDK: Enhance JPEG handling (CVE-2026-47010)
* JDK: Enhance XBM image support (CVE-2026-47021)
* JDK: Enhance Jar file processing (CVE-2026-47027)
* JDK: Improve certification checking (CVE-2026-60147)
* JDK: Enhance AWT ImagingLib (CVE-2026-47059)
* JDK: Enhance Jar handling (CVE-2026-47063)
* JDK: Improve Nashorn index handling (CVE-2026-47057)
* JDK: Enhance Dataview Implementation (CVE-2026-47058)
* JDK: Update LCMS to 2.19 (CVE-2026-41254)
Enhancements:
* For the last couple of years, OpenJDK has used a single build shared among multiple RPMs and a tarball available on the customer portal. The single "portable" build has a release number ('p') and each RPM has its own release number ('r'). However, the RPM naming only showed the RPM release number, while the version output from the build showed the portable release number, making it unclear that they were different numbers. From this release onwards, a release field of the form 'p.r' is always used for RPMs and the version output shows 'p'. (RHEL-212138)
Bug Fix(es):
* In previous releases, the RPM did not correctly own the subdirectories used for documentation in /usr/share/doc and /usr/share/javadoc. This is fixed in this release, so these subdirectories will be removed when the package is uninstalled. (RHEL-212148)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Little CMS. An integer overflow in the `CubeSize` function within `cmslut.c` occurs because the overflow check is performed after the multiplication. An attacker could exploit this vulnerability by providing a specially crafted input, potentially leading to information disclosure or a denial of service (DoS), which makes the system unavailable to legitimate users.
6.1 (Medium)
Affected products
Fixed
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in OpenJDK. When a server has wantClientAuth and the client sends a no_certificate alert, any client certificates are not verified.
5.9 (Medium)
Affected products
Fixed
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in OpenJDK. ASAN reports a heap integrity violation.
CWE-787 - Out-of-bounds WriteAffected products
Fixed
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
A flaw was found in OpenJDK. The regex defined in XbmImageDecoder (matchRegex) is vulnerable to a DoS attack when the input contains a long string without a closing character; due to excessive backtracking.
5.3 (Medium)
Affected products
Fixed
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in OpenJDK. The processImpl() method in SignatureFileVerifier exhibits O(n^2) time complexity when verifying JAR files where different entries have different signer combinations, potentially leading to DoS.
5.3 (Medium)
Affected products
Fixed
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in OpenJDK. There is an integer overflow in TypedArray.prototype.set() which can cause a DoS.
7.5 (High)
Affected products
Fixed
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in OpenJDK. 1) DataView getter/setter methods use absolute ByteBuffer indexing and ignore the offset, allowing read and write to memory outside its intended window. 2) Missing bounds check in the DataView constructor fails to validate the capacity.
7.4 (High)
Affected products
Fixed
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in OpenJDK. When the software processes certain images, a specific function fails to manage memory boundaries correctly. This can lead to the application attempting to access invalid memory or dereference a null pointer, which may cause the application to unexpectedly terminate. The primary consequence of this vulnerability is a denial of service, making the affected application unavailable.
CWE-476 - NULL Pointer DereferenceAffected products
Fixed
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
A flaw was found in OpenJDK. There exists a potential existential forgery vulnerability in CMS and protocols which use CMS. In Java, CMS is used to sign JAR files.
7.5 (High)
Affected products
Fixed
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in OpenJDK. OpenJDK can apply two different security meanings to the same wildcard dNSName SAN across certificate policy enforcement and hostname verification. During path validation, DNSName.constrains compares *.foo.com and secret.foo.com literally and returns NAME_SAME_TYPE, so NameConstraintsExtension.verify does not reject the chain when secret.foo.com is an exact-host exclusion. Later, HostnameChecker interprets the same SAN as a wildcard template and accepts secret.foo.com for *.foo.com.
6.5 (Medium)
Affected products
Fixed
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
58 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.\n\nSecurity Fix(es):\n\n* JDK: Enhance TLS certificate handling (CVE-2026-46968)\n\n* JDK: Enhance JPEG handling (CVE-2026-47010)\n\n* JDK: Enhance XBM image support (CVE-2026-47021)\n\n* JDK: Enhance Jar file processing (CVE-2026-47027)\n\n* JDK: Improve certification checking (CVE-2026-60147)\n\n* JDK: Enhance AWT ImagingLib (CVE-2026-47059)\n\n* JDK: Enhance Jar handling (CVE-2026-47063)\n\n* JDK: Improve Nashorn index handling (CVE-2026-47057)\n\n* JDK: Enhance Dataview Implementation (CVE-2026-47058)\n\n* JDK: Update LCMS to 2.19 (CVE-2026-41254)\n\nEnhancements:\n\n* For the last couple of years, OpenJDK has used a single build shared among multiple RPMs and a tarball available on the customer portal. The single \"portable\" build has a release number (\u0027p\u0027) and each RPM has its own release number (\u0027r\u0027). However, the RPM naming only showed the RPM release number, while the version output from the build showed the portable release number, making it unclear that they were different numbers. From this release onwards, a release field of the form \u0027p.r\u0027 is always used for RPMs and the version output shows \u0027p\u0027. (RHEL-212138)\n\nBug Fix(es):\n\n* In previous releases, the RPM did not correctly own the subdirectories used for documentation in /usr/share/doc and /usr/share/javadoc. This is fixed in this release, so these subdirectories will be removed when the package is uninstalled. (RHEL-212148)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:42876",
"url": "https://access.redhat.com/errata/RHSA-2026:42876"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2459420",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2459420"
},
{
"category": "external",
"summary": "2502751",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502751"
},
{
"category": "external",
"summary": "2502783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502783"
},
{
"category": "external",
"summary": "2502784",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502784"
},
{
"category": "external",
"summary": "2502791",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502791"
},
{
"category": "external",
"summary": "2502792",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502792"
},
{
"category": "external",
"summary": "2502793",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502793"
},
{
"category": "external",
"summary": "2502794",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502794"
},
{
"category": "external",
"summary": "2502795",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502795"
},
{
"category": "external",
"summary": "2503636",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503636"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42876.json"
}
],
"title": "Red Hat Security Advisory: java-1.8.0-openjdk security update",
"tracking": {
"current_release_date": "2026-08-10T20:33:47+00:00",
"generator": {
"date": "2026-08-10T20:33:47+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:42876",
"initial_release_date": "2026-07-23T12:13:17+00:00",
"revision_history": [
{
"date": "2026-07-23T12:13:17+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-23T12:13:17+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-10T20:33:47+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7 ELS)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_els:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_els:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"product": {
"name": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"product_id": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk@1.8.0.502.b07-1.1.el7_9?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"product": {
"name": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"product_id": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk@1.8.0.502.b07-1.1.el7_9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"product": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"product_id": "java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-devel@1.8.0.502.b07-1.1.el7_9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"product": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"product_id": "java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-headless@1.8.0.502.b07-1.1.el7_9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"product": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"product_id": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-debuginfo@1.8.0.502.b07-1.1.el7_9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"product": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"product_id": "java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-accessibility@1.8.0.502.b07-1.1.el7_9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"product": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"product_id": "java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-demo@1.8.0.502.b07-1.1.el7_9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"product": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"product_id": "java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-src@1.8.0.502.b07-1.1.el7_9?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"product": {
"name": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"product_id": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk@1.8.0.502.b07-1.1.el7_9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"product": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"product_id": "java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-devel@1.8.0.502.b07-1.1.el7_9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"product": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"product_id": "java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-headless@1.8.0.502.b07-1.1.el7_9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"product": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"product_id": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-debuginfo@1.8.0.502.b07-1.1.el7_9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"product": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"product_id": "java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-accessibility@1.8.0.502.b07-1.1.el7_9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"product": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"product_id": "java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-demo@1.8.0.502.b07-1.1.el7_9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"product": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"product_id": "java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-src@1.8.0.502.b07-1.1.el7_9?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"product": {
"name": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"product_id": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk@1.8.0.502.b07-1.1.el7_9?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"product": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"product_id": "java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-devel@1.8.0.502.b07-1.1.el7_9?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"product": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"product_id": "java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-headless@1.8.0.502.b07-1.1.el7_9?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"product": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"product_id": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-debuginfo@1.8.0.502.b07-1.1.el7_9?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"product": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"product_id": "java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-accessibility@1.8.0.502.b07-1.1.el7_9?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"product": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"product_id": "java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-demo@1.8.0.502.b07-1.1.el7_9?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"product": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"product_id": "java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-src@1.8.0.502.b07-1.1.el7_9?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"product": {
"name": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"product_id": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk@1.8.0.502.b07-1.1.el7_9?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"product": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"product_id": "java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-devel@1.8.0.502.b07-1.1.el7_9?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"product": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"product_id": "java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-headless@1.8.0.502.b07-1.1.el7_9?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"product": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"product_id": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-debuginfo@1.8.0.502.b07-1.1.el7_9?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"product": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"product_id": "java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-accessibility@1.8.0.502.b07-1.1.el7_9?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"product": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"product_id": "java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-demo@1.8.0.502.b07-1.1.el7_9?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"product": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"product_id": "java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-src@1.8.0.502.b07-1.1.el7_9?arch=ppc64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"product": {
"name": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"product_id": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk@1.8.0.502.b07-1.1.el7_9?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"product": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"product_id": "java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-devel@1.8.0.502.b07-1.1.el7_9?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"product": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"product_id": "java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-headless@1.8.0.502.b07-1.1.el7_9?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"product": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"product_id": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-debuginfo@1.8.0.502.b07-1.1.el7_9?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"product": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"product_id": "java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-accessibility@1.8.0.502.b07-1.1.el7_9?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"product": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"product_id": "java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-demo@1.8.0.502.b07-1.1.el7_9?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"product": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"product_id": "java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-src@1.8.0.502.b07-1.1.el7_9?arch=ppc64le\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"product": {
"name": "java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"product_id": "java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-javadoc@1.8.0.502.b07-1.1.el7_9?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"product": {
"name": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"product_id": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-openjdk-javadoc-zip@1.8.0.502.b07-1.1.el7_9?arch=noarch\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64"
},
"product_reference": "java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64"
},
"product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64"
},
"product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64"
},
"product_reference": "java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64"
},
"product_reference": "java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64"
},
"product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch"
},
"product_reference": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
},
"product_reference": "java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"relates_to_product_reference": "7Server-optional-ELS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-41254",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-04-18T07:01:05.918611+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2459420"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Little CMS. An integer overflow in the `CubeSize` function within `cmslut.c` occurs because the overflow check is performed after the multiplication. An attacker could exploit this vulnerability by providing a specially crafted input, potentially leading to information disclosure or a denial of service (DoS), which makes the system unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate flaw in Little CMS (lcms2) involves an integer overflow within the `CubeSize` function, occurring due to an insufficient check during multiplication. Processing specially crafted color profiles or image data could lead to information disclosure or a denial of service, affecting the availability of applications that rely on lcms2 for color management. Exploitation requires user interaction with malicious content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41254"
},
{
"category": "external",
"summary": "RHBZ#2459420",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2459420"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41254",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41254"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41254",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41254"
},
{
"category": "external",
"summary": "https://abhinavagarwal07.github.io/posts/lcms2-cubesize-overflow/",
"url": "https://abhinavagarwal07.github.io/posts/lcms2-cubesize-overflow/"
},
{
"category": "external",
"summary": "https://github.com/mm2/Little-CMS/commit/da6110b1d14abc394633a388209abd5ebedd7ab0",
"url": "https://github.com/mm2/Little-CMS/commit/da6110b1d14abc394633a388209abd5ebedd7ab0"
},
{
"category": "external",
"summary": "https://github.com/mm2/Little-CMS/commit/e0641b1828d0a1af5ecb1b11fe22f24fceefd4bc",
"url": "https://github.com/mm2/Little-CMS/commit/e0641b1828d0a1af5ecb1b11fe22f24fceefd4bc"
},
{
"category": "external",
"summary": "https://github.com/mm2/Little-CMS/security/advisories/GHSA-4xp6-rcgg-m9qq",
"url": "https://github.com/mm2/Little-CMS/security/advisories/GHSA-4xp6-rcgg-m9qq"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2026/04/17/16",
"url": "https://www.openwall.com/lists/oss-security/2026/04/17/16"
}
],
"release_date": "2026-04-18T06:43:13.741000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T12:13:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42876"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize"
},
{
"cve": "CVE-2026-46968",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-07-20T12:12:02.948000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2502751"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenJDK. When a server has wantClientAuth and the client sends a no_certificate alert, any client certificates are not verified.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openjdk: Enhance TLS certificate handling (Oracle CPU 2026-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46968"
},
{
"category": "external",
"summary": "RHBZ#2502751",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502751"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46968",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46968"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46968",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46968"
}
],
"release_date": "2026-07-21T12:34:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T12:13:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42876"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openjdk: Enhance TLS certificate handling (Oracle CPU 2026-07)"
},
{
"cve": "CVE-2026-47010",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-07-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2502783"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenJDK. ASAN reports a heap integrity violation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openjdk: Enhance JPEG handling (Oracle CPU 2026-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47010"
},
{
"category": "external",
"summary": "RHBZ#2502783",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502783"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47010",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47010"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47010",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47010"
}
],
"release_date": "2026-07-21T20:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T12:13:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42876"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openjdk: Enhance JPEG handling (Oracle CPU 2026-07)"
},
{
"cve": "CVE-2026-47021",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-07-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2502784"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenJDK. The regex defined in XbmImageDecoder (matchRegex) is vulnerable to a DoS attack when the input contains a long string without a closing character; due to excessive backtracking.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openjdk: Enhance XBM image support (Oracle CPU 2026-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47021"
},
{
"category": "external",
"summary": "RHBZ#2502784",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502784"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47021",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47021"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47021",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47021"
}
],
"release_date": "2026-07-21T20:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T12:13:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42876"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openjdk: Enhance XBM image support (Oracle CPU 2026-07)"
},
{
"cve": "CVE-2026-47027",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2026-07-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2502791"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenJDK. The processImpl() method in SignatureFileVerifier exhibits O(n^2) time complexity when verifying JAR files where different entries have different signer combinations, potentially leading to DoS.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openjdk: Enhance Jar file processing (Oracle CPU 2026-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47027"
},
{
"category": "external",
"summary": "RHBZ#2502791",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502791"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47027",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47027"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47027",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47027"
}
],
"release_date": "2026-07-21T20:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T12:13:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42876"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openjdk: Enhance Jar file processing (Oracle CPU 2026-07)"
},
{
"cve": "CVE-2026-47057",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-07-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2502794"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenJDK. There is an integer overflow in TypedArray.prototype.set() which can cause a DoS.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openjdk: Improve Nashorn index handling (Oracle CPU 2026-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47057"
},
{
"category": "external",
"summary": "RHBZ#2502794",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502794"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47057",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47057"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47057",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47057"
}
],
"release_date": "2026-07-21T20:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T12:13:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42876"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openjdk: Improve Nashorn index handling (Oracle CPU 2026-07)"
},
{
"cve": "CVE-2026-47058",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-07-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2502795"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenJDK. 1) DataView getter/setter methods use absolute ByteBuffer indexing and ignore the offset, allowing read and write to memory outside its intended window. 2) Missing bounds check in the DataView constructor fails to validate the capacity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openjdk: Enhance Dataview Implementation (Oracle CPU 2026-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47058"
},
{
"category": "external",
"summary": "RHBZ#2502795",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502795"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47058",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47058"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47058",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47058"
}
],
"release_date": "2026-07-21T20:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T12:13:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42876"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openjdk: Enhance Dataview Implementation (Oracle CPU 2026-07)"
},
{
"cve": "CVE-2026-47059",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-07-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2502792"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenJDK. When the software processes certain images, a specific function fails to manage memory boundaries correctly. This can lead to the application attempting to access invalid memory or dereference a null pointer, which may cause the application to unexpectedly terminate. The primary consequence of this vulnerability is a denial of service, making the affected application unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47059"
},
{
"category": "external",
"summary": "RHBZ#2502792",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502792"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47059",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47059"
}
],
"release_date": "2026-07-21T20:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T12:13:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42876"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07)"
},
{
"cve": "CVE-2026-47063",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-07-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2502793"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenJDK. There exists a potential existential forgery vulnerability in CMS and protocols which use CMS. In Java, CMS is used to sign JAR files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openjdk: Enhance Jar handling (Oracle CPU 2026-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47063"
},
{
"category": "external",
"summary": "RHBZ#2502793",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502793"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47063"
}
],
"release_date": "2026-07-21T20:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T12:13:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42876"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openjdk: Enhance Jar handling (Oracle CPU 2026-07)"
},
{
"cve": "CVE-2026-60147",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-07-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2503636"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenJDK. OpenJDK can apply two different security meanings to the same wildcard dNSName SAN across certificate policy enforcement and hostname verification. During path validation, DNSName.constrains compares *.foo.com and secret.foo.com literally and returns NAME_SAME_TYPE, so NameConstraintsExtension.verify does not reject the chain when secret.foo.com is an exact-host exclusion. Later, HostnameChecker interprets the same SAN as a wildcard template and accepts secret.foo.com for *.foo.com.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openjdk: Improve certification checking (Oracle CPU 2026-07)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-60147"
},
{
"category": "external",
"summary": "RHBZ#2503636",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503636"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-60147",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60147"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-60147",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-60147"
}
],
"release_date": "2026-07-21T20:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T12:13:17+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42876"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.src",
"7Server-ELS:java-1.8.0-openjdk-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-devel-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-ELS:java-1.8.0-openjdk-headless-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-accessibility-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-debuginfo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-demo-1:1.8.0.502.b07-1.1.el7_9.x86_64",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.502.b07-1.1.el7_9.noarch",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.i686",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.ppc64le",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.s390x",
"7Server-optional-ELS:java-1.8.0-openjdk-src-1:1.8.0.502.b07-1.1.el7_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openjdk: Improve certification checking (Oracle CPU 2026-07)"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…