Advisories » MGASA-2026-0572

Updated java-latest-openjdk, timezone, java-21-openjdk, java-17-openjdk packages fix security vulnerabilities

Publication date: 03 Nov 2026
Modification date: 03 Nov 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-83374 , CVE-2026-83376 , CVE-2026-83378 , CVE-2026-83380 , CVE-2026-83381 , CVE-2026-83387 , CVE-2026-83395 , CVE-2026-83400 , CVE-2026-87290 , CVE-2026-87291 , CVE-2026-87292 , CVE-2026-87294 , CVE-2026-87367 , CVE-2026-91332 , CVE-2026-91333 , CVE-2026-91334 , CVE-2026-91335 , CVE-2026-91373 , CVE-2026-91374 , CVE-2026-91375 , CVE-2026-91379 , CVE-2026-91380 , CVE-2026-91394 , CVE-2026-91397 , CVE-2026-91398 , CVE-2026-91400 , CVE-2026-91410 , CVE-2026-91415 , CVE-2026-91418 , CVE-2026-91451 , CVE-2026-91452 , CVE-2026-91453 , CVE-2026-91461 , CVE-2026-91462 , CVE-2026-91463 , CVE-2026-91464 , CVE-2026-91487 , CVE-2026-101516

Description

Enhance PKCS5 padding. (CVE-2026-83374)
Enhance TLS certificate handling. (CVE-2026-83376)
Improve C2 loop transformations. (CVE-2026-83378)
Enhance LDAP logins. (CVE-2026-83380)
Enhance SASL Authentication. (CVE-2026-83381)
Enhance WebRowSets. (CVE-2026-83387)
Enhance HTTP Client Response Handling. (CVE-2026-83395)
Enhance XML Processing. (CVE-2026-83400)
Enhance XPath Expressions. (CVE-2026-87290)
Enhance HTTP Server. (CVE-2026-87291)
Enhance Network Clients. (CVE-2026-87292)
Enhance Certificate Name Checks. (CVE-2026-87294)
Enhance Template Handling. (CVE-2026-87367)
Enhance HTTP Client. (CVE-2026-91332)
Improve ciphertext handling. (CVE-2026-91333)
Enhance JPEG loading. (CVE-2026-91334)
Enhance Image Handling. (CVE-2026-91335)
Enhance TLS handshakes. (CVE-2026-91373)
Enhance jstatd. (CVE-2026-91374)
Enhance jmod handling. (CVE-2026-91375)
Enhance JShell. (CVE-2026-91379)
Enhance Preferences. (CVE-2026-91380)
Enhance HTTP client caching. (CVE-2026-91394)
Enhance diagnostic sessions. (CVE-2026-91397)
Enhance SOCKS5 support. (CVE-2026-91398)
Enhance MIDI file handling. (CVE-2026-91400)
Enhance zipfs. (CVE-2026-91410)
Enhance font rendering. (CVE-2026-91415)
Enhance GIF loading. (CVE-2026-91418)
Enhance HTTP server parsing. (CVE-2026-91451)
Enhance HTTP server. (CVE-2026-91452)
Improve HTTP headers. (CVE-2026-91453)
Enhance TLS Extensions. (CVE-2026-91461)
Enhance krb5 tokens. (CVE-2026-91462)
Enhance krb5 client. (CVE-2026-91463)
Enhance Kerberos validation. (CVE-2026-91464)
Enhance C2 comparisons. (CVE-2026-91487)
Enhance Certificate Constraint Checking. (CVE-2026-101516)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=36274
• https://www.oracle.com/security-alerts/cpuoct2026.html#AppendixJAVA
• https://access.redhat.com/errata/RHSA-2026:88349
• https://access.redhat.com/errata/RHSA-2026:90500
• https://www.cve.org/CVERecord?id=CVE-2026-83374
• https://www.cve.org/CVERecord?id=CVE-2026-83376
• https://www.cve.org/CVERecord?id=CVE-2026-83378
• https://www.cve.org/CVERecord?id=CVE-2026-83380
• https://www.cve.org/CVERecord?id=CVE-2026-83381
• https://www.cve.org/CVERecord?id=CVE-2026-83387
• https://www.cve.org/CVERecord?id=CVE-2026-83395
• https://www.cve.org/CVERecord?id=CVE-2026-83400
• https://www.cve.org/CVERecord?id=CVE-2026-87290
• https://www.cve.org/CVERecord?id=CVE-2026-87291
• https://www.cve.org/CVERecord?id=CVE-2026-87292
• https://www.cve.org/CVERecord?id=CVE-2026-87294
• https://www.cve.org/CVERecord?id=CVE-2026-87367
• https://www.cve.org/CVERecord?id=CVE-2026-91332
• https://www.cve.org/CVERecord?id=CVE-2026-91333
• https://www.cve.org/CVERecord?id=CVE-2026-91334
• https://www.cve.org/CVERecord?id=CVE-2026-91335
• https://www.cve.org/CVERecord?id=CVE-2026-91373
• https://www.cve.org/CVERecord?id=CVE-2026-91374
• https://www.cve.org/CVERecord?id=CVE-2026-91375
• https://www.cve.org/CVERecord?id=CVE-2026-91379
• https://www.cve.org/CVERecord?id=CVE-2026-91380
• https://www.cve.org/CVERecord?id=CVE-2026-91394
• https://www.cve.org/CVERecord?id=CVE-2026-91397
• https://www.cve.org/CVERecord?id=CVE-2026-91398
• https://www.cve.org/CVERecord?id=CVE-2026-91400
• https://www.cve.org/CVERecord?id=CVE-2026-91410
• https://www.cve.org/CVERecord?id=CVE-2026-91415
• https://www.cve.org/CVERecord?id=CVE-2026-91418
• https://www.cve.org/CVERecord?id=CVE-2026-91451
• https://www.cve.org/CVERecord?id=CVE-2026-91452
• https://www.cve.org/CVERecord?id=CVE-2026-91453
• https://www.cve.org/CVERecord?id=CVE-2026-91461
• https://www.cve.org/CVERecord?id=CVE-2026-91462
• https://www.cve.org/CVERecord?id=CVE-2026-91463
• https://www.cve.org/CVERecord?id=CVE-2026-91464
• https://www.cve.org/CVERecord?id=CVE-2026-91487
• https://www.cve.org/CVERecord?id=CVE-2026-101516

SRPMS

10/core

• java-21-openjdk-21.0.13.0.9-1.mga10
• java-17-openjdk-17.0.21.0.9-1.mga10
• java-latest-openjdk-25.0.5.0.8-1.rolling.1.mga10
• timezone-2026e-1.mga10