{
  "schema_version": "1.7.0",
  "id": "MGASA-2026-0572",
  "published": "2026-11-03T15:06:49Z",
  "modified": "2026-11-03T14:45:47Z",
  "summary": "Updated java-latest-openjdk, timezone, java-21-openjdk, java-17-openjdk packages fix security vulnerabilities",
  "details": "Enhance PKCS5 padding. (CVE-2026-83374)\nEnhance TLS certificate handling. (CVE-2026-83376)\nImprove C2 loop transformations. (CVE-2026-83378)\nEnhance LDAP logins. (CVE-2026-83380)\nEnhance SASL Authentication. (CVE-2026-83381)\nEnhance WebRowSets. (CVE-2026-83387)\nEnhance HTTP Client Response Handling. (CVE-2026-83395)\nEnhance XML Processing. (CVE-2026-83400)\nEnhance XPath Expressions. (CVE-2026-87290)\nEnhance HTTP Server. (CVE-2026-87291)\nEnhance Network Clients. (CVE-2026-87292)\nEnhance Certificate Name Checks. (CVE-2026-87294)\nEnhance Template Handling. (CVE-2026-87367)\nEnhance HTTP Client. (CVE-2026-91332)\nImprove ciphertext handling. (CVE-2026-91333)\nEnhance JPEG loading. (CVE-2026-91334)\nEnhance Image Handling. (CVE-2026-91335)\nEnhance TLS handshakes. (CVE-2026-91373)\nEnhance jstatd. (CVE-2026-91374)\nEnhance jmod handling. (CVE-2026-91375)\nEnhance JShell. (CVE-2026-91379)\nEnhance Preferences. (CVE-2026-91380)\nEnhance HTTP client caching. (CVE-2026-91394)\nEnhance diagnostic sessions. (CVE-2026-91397)\nEnhance SOCKS5 support. (CVE-2026-91398)\nEnhance MIDI file handling. (CVE-2026-91400)\nEnhance zipfs. (CVE-2026-91410)\nEnhance font rendering. (CVE-2026-91415)\nEnhance GIF loading. (CVE-2026-91418)\nEnhance HTTP server parsing. (CVE-2026-91451)\nEnhance HTTP server. (CVE-2026-91452)\nImprove HTTP headers. (CVE-2026-91453)\nEnhance TLS Extensions. (CVE-2026-91461)\nEnhance krb5 tokens. (CVE-2026-91462)\nEnhance krb5 client. (CVE-2026-91463)\nEnhance Kerberos validation. (CVE-2026-91464)\nEnhance C2 comparisons. (CVE-2026-91487)\nEnhance Certificate Constraint Checking. (CVE-2026-101516)\n",
  "upstream": [
    "CVE-2026-83374",
    "CVE-2026-83376",
    "CVE-2026-83378",
    "CVE-2026-83380",
    "CVE-2026-83381",
    "CVE-2026-83387",
    "CVE-2026-83395",
    "CVE-2026-83400",
    "CVE-2026-87290",
    "CVE-2026-87291",
    "CVE-2026-87292",
    "CVE-2026-87294",
    "CVE-2026-87367",
    "CVE-2026-91332",
    "CVE-2026-91333",
    "CVE-2026-91334",
    "CVE-2026-91335",
    "CVE-2026-91373",
    "CVE-2026-91374",
    "CVE-2026-91375",
    "CVE-2026-91379",
    "CVE-2026-91380",
    "CVE-2026-91394",
    "CVE-2026-91397",
    "CVE-2026-91398",
    "CVE-2026-91400",
    "CVE-2026-91410",
    "CVE-2026-91415",
    "CVE-2026-91418",
    "CVE-2026-91451",
    "CVE-2026-91452",
    "CVE-2026-91453",
    "CVE-2026-91461",
    "CVE-2026-91462",
    "CVE-2026-91463",
    "CVE-2026-91464",
    "CVE-2026-91487",
    "CVE-2026-101516"
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://advisories.mageia.org/MGASA-2026-0572.html"
    },
    {
      "type": "REPORT",
      "url": "https://bugs.mageia.org/show_bug.cgi?id=36274"
    },
    {
      "type": "WEB",
      "url": "https://www.oracle.com/security-alerts/cpuoct2026.html#AppendixJAVA"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:88349"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2026:90500"
    }
  ],
  "affected": [
    {
      "package": {
        "ecosystem": "Mageia:10",
        "name": "java-21-openjdk",
        "purl": "pkg:rpm/mageia/java-21-openjdk?arch=source&distro=mageia-10"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "21.0.13.0.9-1.mga10"
            }
          ]
        }
      ],
      "ecosystem_specific": {
        "section": "core"
      }
    },
    {
      "package": {
        "ecosystem": "Mageia:10",
        "name": "java-17-openjdk",
        "purl": "pkg:rpm/mageia/java-17-openjdk?arch=source&distro=mageia-10"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "17.0.21.0.9-1.mga10"
            }
          ]
        }
      ],
      "ecosystem_specific": {
        "section": "core"
      }
    },
    {
      "package": {
        "ecosystem": "Mageia:10",
        "name": "java-latest-openjdk",
        "purl": "pkg:rpm/mageia/java-latest-openjdk?arch=source&distro=mageia-10"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "25.0.5.0.8-1.rolling.1.mga10"
            }
          ]
        }
      ],
      "ecosystem_specific": {
        "section": "core"
      }
    },
    {
      "package": {
        "ecosystem": "Mageia:10",
        "name": "timezone",
        "purl": "pkg:rpm/mageia/timezone?arch=source&distro=mageia-10"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2026e-1.mga10"
            }
          ]
        }
      ],
      "ecosystem_specific": {
        "section": "core"
      }
    }
  ],
  "credits": [
    {
      "name": "Mageia",
      "type": "COORDINATOR",
      "contact": [
        "https://wiki.mageia.org/en/Packages_Security_Team"
      ]
    }
  ]
}