Oracle Java SE: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 11

• High 8.8
  CVE-2025-12183

  org.lz4:lz4-java - Out-of-Bounds Memory Access

  Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier allow remote attackers to cause denial of service and read adjacent memory via untrusted compressed input.

  zipkin spark-4.0-scala-2.13 spark-4.1-scala-2.13 strimzi-kafka-operator-kafka-thirdparty-libs-cc Debian Ubuntu Wolfi Maven
  Nov 28, 2025
• High 8.1
  CVE-2025-47219

  In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer whi…

  gst-plugins-good1.0 gst-plugins-good1.0 gst-plugins-good Debian Ubuntu Alpine
  Aug 7, 2025
• High 7.8
  CVE-2025-7425

  Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr

  A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attr…

  Red Hat GNOME Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux Wolfi
  Jul 10, 2025
• High 7.5
  CVE-2025-6021

  Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

  A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux Alpine
  Jun 12, 2025
• High 7.5
  CVE-2026-21945

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi
  Jan 20, 2026
• High 7.4
  CVE-2026-21932

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi
  Jan 20, 2026
• Medium 6.1
  CVE-2026-21933

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi
  Jan 20, 2026
• Medium 4.8
  CVE-2026-21925

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi
  Jan 20, 2026
• Medium 4.3
  CVE-2025-43368

  A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPad…

  Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu
  Sep 15, 2025
• Low 3.7
  CVE-2025-6052

  Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring

  A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it do…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jun 13, 2025
• Low 3.1
  CVE-2026-21947

  Vulnerability in Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u471-b50…

  Oracle Oracle Java SE openjfx Ubuntu
  Jan 20, 2026

Revision history

1. 2026-09-03 #42

   Neue Updates von Dell aufgenommen

2. 2026-08-31 #41

   Neue Updates von Dell aufgenommen

3. 2026-07-19 #40

   Neue Updates von HCL aufgenommen

4. 2026-07-01 #39

   Neue Updates von IBM aufgenommen

5. 2026-06-15 #38

   Neue Updates von openSUSE aufgenommen

6. 2026-06-09 #37

   Neue Updates von Oracle Linux aufgenommen

7. 2026-06-02 #36

   Neue Updates von IBM aufgenommen

8. 2026-05-20 #35

   Neue Updates von IBM aufgenommen

9. 2026-05-17 #34

   Neue Updates von IBM aufgenommen

10. 2026-05-11 #33

    Neue Updates von Dell aufgenommen

11. 2026-05-07 #32

    Neue Updates von IBM aufgenommen

12. 2026-04-09 #31

    Neue Updates von IBM und Dell aufgenommen

13. 2026-04-08 #30

    Neue Updates von IBM und IBM-APAR aufgenommen

14. 2026-04-06 #29

    Neue Updates von IBM aufgenommen

15. 2026-03-31 #28

    Neue Updates von IBM aufgenommen

16. 2026-03-30 #27

    Neue Updates von SUSE aufgenommen

17. 2026-03-23 #26

    Neue Updates von Dell aufgenommen

18. 2026-03-17 #25

    Neue Updates von Red Hat aufgenommen

19. 2026-03-09 #24

    Referenz(en) aufgenommen: 7262942

20. 2026-03-08 #23

    Neue Updates von Dell und IBM aufgenommen

21. 2026-03-03 #22

    Neue Updates von IBM aufgenommen

22. 2026-02-26 #21

    Neue Updates von IBM und IBM-APAR aufgenommen

23. 2026-02-25 #20

    Neue Updates von IBM aufgenommen

24. 2026-02-22 #19

    Neue Updates von IBM aufgenommen

25. 2026-02-18 #18

    Neue Updates von Amazon aufgenommen

References

• Oracle Critical Patch Update Advisory - January 2026 - Appendix Oracle Java SE vom 2026-01-20
  https://www.oracle.com/security-alerts/cpujan2026.html#AppendixJAVA
• Change Log for Amazon Corretto 8 vom 2026-01-20
  https://github.com/corretto/corretto-8/blob/8.482.08.1/CHANGELOG.md
• Change Log for Amazon Corretto 11 vom 2026-01-20
  https://github.com/corretto/corretto-11/blob/11.0.30.7.1/CHANGELOG.md
• Azul Zulu builds of OpenJDK - January 2026 Quarterly Update
  https://docs.azul.com/core/pdfs/january-2026/azul-zulu-ca-release-notes-january-2026-rev1.0.pdf
• Red Hat Security Advisory RHSA-2026:0848 vom 2026-01-21
  https://access.redhat.com/errata/RHSA-2026:0848
• Red Hat Security Advisory RHSA-2026:0927 vom 2026-01-22
  https://access.redhat.com/errata/RHSA-2026:0927
• Red Hat Security Advisory RHSA-2026:0849 vom 2026-01-21
  https://access.redhat.com/errata/RHSA-2026:0849
• Red Hat Security Advisory RHSA-2026:0847 vom 2026-01-21
  https://access.redhat.com/errata/RHSA-2026:0847
• Oracle Linux Security Advisory ELSA-2026-0927 vom 2026-01-22
  https://linux.oracle.com/errata/ELSA-2026-0927.html
• Red Hat Security Advisory RHSA-2026:0928 vom 2026-01-22
  https://access.redhat.com/errata/RHSA-2026:0928
• Rocky Linux Security Advisory RLSA-2026:0927 vom 2026-01-23
  https://errata.build.resf.org/RLSA-2026:0927
• Rocky Linux Security Advisory RLSA-2026:0928 vom 2026-01-23
  https://errata.build.resf.org/RLSA-2026:0928
• Debian Security Advisory DSA-6110 vom 2026-01-25
  https://lists.debian.org/debian-security-announce/2026/msg00019.html
• Oracle Linux Security Advisory ELSA-2026-0928 vom 2026-01-23
  http://linux.oracle.com/errata/ELSA-2026-0928.html
• Debian Security Advisory DLA-4457 vom 2026-01-26
  https://lists.debian.org/debian-lts-announce/2026/01/msg00029.html
• Red Hat Security Advisory RHSA-2026:0932 vom 2026-01-26
  https://access.redhat.com/errata/RHSA-2026:0932
• Red Hat Security Advisory RHSA-2026:0898 vom 2026-01-26
  https://access.redhat.com/errata/RHSA-2026:0898
• Red Hat Security Advisory RHSA-2026:0897 vom 2026-01-26
  https://access.redhat.com/errata/RHSA-2026:0897
• Debian Security Advisory DSA-6112 vom 2026-01-27
  https://lists.debian.org/debian-security-announce/2026/msg00021.html
• Red Hat Security Advisory RHSA-2026:0900 vom 2026-01-26
  https://access.redhat.com/errata/RHSA-2026:0900
• Debian Security Advisory DLA-4456 vom 2026-01-26
  https://lists.debian.org/debian-lts-announce/2026/01/msg00028.html
• Red Hat Security Advisory RHSA-2026:0899 vom 2026-01-26
  https://access.redhat.com/errata/RHSA-2026:0899
• Red Hat Security Advisory RHSA-2026:0901 vom 2026-01-26
  https://access.redhat.com/errata/RHSA-2026:0901
• Red Hat Security Advisory RHSA-2026:0896 vom 2026-01-26
  https://access.redhat.com/errata/RHSA-2026:0896
• Red Hat Security Advisory RHSA-2026:0931 vom 2026-01-26
  https://access.redhat.com/errata/RHSA-2026:0931
• Red Hat Security Advisory RHSA-2026:0895 vom 2026-01-26
  https://access.redhat.com/errata/RHSA-2026:0895
• Red Hat Security Advisory RHSA-2026:0933 vom 2026-01-26
  https://access.redhat.com/errata/RHSA-2026:0933
• Rocky Linux Security Advisory RLSA-2026:0932 vom 2026-01-27
  https://errata.build.resf.org/RLSA-2026:0932
• IBM Security Bulletin 7258042 vom 2026-01-26
  https://www.ibm.com/support/pages/node/7258042
• IBM Security Bulletin 7258025 vom 2026-01-26
  https://www.ibm.com/support/pages/node/7258025
• openSUSE Security Update OPENSUSE-SU-2026:10093-1 vom 2026-01-27
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DYXZQCWXWQDRW4DHVAGCG2J73SA27W5O/
• openSUSE Security Update OPENSUSE-SU-2026:10091-1 vom 2026-01-27
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CGS2RS52V5KQQQCEGK24MAXSHABJIWTF/
• openSUSE Security Update OPENSUSE-SU-2026:10092-1 vom 2026-01-27
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IWJT2INRPEEFPSE2YAYZEKLRS6UQUNF5/
• Tenable Security Advisory TNS-2026-02 vom 2026-01-27
  https://de.tenable.com/security/tns-2026-02
• Oracle Linux Security Advisory ELSA-2026-0932 vom 2026-01-27
  https://linux.oracle.com/errata/ELSA-2026-0932.html
• openSUSE Security Update OPENSUSE-SU-2026:10108-1 vom 2026-01-29
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S7CDPZVRFL4SBFCJW4WIXCZCXZRWVTTN/
• SUSE Security Update SUSE-SU-2026:0342-1 vom 2026-01-30
  https://lists.suse.com/pipermail/sle-security-updates/2026-January/023990.html
• SUSE Security Update SUSE-SU-2026:0341-1 vom 2026-01-30
  https://lists.suse.com/pipermail/sle-security-updates/2026-January/023991.html
• IBM Security Bulletin 7259422 vom 2026-02-02
  https://www.ibm.com/support/pages/node/7259422
• Red Hat Security Advisory RHSA-2026:1606 vom 2026-02-02
  https://access.redhat.com/errata/RHSA-2026:1606
• Ubuntu Security Notice USN-8003-1 vom 2026-02-03
  https://ubuntu.com/security/notices/USN-8003-1
• Ubuntu Security Notice USN-8002-1 vom 2026-02-03
  https://ubuntu.com/security/notices/USN-8002-1
• Ubuntu Security Notice USN-8001-1 vom 2026-02-03
  https://ubuntu.com/security/notices/USN-8001-1
• Ubuntu Security Notice USN-8000-1 vom 2026-02-03
  https://ubuntu.com/security/notices/USN-8000-1
• Ubuntu Security Notice USN-7995-1 vom 2026-02-03
  https://ubuntu.com/security/notices/USN-7995-1
• Ubuntu Security Notice USN-7996-1 vom 2026-02-03
  https://ubuntu.com/security/notices/USN-7996-1
• Ubuntu Security Notice USN-7997-1 vom 2026-02-03
  https://ubuntu.com/security/notices/USN-7997-1
• Ubuntu Security Notice USN-7998-1 vom 2026-02-03
  https://ubuntu.com/security/notices/USN-7998-1
• SUSE Security Update SUSE-SU-2026:20190-1 vom 2026-02-03
  https://lists.suse.com/pipermail/sle-security-updates/2026-February/024026.html
• SUSE Security Update SUSE-SU-2026:20199-1 vom 2026-02-03
  https://lists.suse.com/pipermail/sle-security-updates/2026-February/024020.html
• SUSE Security Update SUSE-SU-2026:0363-1 vom 2026-02-03
  https://lists.suse.com/pipermail/sle-security-updates/2026-February/024035.html
• openSUSE Security Update OPENSUSE-SU-2026:20134-1 vom 2026-02-03
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6HBUYV33ZTE6ADPCQZM6HMW2XG7WQETD/
• openSUSE Security Update OPENSUSE-SU-2026:10134-1 vom 2026-02-04
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4Z3UR6PG63OYY7IV4AAM2MZ4DMWZEWHO/
• openSUSE Security Update OPENSUSE-SU-2026:10136-1 vom 2026-02-04
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6MZSBZI33V52BT5HAQ2MZPR3L3M5D7EB/
• openSUSE Security Update OPENSUSE-SU-2026:10133-1 vom 2026-02-04
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ISR24KNJXAKOAXEUS5RCDFFCRLEKUVXP/
• openSUSE Security Update OPENSUSE-SU-2026:10135-1 vom 2026-02-04
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KZ5K6IBQB2ADSD26EDHXRFXMJK6DGJSD/
• openSUSE Security Update OPENSUSE-SU-2026:10137-1 vom 2026-02-04
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZDLTBTE6W5WTWIKXD72QA22655BXNXO4/
• SUSE Security Update SUSE-SU-2026:0382-1 vom 2026-02-04
  https://lists.suse.com/pipermail/sle-security-updates/2026-February/024059.html
• SUSE Security Update SUSE-SU-2026:20215-1 vom 2026-02-05
  https://lists.suse.com/pipermail/sle-security-updates/2026-February/024071.html
• SUSE Security Update SUSE-SU-2026:0389-1 vom 2026-02-05
  https://lists.suse.com/pipermail/sle-security-updates/2026-February/024078.html
• SUSE Security Update SUSE-SU-2026:0390-1 vom 2026-02-05
  https://lists.suse.com/pipermail/sle-security-updates/2026-February/024077.html
• Debian Security Advisory DSA-6119 vom 2026-02-05
  https://lists.debian.org/debian-security-announce/2026/msg00028.html
• Amazon Linux Security Advisory ALAS2CORRETTO8-2026-022 vom 2026-02-06
  https://alas.aws.amazon.com/AL2/ALAS2CORRETTO8-2026-022.html
• Amazon Linux Security Advisory ALAS2-2026-3140 vom 2026-02-06
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3140.html
• Amazon Linux Security Advisory ALAS2-2026-3139 vom 2026-02-06
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3139.html
• Oracle Linux Security Advisory ELSA-2026-0931 vom 2026-02-10
  https://linux.oracle.com/errata/ELSA-2026-0931.html
• SUSE Security Update SUSE-SU-2026:0415-1 vom 2026-02-10
  https://lists.suse.com/pipermail/sle-security-updates/2026-February/024087.html
• SUSE Security Update SUSE-SU-2026:0414-1 vom 2026-02-10
  https://lists.suse.com/pipermail/sle-security-updates/2026-February/024088.html
• SUSE Security Update SUSE-SU-2026:0441-1 vom 2026-02-11
  https://lists.suse.com/pipermail/sle-security-updates/2026-February/024107.html
• Rocky Linux Security Advisory RLSA-2026:0933 vom 2026-02-13
  https://errata.build.resf.org/RLSA-2026:0933
• openSUSE Security Update OPENSUSE-SU-2026:10204-1 vom 2026-02-15
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5R4OVWJW7F4TAFLPAQY7LX4HQCY7BJCU/
• SUSE Security Update SUSE-SU-2026:0504-1 vom 2026-02-13
  https://lists.suse.com/pipermail/sle-security-updates/2026-February/024244.html
• IBM Security Bulletin 7261060 vom 2026-02-17
  https://www.ibm.com/support/pages/node/7261060
• Hitachi Vulnerability Information HITACHI-SEC-2026-102 vom 2026-02-18
  https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-102/index.html
• Amazon Linux Security Advisory ALAS2-2026-3154 vom 2026-02-19
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3154.html
• IBM Security Bulletin 7261527 vom 2026-02-23
  https://www.ibm.com/support/pages/node/7261527
• IBM Security Bulletin 7261783 vom 2026-02-25
  https://www.ibm.com/support/pages/node/7261783
• IBM Security Bulletin 7261965 vom 2026-02-26
  https://www.ibm.com/support/pages/node/7261965
• IBM Security Bulletin 7262441 vom 2026-03-03
  https://www.ibm.com/support/pages/node/7262441
• Dell Security Advisory DSA-2026-101 vom 2026-03-07
  https://www.dell.com/support/kbdoc/000435907