https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:10:41.819238+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:9683 ALSA-2026:9683 — Important: java-1.8.0-openjdk security update 2026-10-03T08:10:42.793919+00:00

Affected: AlmaLinux:8: java-1.8.0-openjdk, AlmaLinux:8: java-1.8.0-openjdk-accessibility, AlmaLinux:8: java-1.8.0-openjdk-accessibility-fastdebug, AlmaLinux:8: java-1.8.0-openjdk-accessibility-slowdebug, AlmaLinux:8: java-1.8.0-openjdk-demo, AlmaLinux:8: java-1.8.0-openjdk-demo-fastdebug, AlmaLinux:8: java-1.8.0-openjdk-demo-slowdebug, AlmaLinux:8: java-1.8.0-openjdk-devel, AlmaLinux:8: java-1.8.0-openjdk-devel-fastdebug, AlmaLinux:8: java-1.8.0-openjdk-devel-slowdebug and 27 more

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* JDK: Enhance crypto algorithm support (CVE-2026-22007) * JDK: Improve Kerberos credentialing (CVE-2026-22013) * JDK: Enhance Path Factories Redux (CVE-2026-22016) * JDK: Enhance Zip file reading (CVE-2026-22018) * JDK: Enhance certificate chain validation (CVE-2026-22021) * JDK: Updating FreeType 2.14.1 (CVE-2026-23865) * JDK: Enhance key generation (CVE-2026-34268)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2026-06615 bdu:2026-06615 2026-10-03T08:10:42.794057+00:00 bdu:2026-06615 https://cve.radiocsirt.org/vuln/bell-cve-2026-23865 BELL-CVE-2026-23865 2026-10-03T08:10:42.794078+00:00

Affected: Alpaquita:23: freetype, Alpaquita:23: openjdk-nik-23-17, Alpaquita:23: openjdk-nik-23-21, Alpaquita:23: openjdk-nik-25-25, Alpaquita:23: openjdk11, Alpaquita:23: openjdk11-container-jre, Alpaquita:23: openjdk11-lite, Alpaquita:23: openjdk11-perf, Alpaquita:23: openjdk17, Alpaquita:23: openjdk17-container-jre and 115 more

 https://cve.radiocsirt.org/vuln/bit-java-2026-23865 BIT-java-2026-23865 2026-10-03T08:10:42.794228+00:00

Affected: Bitnami: java

An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed in version 2.14.2.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0274 certfr-2026-avi-0274 — De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Certaines d'entre elles permettent à un at… 2026-10-03T08:10:42.794251+00:00 certfr-2026-avi-0274 https://cve.radiocsirt.org/vuln/cleanstart-2026-kv09488 Withdrawn: CLEANSTART-2026-KV09488 — Security fixes for CVE-2026-23865, CVE-2026-23868, CVE-2026-24281, CVE-2026-24308, CVE-2026-34479, CVE-2026-42577, ghsa… 2026-10-03T08:10:42.794268+00:00

Withdrawn by the publisher.

Affected: CleanStart: solr

Multiple security vulnerabilities affect the solr package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-274162 EUVD-2026-274162 2026-10-03T08:10:42.794290+00:00 EUVD-2026-274162 https://cve.radiocsirt.org/vuln/fkie_cve-2026-23865 fkie_cve-2026-23865 2026-10-03T08:10:42.794302+00:00

An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed in version 2.14.2.

 https://cve.radiocsirt.org/vuln/ghsa-878v-mxg6-vj8f GHSA-878v-mxg6-vj8f 2026-10-03T08:10:42.794323+00:00

An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed in version 2.14.2.

 https://cve.radiocsirt.org/vuln/jvndb-2026-016982 jvndb-2026-016982 2026-10-03T08:10:42.794338+00:00

Multiple vulnerabilities have been found in Hitachi Command Suite, Hitachi Automation Director, Hitachi Configuration Manager, Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center. CVE-2026-22007, CVE-2026-22013, CVE-2026-22016, CVE-2026-22018, CVE-2026-22021, CVE-2026-23865, CVE-2026-34268, CVE-2026-34282

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-23865 msrc_CVE-2026-23865 — An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.1… 2026-10-03T08:10:42.794356+00:00 msrc_CVE-2026-23865 https://cve.radiocsirt.org/vuln/oesa-2026-1574 OESA-2026-1574 — freetype security update 2026-10-03T08:10:42.794374+00:00

Affected: openEuler:24.03-LTS: freetype

FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality output (glyph images) of most vector and bitmap font formats Security Fix(es):

An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed in version 2.14.2.(CVE-2026-23865)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10289-1 openSUSE-SU-2026:10289-1 — freetype2-devel-2.14.2-1.1 on GA media 2026-10-03T08:10:42.794396+00:00

freetype2-devel-2.14.2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:22328 RHSA-2026:22328 — Red Hat Security Advisory: java-21-ibm-semeru-certified-jdk security update 2026-10-03T08:10:42.794413+00:00

Eclipse Open9J: Denial of Service in JITServer via crafted TCP message openjdk: Enhance crypto algorithm support (Oracle CPU 2026-04) openjdk: Improve Kerberos credentialing (Oracle CPU 2026-04) openjdk: Enhance Path Factories Redux (Oracle CPU 2026-04) openjdk: Enhance certificate chain validation (Oracle CPU 2026-04) freetype: Information disclosure or denial of service via specially crafted font files openjdk: Enhance key generation (Oracle CPU 2026-04) openjdk: Enhance TLS connection handling (Oracle CPU 2026-04)

 https://cve.radiocsirt.org/vuln/suse-su-2026:1703-1 SUSE-SU-2026:1703-1 — Security update for java-11-openjdk 2026-10-03T08:10:42.794441+00:00

Security update for java-11-openjdk

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-23865 UBUNTU-CVE-2026-23865 2026-10-03T08:10:42.794460+00:00

Affected: Ubuntu:Pro:16.04:LTS: openjdk-8, Ubuntu:16.04:LTS: openjdk-9, Ubuntu:Pro:18.04:LTS: openjdk-lts, Ubuntu:Pro:18.04:LTS: openjdk-17, Ubuntu:Pro:18.04:LTS: openjdk-8, Ubuntu:Pro:20.04:LTS: openjdk-lts, Ubuntu:20.04:LTS: openjdk-13, Ubuntu:20.04:LTS: openjdk-16, Ubuntu:Pro:20.04:LTS: openjdk-17, Ubuntu:Pro:20.04:LTS: openjdk-21 and 32 more

An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed in version 2.14.2.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0565 WID-SEC-W-2026-0565 — FreeType: Schwachstelle ermöglicht nicht spezifizierten Angriff 2026-10-03T08:10:42.794528+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in FreeType ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.