MGASA-2026-0395

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2026-0395.html
Import Source
https://advisories.mageia.org/MGASA-2026-0395.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2026-0395
Upstream
  • CVE-2026-46917
  • CVE-2026-46968
  • CVE-2026-47010
  • CVE-2026-47021
  • CVE-2026-47027
  • CVE-2026-47059
  • CVE-2026-47063
  • CVE-2026-60147
  • CVE-2026-60589
  • CVE-2026-61308
  • CVE-2026-70907
Published
2026-09-12T03:59:30Z
Modified
2026-09-12T04:12:22Z
Summary
Updated java-21-openjdk & java-17-openjdk packages fix security vulnerabilities
Details

Enhance TLS certificate handling. (CVE-2026-46968) Improve DTLS handshaking. (CVE-2026-46917) Enhance JPEG handling. (CVE-2026-47010) Enhance XBM image support. (CVE-2026-47021) Enhance Jar file processing. (CVE-2026-47027) Improve certification checking. (CVE-2026-60147) Enhance AWT ImagingLib. (CVE-2026-47059) Enhance Jar handling. (CVE-2026-47063) Improve Resource Resolving. (CVE-2026-60589) Enhance HTTP Connections. (CVE-2026-61308) Enhance TLS server. (CVE-2026-70907)

References
Credits

Affected packages

Mageia:10 / java-21-openjdk

Package

Name
java-21-openjdk
Purl
pkg:rpm/mageia/java-21-openjdk?arch=source&distro=mageia-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
21.0.12.1.1-1.mga10

Ecosystem specific 

{
    "section": "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2026-0395.json"

Mageia:9 / java-17-openjdk

Package

Name
java-17-openjdk
Purl
pkg:rpm/mageia/java-17-openjdk?arch=source&distro=mageia-9

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
17.0.20.1.1-1.mga9

Ecosystem specific 

{
    "section": "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2026-0395.json"