MGASA-2026-0572

Source
https://advisories.mageia.org/MGASA-2026-0572.html
Import Source
https://advisories.mageia.org/MGASA-2026-0572.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2026-0572
Upstream
CVE (38)
  • CVE-2026-101516
  • CVE-2026-83374
  • CVE-2026-83376
  • CVE-2026-83378
  • CVE-2026-83380
  • CVE-2026-83381
  • CVE-2026-83387
  • CVE-2026-83395
  • CVE-2026-83400
  • CVE-2026-87290
  • CVE-2026-87291
  • CVE-2026-87292
  • CVE-2026-87294
  • CVE-2026-87367
  • CVE-2026-91332
  • CVE-2026-91333
  • CVE-2026-91334
  • CVE-2026-91335
  • CVE-2026-91373
  • CVE-2026-91374
  • CVE-2026-91375
  • CVE-2026-91379
  • CVE-2026-91380
  • CVE-2026-91394
  • CVE-2026-91397
  • CVE-2026-91398
  • CVE-2026-91400
  • CVE-2026-91410
  • CVE-2026-91415
  • CVE-2026-91418
  • CVE-2026-91451
  • CVE-2026-91452
  • CVE-2026-91453
  • CVE-2026-91461
  • CVE-2026-91462
  • CVE-2026-91463
  • CVE-2026-91464
  • CVE-2026-91487
Published
2026-11-03T15:06:49Z
Modified
2026-11-03T15:28:09Z
Summary
Updated java-latest-openjdk, timezone, java-21-openjdk, java-17-openjdk packages fix security vulnerabilities
Details

Enhance PKCS5 padding. (CVE-2026-83374) Enhance TLS certificate handling. (CVE-2026-83376) Improve C2 loop transformations. (CVE-2026-83378) Enhance LDAP logins. (CVE-2026-83380) Enhance SASL Authentication. (CVE-2026-83381) Enhance WebRowSets. (CVE-2026-83387) Enhance HTTP Client Response Handling. (CVE-2026-83395) Enhance XML Processing. (CVE-2026-83400) Enhance XPath Expressions. (CVE-2026-87290) Enhance HTTP Server. (CVE-2026-87291) Enhance Network Clients. (CVE-2026-87292) Enhance Certificate Name Checks. (CVE-2026-87294) Enhance Template Handling. (CVE-2026-87367) Enhance HTTP Client. (CVE-2026-91332) Improve ciphertext handling. (CVE-2026-91333) Enhance JPEG loading. (CVE-2026-91334) Enhance Image Handling. (CVE-2026-91335) Enhance TLS handshakes. (CVE-2026-91373) Enhance jstatd. (CVE-2026-91374) Enhance jmod handling. (CVE-2026-91375) Enhance JShell. (CVE-2026-91379) Enhance Preferences. (CVE-2026-91380) Enhance HTTP client caching. (CVE-2026-91394) Enhance diagnostic sessions. (CVE-2026-91397) Enhance SOCKS5 support. (CVE-2026-91398) Enhance MIDI file handling. (CVE-2026-91400) Enhance zipfs. (CVE-2026-91410) Enhance font rendering. (CVE-2026-91415) Enhance GIF loading. (CVE-2026-91418) Enhance HTTP server parsing. (CVE-2026-91451) Enhance HTTP server. (CVE-2026-91452) Improve HTTP headers. (CVE-2026-91453) Enhance TLS Extensions. (CVE-2026-91461) Enhance krb5 tokens. (CVE-2026-91462) Enhance krb5 client. (CVE-2026-91463) Enhance Kerberos validation. (CVE-2026-91464) Enhance C2 comparisons. (CVE-2026-91487) Enhance Certificate Constraint Checking. (CVE-2026-101516)

References
Credits

Affected packages

Mageia:10 / java-21-openjdk

Package

Name
java-21-openjdk
Purl
pkg:rpm/mageia/java-21-openjdk?arch=source&distro=mageia-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
21.0.13.0.9-1.mga10

Ecosystem specific

{
    "section": "core"
}

Database specific

source
"https://advisories.mageia.org/MGASA-2026-0572.json"

Mageia:10 / java-17-openjdk

Package

Name
java-17-openjdk
Purl
pkg:rpm/mageia/java-17-openjdk?arch=source&distro=mageia-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
17.0.21.0.9-1.mga10

Ecosystem specific

{
    "section": "core"
}

Database specific

source
"https://advisories.mageia.org/MGASA-2026-0572.json"

Mageia:10 / java-latest-openjdk

Package

Name
java-latest-openjdk
Purl
pkg:rpm/mageia/java-latest-openjdk?arch=source&distro=mageia-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
25.0.5.0.8-1.rolling.1.mga10

Ecosystem specific

{
    "section": "core"
}

Database specific

source
"https://advisories.mageia.org/MGASA-2026-0572.json"

Mageia:10 / timezone

Package

Name
timezone
Purl
pkg:rpm/mageia/timezone?arch=source&distro=mageia-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2026e-1.mga10

Ecosystem specific

{
    "section": "core"
}

Database specific

source
"https://advisories.mageia.org/MGASA-2026-0572.json"