{"id":"MGASA-2026-0572","summary":"Updated java-latest-openjdk, timezone, java-21-openjdk, java-17-openjdk packages fix security vulnerabilities","details":"Enhance PKCS5 padding. (CVE-2026-83374)\nEnhance TLS certificate handling. (CVE-2026-83376)\nImprove C2 loop transformations. (CVE-2026-83378)\nEnhance LDAP logins. (CVE-2026-83380)\nEnhance SASL Authentication. (CVE-2026-83381)\nEnhance WebRowSets. (CVE-2026-83387)\nEnhance HTTP Client Response Handling. (CVE-2026-83395)\nEnhance XML Processing. (CVE-2026-83400)\nEnhance XPath Expressions. (CVE-2026-87290)\nEnhance HTTP Server. (CVE-2026-87291)\nEnhance Network Clients. (CVE-2026-87292)\nEnhance Certificate Name Checks. (CVE-2026-87294)\nEnhance Template Handling. (CVE-2026-87367)\nEnhance HTTP Client. (CVE-2026-91332)\nImprove ciphertext handling. (CVE-2026-91333)\nEnhance JPEG loading. (CVE-2026-91334)\nEnhance Image Handling. (CVE-2026-91335)\nEnhance TLS handshakes. (CVE-2026-91373)\nEnhance jstatd. (CVE-2026-91374)\nEnhance jmod handling. (CVE-2026-91375)\nEnhance JShell. (CVE-2026-91379)\nEnhance Preferences. (CVE-2026-91380)\nEnhance HTTP client caching. (CVE-2026-91394)\nEnhance diagnostic sessions. (CVE-2026-91397)\nEnhance SOCKS5 support. (CVE-2026-91398)\nEnhance MIDI file handling. (CVE-2026-91400)\nEnhance zipfs. (CVE-2026-91410)\nEnhance font rendering. (CVE-2026-91415)\nEnhance GIF loading. (CVE-2026-91418)\nEnhance HTTP server parsing. (CVE-2026-91451)\nEnhance HTTP server. (CVE-2026-91452)\nImprove HTTP headers. (CVE-2026-91453)\nEnhance TLS Extensions. (CVE-2026-91461)\nEnhance krb5 tokens. (CVE-2026-91462)\nEnhance krb5 client. (CVE-2026-91463)\nEnhance Kerberos validation. (CVE-2026-91464)\nEnhance C2 comparisons. (CVE-2026-91487)\nEnhance Certificate Constraint Checking. (CVE-2026-101516)\n","modified":"2026-11-03T15:28:09.871659145Z","published":"2026-11-03T15:06:49Z","upstream":["CVE-2026-101516","CVE-2026-83374","CVE-2026-83376","CVE-2026-83378","CVE-2026-83380","CVE-2026-83381","CVE-2026-83387","CVE-2026-83395","CVE-2026-83400","CVE-2026-87290","CVE-2026-87291","CVE-2026-87292","CVE-2026-87294","CVE-2026-87367","CVE-2026-91332","CVE-2026-91333","CVE-2026-91334","CVE-2026-91335","CVE-2026-91373","CVE-2026-91374","CVE-2026-91375","CVE-2026-91379","CVE-2026-91380","CVE-2026-91394","CVE-2026-91397","CVE-2026-91398","CVE-2026-91400","CVE-2026-91410","CVE-2026-91415","CVE-2026-91418","CVE-2026-91451","CVE-2026-91452","CVE-2026-91453","CVE-2026-91461","CVE-2026-91462","CVE-2026-91463","CVE-2026-91464","CVE-2026-91487"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2026-0572.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=36274"},{"type":"WEB","url":"https://www.oracle.com/security-alerts/cpuoct2026.html#AppendixJAVA"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:88349"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:90500"}],"affected":[{"package":{"name":"java-21-openjdk","ecosystem":"Mageia:10","purl":"pkg:rpm/mageia/java-21-openjdk?arch=source&distro=mageia-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.13.0.9-1.mga10"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2026-0572.json"}},{"package":{"name":"java-17-openjdk","ecosystem":"Mageia:10","purl":"pkg:rpm/mageia/java-17-openjdk?arch=source&distro=mageia-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.21.0.9-1.mga10"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2026-0572.json"}},{"package":{"name":"java-latest-openjdk","ecosystem":"Mageia:10","purl":"pkg:rpm/mageia/java-latest-openjdk?arch=source&distro=mageia-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.5.0.8-1.rolling.1.mga10"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2026-0572.json"}},{"package":{"name":"timezone","ecosystem":"Mageia:10","purl":"pkg:rpm/mageia/timezone?arch=source&distro=mageia-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2026e-1.mga10"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2026-0572.json"}}],"schema_version":"1.9.2","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}