Most recent entries from all

ALSA-2026:9683 — Important: java-1.8.0-openjdk security update

Affected: AlmaLinux:8: java-1.8.0-openjdk, AlmaLinux:8: java-1.8.0-openjdk-accessibility, AlmaLinux:8: java-1.8.0-openjdk-accessibility-fastdebug, AlmaLinux:8: java-1.8.0-openjdk-accessibility-slowdebug, AlmaLinux:8: java-1.8.0-openjdk-demo, AlmaLinux:8: java-1.8.0-openjdk-demo-fastdebug, AlmaLinux:8: java-1.8.0-openjdk-demo-slowdebug, AlmaLinux:8: java-1.8.0-openjdk-devel, AlmaLinux:8: java-1.8.0-openjdk-devel-fastdebug, AlmaLinux:8: java-1.8.0-openjdk-devel-slowdebug and 27 more

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* JDK: Enhance crypto algorithm support (CVE-2026-22007) * JDK: Improve Kerberos credentialing (CVE-2026-22013) * JDK: Enhance Path Factories Redux (CVE-2026-22016) * JDK: Enhance Zip file reading (CVE-2026-22018) * JDK: Enhance certificate chain validation (CVE-2026-22021) * JDK: Updating FreeType 2.14.1 (CVE-2026-23865) * JDK: Enhance key generation (CVE-2026-34268)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2026-06615

BELL-CVE-2026-23865

Affected: Alpaquita:23: freetype, Alpaquita:23: openjdk-nik-23-17, Alpaquita:23: openjdk-nik-23-21, Alpaquita:23: openjdk-nik-25-25, Alpaquita:23: openjdk11, Alpaquita:23: openjdk11-container-jre, Alpaquita:23: openjdk11-lite, Alpaquita:23: openjdk11-perf, Alpaquita:23: openjdk17, Alpaquita:23: openjdk17-container-jre and 115 more

BIT-java-2026-23865

Affected: Bitnami: java

An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed in version 2.14.2.

certfr-2026-avi-0274 — De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Certaines d'entre elles permettent à un at…

certfr-2026-avi-0274

Withdrawn: CLEANSTART-2026-KV09488 — Security fixes for CVE-2026-23865, CVE-2026-23868, CVE-2026-24281, CVE-2026-24308, CVE-2026-34479, CVE-2026-42577, ghsa…

Withdrawn by the publisher.

Affected: CleanStart: solr

Multiple security vulnerabilities affect the solr package. These issues are resolved in later releases. See references for individual vulnerability details.

EUVD-2026-274162

fkie_cve-2026-23865

GHSA-878v-mxg6-vj8f

jvndb-2026-016982

Multiple vulnerabilities have been found in Hitachi Command Suite, Hitachi Automation Director, Hitachi Configuration Manager, Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center. CVE-2026-22007, CVE-2026-22013, CVE-2026-22016, CVE-2026-22018, CVE-2026-22021, CVE-2026-23865, CVE-2026-34268, CVE-2026-34282

msrc_CVE-2026-23865 — An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.1…

msrc_CVE-2026-23865

OESA-2026-1574 — freetype security update

Affected: openEuler:24.03-LTS: freetype

FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality output (glyph images) of most vector and bitmap font formats Security Fix(es):

openSUSE-SU-2026:10289-1 — freetype2-devel-2.14.2-1.1 on GA media

freetype2-devel-2.14.2-1.1 on GA media

RHSA-2026:22328 — Red Hat Security Advisory: java-21-ibm-semeru-certified-jdk security update

Eclipse Open9J: Denial of Service in JITServer via crafted TCP message openjdk: Enhance crypto algorithm support (Oracle CPU 2026-04) openjdk: Improve Kerberos credentialing (Oracle CPU 2026-04) openjdk: Enhance Path Factories Redux (Oracle CPU 2026-04) openjdk: Enhance certificate chain validation (Oracle CPU 2026-04) freetype: Information disclosure or denial of service via specially crafted font files openjdk: Enhance key generation (Oracle CPU 2026-04) openjdk: Enhance TLS connection handling (Oracle CPU 2026-04)

SUSE-SU-2026:1703-1 — Security update for java-11-openjdk

Security update for java-11-openjdk

UBUNTU-CVE-2026-23865

Affected: Ubuntu:Pro:16.04:LTS: openjdk-8, Ubuntu:16.04:LTS: openjdk-9, Ubuntu:Pro:18.04:LTS: openjdk-lts, Ubuntu:Pro:18.04:LTS: openjdk-17, Ubuntu:Pro:18.04:LTS: openjdk-8, Ubuntu:Pro:20.04:LTS: openjdk-lts, Ubuntu:20.04:LTS: openjdk-13, Ubuntu:20.04:LTS: openjdk-16, Ubuntu:Pro:20.04:LTS: openjdk-17, Ubuntu:Pro:20.04:LTS: openjdk-21 and 32 more

WID-SEC-W-2026-0565 — FreeType: Schwachstelle ermöglicht nicht spezifizierten Angriff

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in FreeType ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.