CVE catalog
CVE-2026-41254
Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.
- Severity
- High · CVSS 7.5
- Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.36% · Oct 25, 2026
Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | lcms2 | sid | 2.19.1-1 | fixed |
| Debian | lcms2 | forky | 2.19.1-1 | fixed |
| Debian | lcms2 | trixie | 2.16-2+deb13u2 | fixed |
| Debian | lcms2 | trixie-security | 2.16-2+deb13u2 | fixed |
| Debian | lcms2 | bookworm | 2.14-2+deb12u1 | fixed |
| Debian | lcms2 | bookworm-security | 2.14-2+deb12u1 | fixed |
| Debian | openjdk-17 | sid | 17.0.21+9-1 | fixed |
| Debian | openjdk-17 | bookworm | 17.0.19+10-1~deb12u2 | vulnerable |
| Debian | openjdk-17 | bookworm-security | 17.0.21+9-1~deb12u1 | fixed |
| Cpe | lcms2 | Not reported | 2.14-2ubuntu0.1 | fixed |
| Cpe | liblcms2-2 | Not reported | 2.14-2ubuntu0.1 | fixed |
| Cpe | liblcms2-dev | Not reported | 2.14-2ubuntu0.1 | fixed |
| Cpe | liblcms2-utils | Not reported | 2.14-2ubuntu0.1 | fixed |
| Cpe | little_cms | Not reported | Not reported | unknown |
| Cpe | lcms2 | Not reported | 2.14-2+deb12u1 | fixed |
| Ubuntu | openjdk-25 | noble | 25.0.4+7-1~24.04 | fixed |
| Ubuntu | openjdk-25-demo | noble | 25.0.4+7-1~24.04 | fixed |
| Ubuntu | openjdk-25-doc | noble | 25.0.4+7-1~24.04 | fixed |
| Ubuntu | openjdk-25-jdk | noble | 25.0.4+7-1~24.04 | fixed |
| Ubuntu | openjdk-25-jdk-headless | noble | 25.0.4+7-1~24.04 | fixed |
| Ubuntu | openjdk-25-jre | noble | 25.0.4+7-1~24.04 | fixed |
| Ubuntu | openjdk-25-jre-headless | noble | 25.0.4+7-1~24.04 | fixed |
| Ubuntu | openjdk-25-jre-zero | noble | 25.0.4+7-1~24.04 | fixed |
| Ubuntu | openjdk-25-source | noble | 25.0.4+7-1~24.04 | fixed |
| Ubuntu | openjdk-25-testsupport | noble | 25.0.4+7-1~24.04 | fixed |
| Ubuntu | openjdk-21 | noble | 21.0.12+8-1~24.04 | fixed |
| Ubuntu | openjdk-21-demo | noble | 21.0.12+8-1~24.04 | fixed |
| Ubuntu | openjdk-21-doc | noble | 21.0.12+8-1~24.04 | fixed |
| Ubuntu | openjdk-21-jdk | noble | 21.0.12+8-1~24.04 | fixed |
| Ubuntu | openjdk-21-jdk-headless | noble | 21.0.12+8-1~24.04 | fixed |
| Ubuntu | openjdk-21-jre | noble | 21.0.12+8-1~24.04 | fixed |
| Ubuntu | openjdk-21-jre-headless | noble | 21.0.12+8-1~24.04 | fixed |
| Ubuntu | openjdk-21-jre-zero | noble | 21.0.12+8-1~24.04 | fixed |
| Ubuntu | openjdk-21-source | noble | 21.0.12+8-1~24.04 | fixed |
| Ubuntu | openjdk-21-testsupport | noble | 21.0.12+8-1~24.04 | fixed |
| Ubuntu | openjdk-17 | noble | 17.0.20+8-1~24.04 | fixed |
| Ubuntu | openjdk-17-demo | noble | 17.0.20+8-1~24.04 | fixed |
| Ubuntu | openjdk-17-doc | noble | 17.0.20+8-1~24.04 | fixed |
| Ubuntu | openjdk-17-jdk | noble | 17.0.20+8-1~24.04 | fixed |
| Ubuntu | openjdk-17-jdk-headless | noble | 17.0.20+8-1~24.04 | fixed |
| Ubuntu | openjdk-17-jre | noble | 17.0.20+8-1~24.04 | fixed |
| Ubuntu | openjdk-17-jre-headless | noble | 17.0.20+8-1~24.04 | fixed |
| Ubuntu | openjdk-17-jre-zero | noble | 17.0.20+8-1~24.04 | fixed |
| Ubuntu | openjdk-17-source | noble | 17.0.20+8-1~24.04 | fixed |
| Ubuntu | openjdk-lts | noble | 11.0.32+9-1ubuntu1~24.04 | fixed |
| Ubuntu | openjdk-11-demo | noble | 11.0.32+9-1ubuntu1~24.04 | fixed |
| Ubuntu | openjdk-11-doc | noble | 11.0.32+9-1ubuntu1~24.04 | fixed |
| Ubuntu | openjdk-11-jdk | noble | 11.0.32+9-1ubuntu1~24.04 | fixed |
| Ubuntu | openjdk-11-jdk-headless | noble | 11.0.32+9-1ubuntu1~24.04 | fixed |
| Ubuntu | openjdk-11-jre | noble | 11.0.32+9-1ubuntu1~24.04 | fixed |
| Ubuntu | openjdk-11-jre-headless | noble | 11.0.32+9-1ubuntu1~24.04 | fixed |
| Ubuntu | openjdk-11-jre-zero | noble | 11.0.32+9-1ubuntu1~24.04 | fixed |
| Ubuntu | openjdk-11-source | noble | 11.0.32+9-1ubuntu1~24.04 | fixed |
| Ubuntu | openjdk-8 | noble | 8u502-ga~us1-0ubuntu1~24.04 | fixed |
| Ubuntu | openjdk-8-demo | noble | 8u502-ga~us1-0ubuntu1~24.04 | fixed |
| Ubuntu | openjdk-8-doc | noble | 8u502-ga~us1-0ubuntu1~24.04 | fixed |
| Ubuntu | openjdk-8-jdk | noble | 8u502-ga~us1-0ubuntu1~24.04 | fixed |
| Ubuntu | openjdk-8-jdk-headless | noble | 8u502-ga~us1-0ubuntu1~24.04 | fixed |
| Ubuntu | openjdk-8-jre | noble | 8u502-ga~us1-0ubuntu1~24.04 | fixed |
| Ubuntu | openjdk-8-jre-headless | noble | 8u502-ga~us1-0ubuntu1~24.04 | fixed |
| Ubuntu | openjdk-8-jre-zero | noble | 8u502-ga~us1-0ubuntu1~24.04 | fixed |
| Ubuntu | openjdk-8-source | noble | 8u502-ga~us1-0ubuntu1~24.04 | fixed |
| Alpine | lcms2 | 3.20 | 2.19-r0 | fixed |
| Alpine | lcms2 | 3.21 | 2.19-r0 | fixed |
| Alpine | lcms2 | 3.22 | 2.19-r0 | fixed |
| Alpine | lcms2 | 3.23 | 2.19-r0 | fixed |
| Alpine | lcms2 | 3.24 | 2.19-r0 | fixed |
| Suse | lcms2 | linux enterprise module for basesystem 15 sp7 | 2.15-150600.3.6.1 | fixed |
| Suse | lcms2 | linux enterprise module for package hub 15 sp7 | 2.15-150600.3.6.1 | fixed |
| Suse | lcms2 | linux micro 6.0 | 2.16-2.1 | fixed |
| Suse | lcms2 | linux enterprise micro 5.3 | 2.12-150400.3.3.1 | fixed |
| Suse | lcms2 | linux enterprise micro 5.4 | 2.12-150400.3.3.1 | fixed |
| Suse | lcms2 | linux enterprise micro 5.5 | 2.12-150400.3.3.1 | fixed |
| Suse | lcms2 | linux enterprise server ltss extended security 12 sp5 | 2.7-9.13.1 | fixed |
| Ubuntu | openjdk-25-crac | 26.04 | 25+36-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-25-crac | 26.04 | 25.0.1+8-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-25-crac | 26.04 | 25.0.2+10-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-25-crac | 26.04 | 25.0.3+9-0ubuntu1~26.04.1 | vulnerable |
| Ubuntu | openjdk-25-crac | 26.04 | 25.0.4+7-0ubuntu1~26.04 | fixed |
| Ubuntu | openjdk-17-crac | 26.04 | 17.0.16+8-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-17-crac | 26.04 | 17.0.17+10-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-17-crac | 26.04 | 17.0.18+8-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-17-crac | 26.04 | 17.0.19+10-0ubuntu1~26.04.1 | vulnerable |
| Ubuntu | openjdk-17-crac | 26.04 | 17.0.20+8-0ubuntu1~26.04 | fixed |
| Ubuntu | openjdk-21-crac | 26.04 | 21.0.8+9-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-21-crac | 26.04 | 21.0.9+10-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-21-crac | 26.04 | 21.0.10+7-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-21-crac | 26.04 | 21.0.11+10-0ubuntu1~26.04.1 | vulnerable |
| Ubuntu | openjdk-21-crac | 26.04 | 21.0.12+8-0ubuntu1~26.04 | fixed |
| Ubuntu | openjdk-26 | 26.04 | 26~17ea-1 | vulnerable |
| Ubuntu | openjdk-26 | 26.04 | 26~26ea-1 | vulnerable |
| Ubuntu | openjdk-26 | 26.04 | 26~28ea-1 | vulnerable |
| Ubuntu | openjdk-26 | 26.04 | 26~30ea-1 | vulnerable |
| Ubuntu | openjdk-26 | 26.04 | 26~32ea-1 | vulnerable |
| Ubuntu | openjdk-26 | 26.04 | 26~34ea-1 | vulnerable |
| Ubuntu | openjdk-26 | 26.04 | 26.0.1+8-2~26.04.2 | vulnerable |
| Ubuntu | openjdk-26 | 26.04 | 26.0.2+10-2~26.04.2 | fixed |
| Ubuntu | openjdk-lts | pro | 11.0.5+10-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.5+10-2ubuntu1 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.6+10-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.6+10-2ubuntu2 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.7+9-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.7+10-2ubuntu1 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.7+10-3ubuntu1 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.8+10-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.9+11-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.9.1+1-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.10+9-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.11+9-0ubuntu2~20.04 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.13+8-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.14+9-0ubuntu2~20.04 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.14.1+1-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.15+10-0ubuntu0.20.04.1 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.16+8-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.17+8-1ubuntu2~20.04 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.18+10-0ubuntu1~20.04.1 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.19+7~us1-0ubuntu1~20.04.1 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.20+8-1ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.20.1+1-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.21+9-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.22+7-0ubuntu2~20.04.1 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.23+9-1ubuntu1~20.04.2 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.24+8-1ubuntu3~20.04 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.25+9-1ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.26+4-1ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.27+6~us1-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.28+6-1ubuntu1~20.04.1 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.29+7-1ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.30+7-1ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.31+11-1ubuntu1~20.04.2 | vulnerable |
| Ubuntu | openjdk-lts | pro | 11.0.32+9-1ubuntu1~20.04 | fixed |
| Ubuntu | openjdk-lts | 22.04 | 11.0.12+7-0ubuntu3 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.13+8-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.14+9-0ubuntu2 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.14.1+1-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.15+10-0ubuntu0.22.04.1 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.16+8-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.17+8-1ubuntu2~22.04 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.18+10-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.19+7~us1-0ubuntu1~22.04.1 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.20+8-1ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.20.1+1-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.21+9-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.22+7-0ubuntu2~22.04.1 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.23+9-1ubuntu1~22.04.1 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.24+8-1ubuntu3~22.04 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.25+9-1ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.26+4-1ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.27+6~us1-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.28+6-1ubuntu1~22.04.1 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.29+7-1ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.30+7-1ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.31+11-1ubuntu1~22.04.2 | vulnerable |
| Ubuntu | openjdk-lts | 22.04 | 11.0.32+9-1ubuntu1~22.04 | fixed |
| Ubuntu | openjdk-lts | 24.04 | 11.0.20+8-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-lts | 24.04 | 11.0.21+9-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-lts | 24.04 | 11.0.22+7-0ubuntu2 | vulnerable |
| Ubuntu | openjdk-lts | 24.04 | 11.0.23~7ea-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-lts | 24.04 | 11.0.23~7ea-1ubuntu2 | vulnerable |
| Ubuntu | openjdk-lts | 24.04 | 11.0.23+9-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-lts | 24.04 | 11.0.24+8-1ubuntu3~24.04.1 | vulnerable |
| Ubuntu | openjdk-lts | 24.04 | 11.0.25+9-1ubuntu1~24.04 | vulnerable |
| Ubuntu | openjdk-lts | 24.04 | 11.0.26+4-1ubuntu1~24.04 | vulnerable |
| Ubuntu | openjdk-lts | 24.04 | 11.0.27+6~us1-0ubuntu1~24.04 | vulnerable |
| Ubuntu | openjdk-lts | 24.04 | 11.0.28+6-1ubuntu1~24.04.1 | vulnerable |
| Ubuntu | openjdk-lts | 24.04 | 11.0.29+7-1ubuntu1~24.04 | vulnerable |
| Ubuntu | openjdk-lts | 24.04 | 11.0.30+7-1ubuntu1~24.04 | vulnerable |
| Ubuntu | openjdk-lts | 24.04 | 11.0.31+11-1ubuntu1~24.04.2 | vulnerable |
| Ubuntu | openjdk-lts | 24.04 | 11.0.32+9-1ubuntu1~24.04 | fixed |
| Ubuntu | openjdk-lts | 26.04 | 11.0.28+6-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-lts | 26.04 | 11.0.29+7-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-lts | 26.04 | 11.0.30+7-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-lts | 26.04 | 11.0.31+11-1ubuntu1~26.04.2 | vulnerable |
| Ubuntu | openjdk-lts | 26.04 | 11.0.32+9-1ubuntu1~26.04 | fixed |
| Ubuntu | openjdk-25 | 22.04 | 25+36-1~22.04.2 | vulnerable |
| Ubuntu | openjdk-25 | 22.04 | 25.0.1+8-1~22.04 | vulnerable |
| Ubuntu | openjdk-25 | 22.04 | 25.0.2+10-1~22.04 | vulnerable |
| Ubuntu | openjdk-25 | 22.04 | 25.0.3+9-2~22.04.2 | vulnerable |
| Ubuntu | openjdk-25 | 22.04 | 25.0.4+7-1~22.04 | fixed |
| Ubuntu | openjdk-25 | 24.04 | 25+36-1~24.04.2 | vulnerable |
| Ubuntu | openjdk-25 | 24.04 | 25.0.1+8-1~24.04 | vulnerable |
| Ubuntu | openjdk-25 | 24.04 | 25.0.2+10-1~24.04 | vulnerable |
| Ubuntu | openjdk-25 | 24.04 | 25.0.3+9-2~24.04.2 | vulnerable |
| Ubuntu | openjdk-25 | 24.04 | 25.0.4+7-1~24.04 | fixed |
| Ubuntu | openjdk-25 | 26.04 | 25+36-1 | vulnerable |
| Ubuntu | openjdk-25 | 26.04 | 25.0.1+8-1 | vulnerable |
| Ubuntu | openjdk-25 | 26.04 | 25.0.1+8-2 | vulnerable |
| Ubuntu | openjdk-25 | 26.04 | 25.0.1+8-3 | vulnerable |
| Ubuntu | openjdk-25 | 26.04 | 25.0.2+10-1 | vulnerable |
| Ubuntu | openjdk-25 | 26.04 | 25.0.3~5ea-2 | vulnerable |
| Ubuntu | openjdk-25 | 26.04 | 25.0.3~7ea-2 | vulnerable |
| Ubuntu | openjdk-25 | 26.04 | 25.0.3+9-2~26.04.2 | vulnerable |
| Ubuntu | openjdk-25 | 26.04 | 25.0.4+7-1~26.04 | fixed |
| Ubuntu | openjdk-21 | pro | 21.0.1+12-2~20.04.1 | vulnerable |
| Ubuntu | openjdk-21 | pro | 21.0.2+13-1~20.04.1 | vulnerable |
| Ubuntu | openjdk-21 | pro | 21.0.3+9-1ubuntu1~20.04.1 | vulnerable |
| Ubuntu | openjdk-21 | pro | 21.0.4+7-1ubuntu2~20.04 | vulnerable |
| Ubuntu | openjdk-21 | pro | 21.0.5+11-1ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-21 | pro | 21.0.6+7-1~20.04.1 | vulnerable |
| Ubuntu | openjdk-21 | pro | 21.0.7+6~us1-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-21 | pro | 21.0.8+9~us1-0ubuntu1~20.04.1 | vulnerable |
| Ubuntu | openjdk-21 | pro | 21.0.9+10-1~20.04 | vulnerable |
| Ubuntu | openjdk-21 | pro | 21.0.10+7-1~20.04 | vulnerable |
| Ubuntu | openjdk-21 | pro | 21.0.11+10-1~20.04.2 | vulnerable |
| Ubuntu | openjdk-21 | pro | 21.0.12+8-1~20.04 | fixed |
| Ubuntu | openjdk-21 | 22.04 | 21.0.1+12-2~22.04 | vulnerable |
| Ubuntu | openjdk-21 | 22.04 | 21.0.2+13-1~22.04.1 | vulnerable |
| Ubuntu | openjdk-21 | 22.04 | 21.0.3+9-1ubuntu1~22.04.1 | vulnerable |
| Ubuntu | openjdk-21 | 22.04 | 21.0.4+7-1ubuntu2~22.04 | vulnerable |
| Ubuntu | openjdk-21 | 22.04 | 21.0.5+11-1ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-21 | 22.04 | 21.0.6+7-1~22.04.1 | vulnerable |
| Ubuntu | openjdk-21 | 22.04 | 21.0.7+6~us1-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-21 | 22.04 | 21.0.8+9~us1-0ubuntu1~22.04.1 | vulnerable |
| Ubuntu | openjdk-21 | 22.04 | 21.0.9+10-1~22.04 | vulnerable |
| Ubuntu | openjdk-21 | 22.04 | 21.0.10+7-1~22.04 | vulnerable |
| Ubuntu | openjdk-21 | 22.04 | 21.0.11+10-1~22.04.2 | vulnerable |
| Ubuntu | openjdk-21 | 22.04 | 21.0.12+8-1~22.04 | fixed |
| Ubuntu | openjdk-21 | 24.04 | 21+35-1 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.1+12-2 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.1+12-3 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.2+13-1 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.2+13-2 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.3~7ea-1 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.3~7ea-1build1 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.3~7ea-1build2 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.3+9-1 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.3+9-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.4+7-1ubuntu2~24.04 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.5+11-1ubuntu1~24.04 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.6+7-1~24.04.1 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.7+6~us1-0ubuntu1~24.04 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.8+9~us1-0ubuntu1~24.04.1 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.9+10-1~24.04 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.10+7-1~24.04 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.11+10-1~24.04.2 | vulnerable |
| Ubuntu | openjdk-21 | 24.04 | 21.0.12+8-1~24.04 | fixed |
| Ubuntu | openjdk-21 | 26.04 | 21.0.9~8ea-1 | vulnerable |
| Ubuntu | openjdk-21 | 26.04 | 21.0.9+10-1 | vulnerable |
| Ubuntu | openjdk-21 | 26.04 | 21.0.10~4ea-1 | vulnerable |
| Ubuntu | openjdk-21 | 26.04 | 21.0.10~6ea-1 | vulnerable |
| Ubuntu | openjdk-21 | 26.04 | 21.0.10+7-1 | vulnerable |
| Ubuntu | openjdk-21 | 26.04 | 21.0.11~5ea-1 | vulnerable |
| Ubuntu | openjdk-21 | 26.04 | 21.0.11~8ea-1 | vulnerable |
| Ubuntu | openjdk-21 | 26.04 | 21.0.11+10-1~26.04.2 | vulnerable |
| Ubuntu | openjdk-21 | 26.04 | 21.0.12+8-1~26.04 | fixed |
| Ubuntu | openjdk-17 | pro | 17+35-1~20.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.1+12-1~20.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.2+8-1~20.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.3+7-0ubuntu0.20.04.1 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.4+8-1~20.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.5+8-2ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.6+10-0ubuntu1~20.04.1 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.7+7~us1-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.8+7-1~20.04.2 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.8.1+1~us1-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.9+9-1~20.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.10+7-1~20.04.1 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.11+9-1~20.04.2 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.12+7-1ubuntu2~20.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.13+11-2ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.14+7-1~20.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.15+6~us1-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.16+8~us1-0ubuntu1~20.04.6 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.17+10-1~20.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.18+8-1~20.04 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.19+10-1~20.04.2 | vulnerable |
| Ubuntu | openjdk-17 | pro | 17.0.20+8-1~20.04 | fixed |
| Ubuntu | openjdk-17 | 22.04 | 17+35-1 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.1+12-1 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.2+8-1 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.3+7-0ubuntu0.22.04.1 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.4+8-1~22.04 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.5+8-2ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.6+10-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.7+7~us1-0ubuntu1~22.04.2 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.8+7-1~22.04 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.8.1+1~us1-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.9+9-1~22.04 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.10+7-1~22.04.1 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.11+9-1~22.04.1 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.12+7-1ubuntu2~22.04 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.13+11-2ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.14+7-1~22.04.1 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.15+6~us1-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.16+8~us1-0ubuntu1~22.04.1 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.17+10-1~22.04 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.18+8-1~22.04.1 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.19+10-1~22.04.2 | vulnerable |
| Ubuntu | openjdk-17 | 22.04 | 17.0.20+8-1~22.04 | fixed |
| Ubuntu | openjdk-17 | 24.04 | 17.0.9~6ea-1 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.9+9-1 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.9+9-2 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.10~6ea-1 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.10+7-1 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.11~7ea-1 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.11~7ea-1build1 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.11+9-1 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.12+7-1ubuntu2~24.04 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.13+11-2ubuntu1~24.04 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.14+7-1~24.04 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.15+6~us1-0ubuntu1~24.04 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.16+8~us1-0ubuntu1~24.04.1 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.17+10-1~24.04 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.18+8-1~24.04.1 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.19+10-1~24.04.2 | vulnerable |
| Ubuntu | openjdk-17 | 24.04 | 17.0.20+8-1~24.04 | fixed |
| Ubuntu | openjdk-17 | 26.04 | 17.0.17~8ea-1 | vulnerable |
| Ubuntu | openjdk-17 | 26.04 | 17.0.17+10-1 | vulnerable |
| Ubuntu | openjdk-17 | 26.04 | 17.0.18~7ea-1 | vulnerable |
| Ubuntu | openjdk-17 | 26.04 | 17.0.18+8-1 | vulnerable |
| Ubuntu | openjdk-17 | 26.04 | 17.0.19+10-1~26.04.2 | vulnerable |
| Ubuntu | openjdk-17 | 26.04 | 17.0.20+8-1~26.04 | fixed |
| Ubuntu | openjdk-8 | pro | 8u232-b09-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u232-b09-1 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u242-b04-1 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u242-b08-0ubuntu3 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u252-b07-1 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u252-b09-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u265-b01-0ubuntu2~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u272-b10-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u275-b01-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u282-b08-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u292-b10-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u312-b07-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u342-b07-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u352-ga-1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u362-ga-0ubuntu1~20.04.1 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u372-ga~us1-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u382-ga-1~20.04.1 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u392-ga-1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u402-ga-2ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u412-ga-1~20.04.1 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u422-b05-1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u432-ga~us1-0ubuntu2~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u442-b06~us1-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u452-ga~us1-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u462-ga~us1-0ubuntu2~20.04.2 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u472-ga-1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u482-ga~us1-0ubuntu1~20.04 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u492-ga~us2-0ubuntu1~20.04.1 | vulnerable |
| Ubuntu | openjdk-8 | pro | 8u502-ga~us1-0ubuntu1~20.04 | fixed |
| Ubuntu | openjdk-8 | 22.04 | 8u302-b08-0ubuntu2 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u312-b07-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u342-b07-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u352-ga-1~22.04 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u362-ga-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u372-ga~us1-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u382-ga-1~22.04.1 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u392-ga-1~22.04 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u402-ga-2ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u412-ga-1~22.04.1 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u422-b05-1~22.04 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u432-ga~us1-0ubuntu2~22.04 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u442-b06~us1-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u452-ga~us1-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u462-ga~us1-0ubuntu2~22.04.2 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u472-ga-1~22.04 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u482-ga~us1-0ubuntu1~22.04 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u492-ga~us2-0ubuntu1~22.04.1 | vulnerable |
| Ubuntu | openjdk-8 | 22.04 | 8u502-ga~us1-0ubuntu1~22.04 | fixed |
| Ubuntu | openjdk-8 | 24.04 | 8u382-ga-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u392-ga-1 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u402-ga-1 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u402-ga-2 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u402-ga-2ubuntu1 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u402-ga-2ubuntu6 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u402-ga-2ubuntu7 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u402-ga-8build1 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u412-ga-1~24.04.2 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u422-b05-1~24.04 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u432-ga~us1-0ubuntu2~24.04 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u442-b06~us1-0ubuntu1~24.04 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u452-ga~us1-0ubuntu1~24.04 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u462-ga~us1-0ubuntu2~24.04.2 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u472-ga-1~24.04 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u482-ga~us1-0ubuntu1~24.04 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u492-ga~us2-0ubuntu1~24.04.1 | vulnerable |
| Ubuntu | openjdk-8 | 24.04 | 8u502-ga~us1-0ubuntu1~24.04 | fixed |
| Ubuntu | openjdk-8 | 26.04 | 8u462-ga-1 | vulnerable |
| Ubuntu | openjdk-8 | 26.04 | 8u472-ga~us1-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-8 | 26.04 | 8u472-ga-1 | vulnerable |
| Ubuntu | openjdk-8 | 26.04 | 8u482-ga~us1-0ubuntu1 | vulnerable |
| Ubuntu | openjdk-8 | 26.04 | 8u492-ga~us2-0ubuntu1~26.04.1 | vulnerable |
| Ubuntu | openjdk-8 | 26.04 | 8u502-ga~us1-0ubuntu1~26.04 | fixed |
| Suse | java-1_8_0-openjdk | linux enterprise module for legacy 15 sp7 | 1.8.0.502-150000.3.123.1 | fixed |
| Suse | java-1_8_0-openjdk | linux enterprise high performance computing 15 sp4-espos | 1.8.0.502-150000.3.123.1 | fixed |
| Suse | java-1_8_0-openjdk | linux enterprise high performance computing 15 sp4-ltss | 1.8.0.502-150000.3.123.1 | fixed |
| Suse | java-1_8_0-openjdk | linux enterprise server 15 sp4-ltss | 1.8.0.502-150000.3.123.1 | fixed |
| Suse | java-1_8_0-openjdk | linux enterprise server 15 sp5-ltss | 1.8.0.502-150000.3.123.1 | fixed |
| Suse | java-1_8_0-openjdk | linux enterprise server 15 sp6-ltss | 1.8.0.502-150000.3.123.1 | fixed |
| Suse | java-1_8_0-openjdk | linux enterprise server for sap applications 15 sp4 | 1.8.0.502-150000.3.123.1 | fixed |
| Suse | java-1_8_0-openjdk | linux enterprise server for sap applications 15 sp5 | 1.8.0.502-150000.3.123.1 | fixed |
| Suse | java-1_8_0-openjdk | linux enterprise server for sap applications 15 sp6 | 1.8.0.502-150000.3.123.1 | fixed |
| Suse | java-1_8_0-openjdk | linux enterprise server 12 sp5-ltss | 1.8.0.502-27.131.1 | fixed |
| Suse | java-1_8_0-openjdk | linux enterprise server ltss extended security 12 sp5 | 1.8.0.502-27.131.1 | fixed |
| Suse | java-1_8_0-ibm | linux enterprise module for legacy 15 sp7 | 1.8.0_sr8.70-150000.3.119.1 | fixed |
| Suse | java-1_8_0-ibm | linux enterprise high performance computing 15 sp4-espos | 1.8.0_sr8.70-150000.3.119.1 | fixed |
| Suse | java-1_8_0-ibm | linux enterprise high performance computing 15 sp4-ltss | 1.8.0_sr8.70-150000.3.119.1 | fixed |
| Suse | java-1_8_0-ibm | linux enterprise server 15 sp4-ltss | 1.8.0_sr8.70-150000.3.119.1 | fixed |
| Suse | java-1_8_0-ibm | linux enterprise server 15 sp5-ltss | 1.8.0_sr8.70-150000.3.119.1 | fixed |
| Suse | java-1_8_0-ibm | linux enterprise server 15 sp6-ltss | 1.8.0_sr8.70-150000.3.119.1 | fixed |
| Suse | java-1_8_0-ibm | linux enterprise server for sap applications 15 sp4 | 1.8.0_sr8.70-150000.3.119.1 | fixed |
| Suse | java-1_8_0-ibm | linux enterprise server for sap applications 15 sp5 | 1.8.0_sr8.70-150000.3.119.1 | fixed |
| Suse | java-1_8_0-ibm | linux enterprise server for sap applications 15 sp6 | 1.8.0_sr8.70-150000.3.119.1 | fixed |
| Suse | java-1_8_0-ibm | linux enterprise server 12 sp5-ltss | 1.8.0_sr8.70-30.153.1 | fixed |
| Suse | java-1_8_0-ibm | linux enterprise server ltss extended security 12 sp5 | 1.8.0_sr8.70-30.153.1 | fixed |
| Opensuse | java-21-openj9 | tumbleweed | 21.0.12.0-1.1 | fixed |
| Opensuse | java-11-openj9 | tumbleweed | 11.0.32.0-1.1 | fixed |
| Opensuse | java-17-openj9 | tumbleweed | 17.0.20.0-1.1 | fixed |
| Opensuse | java-25-openj9 | tumbleweed | 25.0.4.0-1.1 | fixed |
| Opensuse | java-1_8_0-openjdk | tumbleweed | 1.8.0.502-1.1 | fixed |
| Suse | java-11-openjdk | linux enterprise module for legacy 15 sp7 | 11.0.32.0-150000.3.141.1 | fixed |
| Suse | java-11-openjdk | linux enterprise module for package hub 15 sp7 | 11.0.32.0-150000.3.141.1 | fixed |
| Suse | java-11-openjdk | linux enterprise high performance computing 15 sp4-espos | 11.0.32.0-150000.3.141.1 | fixed |
| Suse | java-11-openjdk | linux enterprise high performance computing 15 sp4-ltss | 11.0.32.0-150000.3.141.1 | fixed |
| Suse | java-11-openjdk | linux enterprise high performance computing 15 sp5-espos | 11.0.32.0-150000.3.141.1 | fixed |
| Suse | java-11-openjdk | linux enterprise high performance computing 15 sp5-ltss | 11.0.32.0-150000.3.141.1 | fixed |
| Suse | java-11-openjdk | linux enterprise server 15 sp4-ltss | 11.0.32.0-150000.3.141.1 | fixed |
| Suse | java-11-openjdk | linux enterprise server 15 sp5-ltss | 11.0.32.0-150000.3.141.1 | fixed |
| Suse | java-11-openjdk | linux enterprise server 15 sp6-ltss | 11.0.32.0-150000.3.141.1 | fixed |
| Suse | java-11-openjdk | linux enterprise server for sap applications 15 sp4 | 11.0.32.0-150000.3.141.1 | fixed |
| Suse | java-11-openjdk | linux enterprise server for sap applications 15 sp5 | 11.0.32.0-150000.3.141.1 | fixed |
| Suse | java-11-openjdk | linux enterprise server for sap applications 15 sp6 | 11.0.32.0-150000.3.141.1 | fixed |
| Suse | java-17-openjdk | linux enterprise module for legacy 15 sp7 | 17.0.20.0-150400.3.69.1 | fixed |
| Suse | java-17-openjdk | linux enterprise high performance computing 15 sp4-espos | 17.0.20.0-150400.3.69.1 | fixed |
| Suse | java-17-openjdk | linux enterprise high performance computing 15 sp4-ltss | 17.0.20.0-150400.3.69.1 | fixed |
| Suse | java-17-openjdk | linux enterprise high performance computing 15 sp5-espos | 17.0.20.0-150400.3.69.1 | fixed |
| Suse | java-17-openjdk | linux enterprise high performance computing 15 sp5-ltss | 17.0.20.0-150400.3.69.1 | fixed |
| Suse | java-17-openjdk | linux enterprise server 15 sp4-ltss | 17.0.20.0-150400.3.69.1 | fixed |
| Suse | java-17-openjdk | linux enterprise server 15 sp5-ltss | 17.0.20.0-150400.3.69.1 | fixed |
| Suse | java-17-openjdk | linux enterprise server 15 sp6-ltss | 17.0.20.0-150400.3.69.1 | fixed |
| Suse | java-17-openjdk | linux enterprise server for sap applications 15 sp4 | 17.0.20.0-150400.3.69.1 | fixed |
| Suse | java-17-openjdk | linux enterprise server for sap applications 15 sp5 | 17.0.20.0-150400.3.69.1 | fixed |
| Suse | java-17-openjdk | linux enterprise server for sap applications 15 sp6 | 17.0.20.0-150400.3.69.1 | fixed |
| Opensuse | java-21-openjdk | leap 16.0 | 21.0.12.0-160000.1.1 | fixed |
| Opensuse | java-25-openjdk | leap 16.0 | 25.0.4.0-160000.1.1 | fixed |
| Suse | java-21-openjdk | linux enterprise module for basesystem 15 sp7 | 21.0.12.0-150600.3.29.1 | fixed |
| Suse | java-21-openjdk | linux enterprise server 15 sp6-ltss | 21.0.12.0-150600.3.29.1 | fixed |
| Suse | java-21-openjdk | linux enterprise server for sap applications 15 sp6 | 21.0.12.0-150600.3.29.1 | fixed |
| Suse | java-25-openjdk | linux enterprise module for basesystem 15 sp7 | 25.0.4.0-150700.15.13.1 | fixed |
| Suse | java-17-openjdk | linux enterprise server 16.0 | 17.0.20.0-160000.1.1 | fixed |
| Suse | java-17-openjdk | linux enterprise server for sap applications 16.0 | 17.0.20.0-160000.1.1 | fixed |
| Suse | java-17-openjdk | linux enterprise server 16.0 | 17.0.20.0-160000.1.1 | fixed |
| Suse | java-17-openjdk | linux enterprise server for sap applications 16.0 | 17.0.20.0-160000.1.1 | fixed |
| Suse | java-11-openjdk | linux enterprise server 12 sp5-ltss | 11.0.32.0-3.102.1 | fixed |
| Suse | java-11-openjdk | linux enterprise server ltss extended security 12 sp5 | 11.0.32.0-3.102.1 | fixed |
| Opensuse | java-17-openjdk | leap 16.0 | 17.0.20.0-160000.1.1 | fixed |
| Opensuse | java-21-openjdk | tumbleweed | 21.0.12.0-1.1 | fixed |
| Opensuse | java-25-openjdk | tumbleweed | 25.0.4.0-1.1 | fixed |
| Opensuse | java-11-openjdk | tumbleweed | 11.0.32.0-1.1 | fixed |
| Opensuse | java-17-openjdk | tumbleweed | 17.0.20.0-1.1 | fixed |
| Suse | lcms2 | linux enterprise server 16.0 | 2.16-160000.4.1 | fixed |
| Suse | lcms2 | linux enterprise server for sap applications 16.0 | 2.16-160000.4.1 | fixed |
| Opensuse | lcms2 | leap 16.0 | 2.16-160000.4.1 | fixed |
| Suse | lcms2 | linux micro 6.1 | 2.16-slfo.1.1_2.1 | fixed |
| Ubuntu | lcms2 | pro | 2.9-4 | vulnerable |
| Ubuntu | lcms2 | pro | 2.9-4ubuntu0.1~esm1 | fixed |
| Ubuntu | lcms2 | 22.04 | 2.12~rc1-2 | vulnerable |
| Ubuntu | lcms2 | 22.04 | 2.12~rc1-2build1 | vulnerable |
| Ubuntu | lcms2 | 22.04 | 2.12~rc1-2build2 | vulnerable |
| Ubuntu | lcms2 | 22.04 | 2.12~rc1-2ubuntu0.1 | fixed |
| Ubuntu | lcms2 | 24.04 | 2.14-2 | vulnerable |
| Ubuntu | lcms2 | 24.04 | 2.14-2build1 | vulnerable |
| Ubuntu | lcms2 | 24.04 | 2.14-2ubuntu0.1 | fixed |
| Ubuntu | lcms2 | 25.10 | 2.16-2 | vulnerable |
| Ubuntu | lcms2 | 25.10 | 2.16-2ubuntu0.1 | fixed |
| Ubuntu | lcms2 | 26.04 | 2.16-2 | vulnerable |
| Ubuntu | lcms2 | 26.04 | 2.17-1 | vulnerable |
| Ubuntu | lcms2 | 26.04 | 2.17-1ubuntu0.1 | fixed |
| Ubuntu | lcms2 | pro | 2.9-4 | vulnerable |
| Ubuntu | lcms2 | pro | 2.9-4ubuntu0.1~esm1 | fixed |
| Ubuntu | lcms2 | 22.04 | 2.12~rc1-2 | vulnerable |
| Ubuntu | lcms2 | 22.04 | 2.12~rc1-2build1 | vulnerable |
| Ubuntu | lcms2 | 22.04 | 2.12~rc1-2build2 | vulnerable |
| Ubuntu | lcms2 | 22.04 | 2.12~rc1-2ubuntu0.1 | fixed |
| Ubuntu | lcms2 | 24.04 | 2.14-2 | vulnerable |
| Ubuntu | lcms2 | 24.04 | 2.14-2build1 | vulnerable |
| Ubuntu | lcms2 | 24.04 | 2.14-2ubuntu0.1 | fixed |
| Ubuntu | lcms2 | 25.10 | 2.16-2 | vulnerable |
| Ubuntu | lcms2 | 25.10 | 2.16-2ubuntu0.1 | fixed |
| Ubuntu | lcms2 | 26.04 | 2.16-2 | vulnerable |
| Ubuntu | lcms2 | 26.04 | 2.17-1 | vulnerable |
| Ubuntu | lcms2 | 26.04 | 2.17-1ubuntu0.1 | fixed |
| Cpe | little_cms | Not reported | Not reported | unknown |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | lcms2 | source | sid | 2.17-1.1 | not yet assigned | Not reported | [1134335] |
| Debian | lcms2 | source | forky | 2.17-1.1 | not yet assigned | Not reported | [1134335] |
| Debian | lcms2 | source | trixie | 2.16-2+deb13u2 | not yet assigned | Not reported | [1134335] |
| Debian | lcms2 | source | bookworm | 2.14-2+deb12u1 | not yet assigned | Not reported | [1134335] |
| Debian | openjdk-17 | source | sid | 17.0.20+8-1 | not yet assigned | Not reported | Not reported |
| Debian | openjdk-17 | source | bookworm | 17.0.20+8-1~deb12u1 | not yet assigned | Not reported | Not reported |
| Cpe | lcms2 | cpe | Not reported | 2.14-2ubuntu0.1 | Not reported | Not reported | Not reported |
| Cpe | liblcms2-2 | cpe | Not reported | 2.14-2ubuntu0.1 | Not reported | Not reported | Not reported |
| Cpe | liblcms2-dev | cpe | Not reported | 2.14-2ubuntu0.1 | Not reported | Not reported | Not reported |
| Cpe | liblcms2-utils | cpe | Not reported | 2.14-2ubuntu0.1 | Not reported | Not reported | Not reported |
| Cpe | lcms2 | cpe | Not reported | 2.14-2+deb12u1 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-25 | deb | noble | 25.0.4+7-1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-25-demo | deb | noble | 25.0.4+7-1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-25-doc | deb | noble | 25.0.4+7-1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-25-jdk | deb | noble | 25.0.4+7-1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-25-jdk-headless | deb | noble | 25.0.4+7-1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-25-jre | deb | noble | 25.0.4+7-1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-25-jre-headless | deb | noble | 25.0.4+7-1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-25-jre-zero | deb | noble | 25.0.4+7-1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-25-source | deb | noble | 25.0.4+7-1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-25-testsupport | deb | noble | 25.0.4+7-1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-21 | deb | noble | 21.0.12+8-1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-21-demo | deb | noble | 21.0.12+8-1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-21-doc | deb | noble | 21.0.12+8-1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-21-jdk | deb | noble | 21.0.12+8-1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-21-jdk-headless | deb | noble | 21.0.12+8-1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-21-jre | deb | noble | 21.0.12+8-1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-21-jre-headless | deb | noble | 21.0.12+8-1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-21-jre-zero | deb | noble | 21.0.12+8-1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-21-source | deb | noble | 21.0.12+8-1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-21-testsupport | deb | noble | 21.0.12+8-1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-17 | deb | noble | 17.0.20+8-1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-17-demo | deb | noble | 17.0.20+8-1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-17-doc | deb | noble | 17.0.20+8-1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-17-jdk | deb | noble | 17.0.20+8-1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-17-jdk-headless | deb | noble | 17.0.20+8-1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-17-jre | deb | noble | 17.0.20+8-1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-17-jre-headless | deb | noble | 17.0.20+8-1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-17-jre-zero | deb | noble | 17.0.20+8-1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-17-source | deb | noble | 17.0.20+8-1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-lts | deb | noble | 11.0.32+9-1ubuntu1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-11-demo | deb | noble | 11.0.32+9-1ubuntu1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-11-doc | deb | noble | 11.0.32+9-1ubuntu1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-11-jdk | deb | noble | 11.0.32+9-1ubuntu1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-11-jdk-headless | deb | noble | 11.0.32+9-1ubuntu1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-11-jre | deb | noble | 11.0.32+9-1ubuntu1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-11-jre-headless | deb | noble | 11.0.32+9-1ubuntu1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-11-jre-zero | deb | noble | 11.0.32+9-1ubuntu1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-11-source | deb | noble | 11.0.32+9-1ubuntu1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-8 | deb | noble | 8u502-ga~us1-0ubuntu1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-8-demo | deb | noble | 8u502-ga~us1-0ubuntu1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-8-doc | deb | noble | 8u502-ga~us1-0ubuntu1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-8-jdk | deb | noble | 8u502-ga~us1-0ubuntu1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-8-jdk-headless | deb | noble | 8u502-ga~us1-0ubuntu1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-8-jre | deb | noble | 8u502-ga~us1-0ubuntu1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-8-jre-headless | deb | noble | 8u502-ga~us1-0ubuntu1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-8-jre-zero | deb | noble | 8u502-ga~us1-0ubuntu1~24.04 | Not reported | Not reported | Not reported |
| Ubuntu | openjdk-8-source | deb | noble | 8u502-ga~us1-0ubuntu1~24.04 | Not reported | Not reported | Not reported |
| Alpine | lcms2 | apk | 3.20 | 2.19-r0 | Not reported | ALPINE-CVE-2026-41254 | Not reported |
| Alpine | lcms2 | apk | 3.21 | 2.19-r0 | Not reported | ALPINE-CVE-2026-41254 | Not reported |
| Alpine | lcms2 | apk | 3.22 | 2.19-r0 | Not reported | ALPINE-CVE-2026-41254 | Not reported |
| Alpine | lcms2 | apk | 3.23 | 2.19-r0 | Not reported | ALPINE-CVE-2026-41254 | Not reported |
| Alpine | lcms2 | apk | 3.24 | 2.19-r0 | Not reported | ALPINE-CVE-2026-41254 | Not reported |
| Suse | lcms2 | rpm | linux enterprise module for basesystem 15 sp7 | 2.15-150600.3.6.1 | Not reported | SUSE-SU-2026:4205-1 | Not reported |
| Suse | lcms2 | rpm | linux enterprise module for package hub 15 sp7 | 2.15-150600.3.6.1 | Not reported | SUSE-SU-2026:4205-1 | Not reported |
| Suse | lcms2 | rpm | linux micro 6.0 | 2.16-2.1 | Not reported | SUSE-SU-2026:23443-1 | Not reported |
| Suse | lcms2 | rpm | linux enterprise micro 5.3 | 2.12-150400.3.3.1 | Not reported | SUSE-SU-2026:4056-1 | Not reported |
| Suse | lcms2 | rpm | linux enterprise micro 5.4 | 2.12-150400.3.3.1 | Not reported | SUSE-SU-2026:4056-1 | Not reported |
| Suse | lcms2 | rpm | linux enterprise micro 5.5 | 2.12-150400.3.3.1 | Not reported | SUSE-SU-2026:4056-1 | Not reported |
| Suse | lcms2 | rpm | linux enterprise server ltss extended security 12 sp5 | 2.7-9.13.1 | Not reported | SUSE-SU-2026:3964-1 | Not reported |
| Ubuntu | openjdk-25-crac | deb | 26.04 | 25.0.4+7-0ubuntu1~26.04 | Not reported | USN-8695-1 | Not reported |
| Ubuntu | openjdk-17-crac | deb | 26.04 | 17.0.20+8-0ubuntu1~26.04 | Not reported | USN-8693-1 | Not reported |
| Ubuntu | openjdk-21-crac | deb | 26.04 | 21.0.12+8-0ubuntu1~26.04 | Not reported | USN-8694-1 | Not reported |
| Ubuntu | openjdk-26 | deb | 26.04 | 26.0.2+10-2~26.04.2 | Not reported | USN-8689-1 | Not reported |
| Ubuntu | openjdk-lts | deb | pro | 11.0.32+9-1ubuntu1~20.04 | Not reported | USN-8674-1 | Not reported |
| Ubuntu | openjdk-lts | deb | 22.04 | 11.0.32+9-1ubuntu1~22.04 | Not reported | USN-8674-1 | Not reported |
| Ubuntu | openjdk-lts | deb | 24.04 | 11.0.32+9-1ubuntu1~24.04 | Not reported | USN-8674-1 | Not reported |
| Ubuntu | openjdk-lts | deb | 26.04 | 11.0.32+9-1ubuntu1~26.04 | Not reported | USN-8674-1 | Not reported |
| Ubuntu | openjdk-25 | deb | 22.04 | 25.0.4+7-1~22.04 | Not reported | USN-8681-1 | Not reported |
| Ubuntu | openjdk-25 | deb | 24.04 | 25.0.4+7-1~24.04 | Not reported | USN-8681-1 | Not reported |
| Ubuntu | openjdk-25 | deb | 26.04 | 25.0.4+7-1~26.04 | Not reported | USN-8681-1 | Not reported |
| Ubuntu | openjdk-21 | deb | pro | 21.0.12+8-1~20.04 | Not reported | USN-8677-1 | Not reported |
| Ubuntu | openjdk-21 | deb | 22.04 | 21.0.12+8-1~22.04 | Not reported | USN-8677-1 | Not reported |
| Ubuntu | openjdk-21 | deb | 24.04 | 21.0.12+8-1~24.04 | Not reported | USN-8677-1 | Not reported |
| Ubuntu | openjdk-21 | deb | 26.04 | 21.0.12+8-1~26.04 | Not reported | USN-8677-1 | Not reported |
| Ubuntu | openjdk-17 | deb | pro | 17.0.20+8-1~20.04 | Not reported | USN-8676-1 | Not reported |
| Ubuntu | openjdk-17 | deb | 22.04 | 17.0.20+8-1~22.04 | Not reported | USN-8676-1 | Not reported |
| Ubuntu | openjdk-17 | deb | 24.04 | 17.0.20+8-1~24.04 | Not reported | USN-8676-1 | Not reported |
| Ubuntu | openjdk-17 | deb | 26.04 | 17.0.20+8-1~26.04 | Not reported | USN-8676-1 | Not reported |
| Ubuntu | openjdk-8 | deb | pro | 8u502-ga~us1-0ubuntu1~20.04 | Not reported | USN-8673-1 | Not reported |
| Ubuntu | openjdk-8 | deb | 22.04 | 8u502-ga~us1-0ubuntu1~22.04 | Not reported | USN-8673-1 | Not reported |
| Ubuntu | openjdk-8 | deb | 24.04 | 8u502-ga~us1-0ubuntu1~24.04 | Not reported | USN-8673-1 | Not reported |
| Ubuntu | openjdk-8 | deb | 26.04 | 8u502-ga~us1-0ubuntu1~26.04 | Not reported | USN-8673-1 | Not reported |
| Suse | java-1_8_0-openjdk | rpm | linux enterprise module for legacy 15 sp7 | 1.8.0.502-150000.3.123.1 | Not reported | SUSE-SU-2026:3623-1 | Not reported |
| Suse | java-1_8_0-openjdk | rpm | linux enterprise high performance computing 15 sp4-espos | 1.8.0.502-150000.3.123.1 | Not reported | SUSE-SU-2026:3623-1 | Not reported |
| Suse | java-1_8_0-openjdk | rpm | linux enterprise high performance computing 15 sp4-ltss | 1.8.0.502-150000.3.123.1 | Not reported | SUSE-SU-2026:3623-1 | Not reported |
| Suse | java-1_8_0-openjdk | rpm | linux enterprise server 15 sp4-ltss | 1.8.0.502-150000.3.123.1 | Not reported | SUSE-SU-2026:3623-1 | Not reported |
| Suse | java-1_8_0-openjdk | rpm | linux enterprise server 15 sp5-ltss | 1.8.0.502-150000.3.123.1 | Not reported | SUSE-SU-2026:3623-1 | Not reported |
| Suse | java-1_8_0-openjdk | rpm | linux enterprise server 15 sp6-ltss | 1.8.0.502-150000.3.123.1 | Not reported | SUSE-SU-2026:3623-1 | Not reported |
| Suse | java-1_8_0-openjdk | rpm | linux enterprise server for sap applications 15 sp4 | 1.8.0.502-150000.3.123.1 | Not reported | SUSE-SU-2026:3623-1 | Not reported |
| Suse | java-1_8_0-openjdk | rpm | linux enterprise server for sap applications 15 sp5 | 1.8.0.502-150000.3.123.1 | Not reported | SUSE-SU-2026:3623-1 | Not reported |
| Suse | java-1_8_0-openjdk | rpm | linux enterprise server for sap applications 15 sp6 | 1.8.0.502-150000.3.123.1 | Not reported | SUSE-SU-2026:3623-1 | Not reported |
| Suse | java-1_8_0-openjdk | rpm | linux enterprise server 12 sp5-ltss | 1.8.0.502-27.131.1 | Not reported | SUSE-SU-2026:3622-1 | Not reported |
| Suse | java-1_8_0-openjdk | rpm | linux enterprise server ltss extended security 12 sp5 | 1.8.0.502-27.131.1 | Not reported | SUSE-SU-2026:3622-1 | Not reported |
| Suse | java-1_8_0-ibm | rpm | linux enterprise module for legacy 15 sp7 | 1.8.0_sr8.70-150000.3.119.1 | Not reported | SUSE-SU-2026:3615-1 | Not reported |
| Suse | java-1_8_0-ibm | rpm | linux enterprise high performance computing 15 sp4-espos | 1.8.0_sr8.70-150000.3.119.1 | Not reported | SUSE-SU-2026:3615-1 | Not reported |
| Suse | java-1_8_0-ibm | rpm | linux enterprise high performance computing 15 sp4-ltss | 1.8.0_sr8.70-150000.3.119.1 | Not reported | SUSE-SU-2026:3615-1 | Not reported |
| Suse | java-1_8_0-ibm | rpm | linux enterprise server 15 sp4-ltss | 1.8.0_sr8.70-150000.3.119.1 | Not reported | SUSE-SU-2026:3615-1 | Not reported |
| Suse | java-1_8_0-ibm | rpm | linux enterprise server 15 sp5-ltss | 1.8.0_sr8.70-150000.3.119.1 | Not reported | SUSE-SU-2026:3615-1 | Not reported |
| Suse | java-1_8_0-ibm | rpm | linux enterprise server 15 sp6-ltss | 1.8.0_sr8.70-150000.3.119.1 | Not reported | SUSE-SU-2026:3615-1 | Not reported |
| Suse | java-1_8_0-ibm | rpm | linux enterprise server for sap applications 15 sp4 | 1.8.0_sr8.70-150000.3.119.1 | Not reported | SUSE-SU-2026:3615-1 | Not reported |
| Suse | java-1_8_0-ibm | rpm | linux enterprise server for sap applications 15 sp5 | 1.8.0_sr8.70-150000.3.119.1 | Not reported | SUSE-SU-2026:3615-1 | Not reported |
| Suse | java-1_8_0-ibm | rpm | linux enterprise server for sap applications 15 sp6 | 1.8.0_sr8.70-150000.3.119.1 | Not reported | SUSE-SU-2026:3615-1 | Not reported |
| Suse | java-1_8_0-ibm | rpm | linux enterprise server 12 sp5-ltss | 1.8.0_sr8.70-30.153.1 | Not reported | SUSE-SU-2026:3614-1 | Not reported |
| Suse | java-1_8_0-ibm | rpm | linux enterprise server ltss extended security 12 sp5 | 1.8.0_sr8.70-30.153.1 | Not reported | SUSE-SU-2026:3614-1 | Not reported |
| Opensuse | java-21-openj9 | rpm | tumbleweed | 21.0.12.0-1.1 | Not reported | OPENSUSE-SU-2026:11488-1 | Not reported |
| Opensuse | java-11-openj9 | rpm | tumbleweed | 11.0.32.0-1.1 | Not reported | OPENSUSE-SU-2026:11485-1 | Not reported |
| Opensuse | java-17-openj9 | rpm | tumbleweed | 17.0.20.0-1.1 | Not reported | OPENSUSE-SU-2026:11486-1 | Not reported |
| Opensuse | java-25-openj9 | rpm | tumbleweed | 25.0.4.0-1.1 | Not reported | OPENSUSE-SU-2026:11489-1 | Not reported |
| Opensuse | java-1_8_0-openjdk | rpm | tumbleweed | 1.8.0.502-1.1 | Not reported | OPENSUSE-SU-2026:11453-1 | Not reported |
| Suse | java-11-openjdk | rpm | linux enterprise module for legacy 15 sp7 | 11.0.32.0-150000.3.141.1 | Not reported | SUSE-SU-2026:3453-1 | Not reported |
| Suse | java-11-openjdk | rpm | linux enterprise module for package hub 15 sp7 | 11.0.32.0-150000.3.141.1 | Not reported | SUSE-SU-2026:3453-1 | Not reported |
| Suse | java-11-openjdk | rpm | linux enterprise high performance computing 15 sp4-espos | 11.0.32.0-150000.3.141.1 | Not reported | SUSE-SU-2026:3453-1 | Not reported |
| Suse | java-11-openjdk | rpm | linux enterprise high performance computing 15 sp4-ltss | 11.0.32.0-150000.3.141.1 | Not reported | SUSE-SU-2026:3453-1 | Not reported |
| Suse | java-11-openjdk | rpm | linux enterprise high performance computing 15 sp5-espos | 11.0.32.0-150000.3.141.1 | Not reported | SUSE-SU-2026:3453-1 | Not reported |
| Suse | java-11-openjdk | rpm | linux enterprise high performance computing 15 sp5-ltss | 11.0.32.0-150000.3.141.1 | Not reported | SUSE-SU-2026:3453-1 | Not reported |
| Suse | java-11-openjdk | rpm | linux enterprise server 15 sp4-ltss | 11.0.32.0-150000.3.141.1 | Not reported | SUSE-SU-2026:3453-1 | Not reported |
| Suse | java-11-openjdk | rpm | linux enterprise server 15 sp5-ltss | 11.0.32.0-150000.3.141.1 | Not reported | SUSE-SU-2026:3453-1 | Not reported |
| Suse | java-11-openjdk | rpm | linux enterprise server 15 sp6-ltss | 11.0.32.0-150000.3.141.1 | Not reported | SUSE-SU-2026:3453-1 | Not reported |
| Suse | java-11-openjdk | rpm | linux enterprise server for sap applications 15 sp4 | 11.0.32.0-150000.3.141.1 | Not reported | SUSE-SU-2026:3453-1 | Not reported |
| Suse | java-11-openjdk | rpm | linux enterprise server for sap applications 15 sp5 | 11.0.32.0-150000.3.141.1 | Not reported | SUSE-SU-2026:3453-1 | Not reported |
| Suse | java-11-openjdk | rpm | linux enterprise server for sap applications 15 sp6 | 11.0.32.0-150000.3.141.1 | Not reported | SUSE-SU-2026:3453-1 | Not reported |
| Suse | java-17-openjdk | rpm | linux enterprise module for legacy 15 sp7 | 17.0.20.0-150400.3.69.1 | Not reported | SUSE-SU-2026:3406-1 | Not reported |
| Suse | java-17-openjdk | rpm | linux enterprise high performance computing 15 sp4-espos | 17.0.20.0-150400.3.69.1 | Not reported | SUSE-SU-2026:3406-1 | Not reported |
| Suse | java-17-openjdk | rpm | linux enterprise high performance computing 15 sp4-ltss | 17.0.20.0-150400.3.69.1 | Not reported | SUSE-SU-2026:3406-1 | Not reported |
| Suse | java-17-openjdk | rpm | linux enterprise high performance computing 15 sp5-espos | 17.0.20.0-150400.3.69.1 | Not reported | SUSE-SU-2026:3406-1 | Not reported |
| Suse | java-17-openjdk | rpm | linux enterprise high performance computing 15 sp5-ltss | 17.0.20.0-150400.3.69.1 | Not reported | SUSE-SU-2026:3406-1 | Not reported |
| Suse | java-17-openjdk | rpm | linux enterprise server 15 sp4-ltss | 17.0.20.0-150400.3.69.1 | Not reported | SUSE-SU-2026:3406-1 | Not reported |
| Suse | java-17-openjdk | rpm | linux enterprise server 15 sp5-ltss | 17.0.20.0-150400.3.69.1 | Not reported | SUSE-SU-2026:3406-1 | Not reported |
| Suse | java-17-openjdk | rpm | linux enterprise server 15 sp6-ltss | 17.0.20.0-150400.3.69.1 | Not reported | SUSE-SU-2026:3406-1 | Not reported |
| Suse | java-17-openjdk | rpm | linux enterprise server for sap applications 15 sp4 | 17.0.20.0-150400.3.69.1 | Not reported | SUSE-SU-2026:3406-1 | Not reported |
| Suse | java-17-openjdk | rpm | linux enterprise server for sap applications 15 sp5 | 17.0.20.0-150400.3.69.1 | Not reported | SUSE-SU-2026:3406-1 | Not reported |
| Suse | java-17-openjdk | rpm | linux enterprise server for sap applications 15 sp6 | 17.0.20.0-150400.3.69.1 | Not reported | SUSE-SU-2026:3406-1 | Not reported |
| Opensuse | java-21-openjdk | rpm | leap 16.0 | 21.0.12.0-160000.1.1 | Not reported | OPENSUSE-SU-2026:21470-1 | Not reported |
| Opensuse | java-25-openjdk | rpm | leap 16.0 | 25.0.4.0-160000.1.1 | Not reported | OPENSUSE-SU-2026:21467-1 | Not reported |
| Suse | java-21-openjdk | rpm | linux enterprise module for basesystem 15 sp7 | 21.0.12.0-150600.3.29.1 | Not reported | SUSE-SU-2026:3332-1 | Not reported |
| Suse | java-21-openjdk | rpm | linux enterprise server 15 sp6-ltss | 21.0.12.0-150600.3.29.1 | Not reported | SUSE-SU-2026:3332-1 | Not reported |
| Suse | java-21-openjdk | rpm | linux enterprise server for sap applications 15 sp6 | 21.0.12.0-150600.3.29.1 | Not reported | SUSE-SU-2026:3332-1 | Not reported |
| Suse | java-25-openjdk | rpm | linux enterprise module for basesystem 15 sp7 | 25.0.4.0-150700.15.13.1 | Not reported | SUSE-SU-2026:3331-1 | Not reported |
| Suse | java-17-openjdk | rpm | linux enterprise server 16.0 | 17.0.20.0-160000.1.1 | Not reported | SUSE-SU-2026:22953-1 | Not reported |
| Suse | java-17-openjdk | rpm | linux enterprise server for sap applications 16.0 | 17.0.20.0-160000.1.1 | Not reported | SUSE-SU-2026:22953-1 | Not reported |
| Suse | java-17-openjdk | rpm | linux enterprise server 16.0 | 17.0.20.0-160000.1.1 | Not reported | SUSE-SU-2026:22944-1 | Not reported |
| Suse | java-17-openjdk | rpm | linux enterprise server for sap applications 16.0 | 17.0.20.0-160000.1.1 | Not reported | SUSE-SU-2026:22944-1 | Not reported |
| Suse | java-11-openjdk | rpm | linux enterprise server 12 sp5-ltss | 11.0.32.0-3.102.1 | Not reported | SUSE-SU-2026:3284-1 | Not reported |
| Suse | java-11-openjdk | rpm | linux enterprise server ltss extended security 12 sp5 | 11.0.32.0-3.102.1 | Not reported | SUSE-SU-2026:3284-1 | Not reported |
| Opensuse | java-17-openjdk | rpm | leap 16.0 | 17.0.20.0-160000.1.1 | Not reported | OPENSUSE-SU-2026:21440-1 | Not reported |
| Opensuse | java-21-openjdk | rpm | tumbleweed | 21.0.12.0-1.1 | Not reported | OPENSUSE-SU-2026:11362-1 | Not reported |
| Opensuse | java-25-openjdk | rpm | tumbleweed | 25.0.4.0-1.1 | Not reported | OPENSUSE-SU-2026:11363-1 | Not reported |
| Opensuse | java-11-openjdk | rpm | tumbleweed | 11.0.32.0-1.1 | Not reported | OPENSUSE-SU-2026:11335-1 | Not reported |
| Opensuse | java-17-openjdk | rpm | tumbleweed | 17.0.20.0-1.1 | Not reported | OPENSUSE-SU-2026:11336-1 | Not reported |
| Suse | lcms2 | rpm | linux enterprise server 16.0 | 2.16-160000.4.1 | Not reported | SUSE-SU-2026:22506-1 | Not reported |
| Suse | lcms2 | rpm | linux enterprise server for sap applications 16.0 | 2.16-160000.4.1 | Not reported | SUSE-SU-2026:22506-1 | Not reported |
| Opensuse | lcms2 | rpm | leap 16.0 | 2.16-160000.4.1 | Not reported | OPENSUSE-SU-2026:21202-1 | Not reported |
| Suse | lcms2 | rpm | linux micro 6.1 | 2.16-slfo.1.1_2.1 | Not reported | SUSE-SU-2026:22070-1 | Not reported |
| Ubuntu | lcms2 | deb | pro | 2.9-4ubuntu0.1~esm1 | Not reported | UBUNTU-CVE-2026-41254 | Not reported |
| Ubuntu | lcms2 | deb | 22.04 | 2.12~rc1-2ubuntu0.1 | Not reported | UBUNTU-CVE-2026-41254 | Not reported |
| Ubuntu | lcms2 | deb | 24.04 | 2.14-2ubuntu0.1 | Not reported | UBUNTU-CVE-2026-41254 | Not reported |
| Ubuntu | lcms2 | deb | 25.10 | 2.16-2ubuntu0.1 | Not reported | UBUNTU-CVE-2026-41254 | Not reported |
| Ubuntu | lcms2 | deb | 26.04 | 2.17-1ubuntu0.1 | Not reported | UBUNTU-CVE-2026-41254 | Not reported |
| Ubuntu | lcms2 | deb | pro | 2.9-4ubuntu0.1~esm1 | Not reported | USN-8209-2 | Not reported |
| Ubuntu | lcms2 | deb | 22.04 | 2.12~rc1-2ubuntu0.1 | Not reported | USN-8209-1 | Not reported |
| Ubuntu | lcms2 | deb | 24.04 | 2.14-2ubuntu0.1 | Not reported | USN-8209-1 | Not reported |
| Ubuntu | lcms2 | deb | 25.10 | 2.16-2ubuntu0.1 | Not reported | USN-8209-1 | Not reported |
| Ubuntu | lcms2 | deb | 26.04 | 2.17-1ubuntu0.1 | Not reported | USN-8209-1 | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [openjdk-17-dbg]Affected
Source package: [openjdk-17]
Details (4)
17.0.19+10-1~deb12u2· amd64 · bookwormAffected · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
17.0.19+10-1~deb12u2· arm64 · bookwormAffected · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
- [openjdk-17-demo]Affected
Source package: [openjdk-17]
Details (4)
17.0.19+10-1~deb12u2· amd64 · bookwormAffected · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
17.0.19+10-1~deb12u2· arm64 · bookwormAffected · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
- [openjdk-17-doc]Affected
Source package: [openjdk-17]
Details (4)
17.0.19+10-1~deb12u2· all · bookwormAffected · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
17.0.19+10-1~deb12u2· all · bookwormAffected · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· all · bookworm-securityFixed · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· all · bookworm-securityFixed · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
- [openjdk-17-jdk]Affected
Source package: [openjdk-17]
Details (4)
17.0.19+10-1~deb12u2· amd64 · bookwormAffected · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
17.0.19+10-1~deb12u2· arm64 · bookwormAffected · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
- [openjdk-17-jdk-headless]Affected
Source package: [openjdk-17]
Details (4)
17.0.19+10-1~deb12u2· amd64 · bookwormAffected · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
17.0.19+10-1~deb12u2· arm64 · bookwormAffected · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
- [openjdk-17-jre]Affected
Source package: [openjdk-17]
Details (4)
17.0.19+10-1~deb12u2· amd64 · bookwormAffected · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
17.0.19+10-1~deb12u2· arm64 · bookwormAffected · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
- [openjdk-17-jre-headless]Affected
Source package: [openjdk-17]
Details (4)
17.0.19+10-1~deb12u2· amd64 · bookwormAffected · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
17.0.19+10-1~deb12u2· arm64 · bookwormAffected · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
- [openjdk-17-jre-zero]Affected
Source package: [openjdk-17]
Details (4)
17.0.19+10-1~deb12u2· amd64 · bookwormAffected · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
17.0.19+10-1~deb12u2· arm64 · bookwormAffected · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· amd64 · bookworm-securityFixed · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· arm64 · bookworm-securityFixed · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
- [openjdk-17-source]Affected
Source package: [openjdk-17]
Details (4)
17.0.19+10-1~deb12u2· all · bookwormAffected · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
17.0.19+10-1~deb12u2· all · bookwormAffected · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· all · bookworm-securityFixed · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
17.0.20.1+1-1~deb12u1· all · bookworm-securityFixed · Fixed:
17.0.20+8-1~deb12u1nvd · openjdk-17 · debian · bookworm; nvd · openjdk-17 · debian · 12
[Debian 13 (Trixie)]
- [openjdk-21-dbg]Affected
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· amd64 · trixieAffected · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· arm64 · trixieAffected · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· amd64 · trixie-security · Historical versionFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· arm64 · trixie-securityFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· amd64 · trixie-security · Historical versionFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· amd64 · trixie-securityFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
- [openjdk-21-demo]Affected
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· amd64 · trixieAffected · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· arm64 · trixieAffected · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· amd64 · trixie-security · Historical versionFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· arm64 · trixie-securityFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· amd64 · trixie-security · Historical versionFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· amd64 · trixie-securityFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
- [openjdk-21-doc]Affected
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· all · trixieAffected · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· all · trixieAffected · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· all · trixie-security · Historical versionFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· all · trixie-securityFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· all · trixie-security · Historical versionFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· all · trixie-securityFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
- [openjdk-21-jdk]Affected
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· amd64 · trixieAffected · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· arm64 · trixieAffected · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· amd64 · trixie-security · Historical versionFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· arm64 · trixie-securityFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· amd64 · trixie-security · Historical versionFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· amd64 · trixie-securityFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
- [openjdk-21-jdk-headless]Affected
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· amd64 · trixieAffected · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· arm64 · trixieAffected · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· amd64 · trixie-security · Historical versionFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· arm64 · trixie-securityFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· amd64 · trixie-security · Historical versionFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· amd64 · trixie-securityFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
- [openjdk-21-jre]Affected
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· amd64 · trixieAffected · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· arm64 · trixieAffected · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· amd64 · trixie-security · Historical versionFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· arm64 · trixie-securityFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· amd64 · trixie-security · Historical versionFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· amd64 · trixie-securityFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
- [openjdk-21-jre-headless]Affected
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· amd64 · trixieAffected · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· arm64 · trixieAffected · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· amd64 · trixie-security · Historical versionFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· arm64 · trixie-securityFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· amd64 · trixie-security · Historical versionFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· amd64 · trixie-securityFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
- [openjdk-21-jre-zero]Affected
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· amd64 · trixieAffected · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· arm64 · trixieAffected · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· amd64 · trixie-security · Historical versionFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· arm64 · trixie-securityFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· amd64 · trixie-security · Historical versionFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· amd64 · trixie-securityFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
- [openjdk-21-source]Affected
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· all · trixieAffected · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· all · trixieAffected · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· all · trixie-security · Historical versionFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· all · trixie-securityFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· all · trixie-security · Historical versionFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· all · trixie-securityFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
- [openjdk-21-testsupport]Affected
Source package: [openjdk-21]
Details (6)
21.0.11+10-1~deb13u2· amd64 · trixieAffected · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.11+10-1~deb13u2· arm64 · trixieAffected · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· amd64 · trixie-security · Historical versionFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12.1+1-1~deb13u1· arm64 · trixie-securityFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.12+8-1~deb13u1· amd64 · trixie-security · Historical versionFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
21.0.13+9-1~deb13u2· amd64 · trixie-securityFixed · Fixed:
21.0.12+8-1~deb13u1nvd · openjdk-21 · debian · 13
- [openjdk-25-dbg]Affected
Source package: [openjdk-25]
Details (6)
25.0.3+9-2~deb13u1· amd64 · trixieAffected · Fixed:
25.0.4+7-1~deb13u1nvd · openjdk-25 · debian · 13
25.0.3+9-2~deb13u1· arm64 · trixieAffected · Fixed:
25.0.4+7-1~deb13u1nvd · openjdk-25 · debian · 13
25.0.3+9-2~deb13u1· amd64 · trixie-security · Historical versionAffected · Fixed:
25.0.4+7-1~deb13u1nvd · openjdk-25 · debian · 13
25.0.4.1+1-1~deb13u1· amd64 · trixie-securityFixed · Fixed:
25.0.4+7-1~deb13u1nvd · openjdk-25 · debian · 13
25.0.4.1+1-1~deb13u1· arm64 · trixie-securityFixed · Fixed:
25.0.4+7-1~deb13u1nvd · openjdk-25 · debian · 13
25.0.4+7-1~deb13u1· amd64 · trixie-security · Historical versionFixed · Fixed:
25.0.4+7-1~deb13u1nvd · openjdk-25 · debian · 13
Observed:
References
- [https://abhinavagarwal07.github.io/posts/lcms2-cubesize-overflow/]
- [https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11335-1.json]
- [https://github.com/mm2/Little-CMS/commit/da6110b1d14abc394633a388209abd5ebedd7ab0]
- [https://github.com/mm2/Little-CMS/commit/e0641b1828d0a1af5ecb1b11fe22f24fceefd4bc]
- [https://github.com/mm2/Little-CMS/security/advisories/GHSA-4xp6-rcgg-m9qq]
- [https://lists.debian.org/debian-lts-announce/2026/05/msg00014.html]
- [https://nvd.nist.gov/vuln/detail/CVE-2026-41254]
- [https://osv.dev/vulnerability/ALPINE-CVE-2026-41254]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2026-41254]
- [https://osv.dev/vulnerability/SUSE-SU-2026:22070-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:22506-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:22944-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:22953-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:23443-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:3284-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:3331-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:3332-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:3406-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:3453-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:3614-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:3615-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:3622-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:3623-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:3964-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:4056-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:4205-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2026-41254]
- [https://osv.dev/vulnerability/USN-8209-1]
- [https://osv.dev/vulnerability/USN-8209-2]
- [https://osv.dev/vulnerability/USN-8673-1]
- [https://osv.dev/vulnerability/USN-8674-1]
- [https://osv.dev/vulnerability/USN-8676-1]
- [https://osv.dev/vulnerability/USN-8677-1]
- [https://osv.dev/vulnerability/USN-8681-1]
- [https://osv.dev/vulnerability/USN-8689-1]
- [https://osv.dev/vulnerability/USN-8693-1]
- [https://osv.dev/vulnerability/USN-8694-1]
- [https://osv.dev/vulnerability/USN-8695-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:11335-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:11336-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:11362-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:11363-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:11453-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:11485-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:11486-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:11488-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:11489-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:21202-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:21440-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:21467-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:21470-1]
- [https://security-tracker.debian.org/tracker/CVE-2026-41254]
- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41254.json]
- [https://ubuntu.com/security/notices/USN-8209-1]
- [https://ubuntu.com/security/notices/USN-8673-1]
- [https://ubuntu.com/security/notices/USN-8674-1]
- [https://ubuntu.com/security/notices/USN-8676-1]
- [https://ubuntu.com/security/notices/USN-8677-1]
- [https://ubuntu.com/security/notices/USN-8681-1]
- [https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3043.json]
- [https://www.openwall.com/lists/oss-security/2026/04/17/16]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]