{ "schema_version": "1.7.0", "id": "USN-9010-1", "summary": "openjdk-lts vulnerabilities", "details": "It was discovered that the Security component of OpenJDK 11 did not\ncorrectly authenticate users. A remote attacker could possibly use this\nissue to modify sensitive data. (CVE-2026-83374)\n\nIt was discovered that the JSSE component of OpenJDK 11 did not correctly\nauthorize users. A remote attacker could possibly use this issue to modify\nsensitive data. (CVE-2026-83376, CVE-2026-91461)\n\nIt was discovered that the JAAS component of OpenJDK 11 did not correctly\nauthorize users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-83380)\n\nIt was discovered that the Security component of OpenJDK 11 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto read or modify sensitive data. (CVE-2026-83381, CVE-2026-87294)\n\nIt was discovered that the JDBC component of OpenJDK 11 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-83387)\n\nIt was discovered that the Networking component of OpenJDK 11 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto cause a denial of service or to modify sensitive data. (CVE-2026-83395)\n\nIt was discovered that the JAXP component of OpenJDK 11 did not correctly\nauthorize users. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2026-83400)\n\nIt was discovered that the JAXP component of OpenJDK 11 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-87290)\n\nIt was discovered that the Networking component of OpenJDK 11 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto modify sensitive data. (CVE-2026-87292, CVE-2026-91332, CVE-2026-91451,\nCVE-2026-91452)\n\nIt was discovered that the JAXP component of OpenJDK 11 did not correctly\nauthorize users. A remote attacker could possibly use this issue to modify\nsensitive data. (CVE-2026-87367)\n\nIt was discovered that the ImageIO component of OpenJDK 11 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto read sensitive data. (CVE-2026-91334)\n\nIt was discovered that the AWT component of OpenJDK 11 did not correctly\nauthorize users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-91335)\n\nIt was discovered that the JSSE component of OpenJDK 11 did not correctly\nauthorize users. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2026-91373)\n\nIt was discovered that the Serviceability component of OpenJDK 11 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto read or modify sensitive data. (CVE-2026-91374)\n\nIt was discovered that the Libraries component of OpenJDK 11 did not\ncorrectly authenticate users. A local attacker could possibly use this\nissue to modify sensitive data. (CVE-2026-91375)\n\nIt was discovered that the JDK tools component of OpenJDK 11 did not\ncorrectly authenticate users. A local attacker could possibly use this\nissue to modify sensitive data. (CVE-2026-91379)\n\nIt was discovered that the Utility component of OpenJDK 11 did not\ncorrectly authorize users. A local attacker could possibly use this issue\nto read or modify sensitive data. (CVE-2026-91380)\n\nIt was discovered that the 2D component of OpenJDK 11 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to\ncause a denial of service or to modify sensitive data. (CVE-2026-91382)\n\nIt was discovered that the Networking component of OpenJDK 11 did not\ncorrectly authenticate users. A remote attacker could possibly use this\nissue to read sensitive data. (CVE-2026-91394)\n\nIt was discovered that the Utility component of OpenJDK 11 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto cause a denial of service or to modify sensitive data. (CVE-2026-91395,\nCVE-2026-91396)\n\nIt was discovered that the Serviceability component of OpenJDK 11 did not\ncorrectly authorize users. A local attacker could possibly use this issue\nto cause a denial of service or to modify sensitive data. (CVE-2026-91397)\n\nIt was discovered that the Networking component of OpenJDK 11 did not\ncorrectly authenticate users. A remote attacker could possibly use this\nissue to modify sensitive data. (CVE-2026-91398)\n\nIt was discovered that the Sound component of OpenJDK 11 did not correctly\nauthorize users. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2026-91400)\n\nIt was discovered that the JSSE component of OpenJDK 11 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to read\nor modify sensitive data. (CVE-2026-91403)\n\nIt was discovered that the Libraries component of OpenJDK 11 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto cause a denial of service. (CVE-2026-91410)\n\nIt was discovered that the JGSS component of OpenJDK 11 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to\ncause a denial of service or to modify sensitive data. (CVE-2026-91411)\n\nIt was discovered that the 2D component of OpenJDK 11 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to\ncause a denial of service or to read or modify sensitive data.\n(CVE-2026-91415)\n\nIt was discovered that the ImageIO component of OpenJDK 11 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto cause a denial of service. (CVE-2026-91418)\n\nIt was discovered that the Lightweight HTTP Server component of OpenJDK 11\ndid not correctly authorize users. A remote attacker could possibly use\nthis issue to modify sensitive data. (CVE-2026-91453)\n\nIt was discovered that the JGSS component of OpenJDK 11 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to\nmodify sensitive data. (CVE-2026-91462)\n\nIt was discovered that the JGSS component of OpenJDK 11 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-91463, CVE-2026-91464)\n\nIt was discovered that the Compiler component of OpenJDK 11 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto read or modify sensitive data. (CVE-2026-91487)\n\nIt was discovered that the Security component of OpenJDK 11 did not\ncorrectly authenticate users. A remote attacker could possibly use this\nissue to read or modify sensitive data. (CVE-2026-114820)\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttps://openjdk.org/groups/vulnerability/advisories/2026-10-20\nhttps://openjdk.org/groups/vulnerability/advisories/2026-10-21\nhttps://openjdk.org/groups/vulnerability/advisories/2026-10-24", "aliases": [], "upstream": [ "UBUNTU-CVE-2026-83374", "UBUNTU-CVE-2026-83376", "UBUNTU-CVE-2026-83380", "UBUNTU-CVE-2026-83381", "UBUNTU-CVE-2026-83387", "UBUNTU-CVE-2026-83395", "UBUNTU-CVE-2026-83400", "UBUNTU-CVE-2026-87290", "UBUNTU-CVE-2026-87292", "UBUNTU-CVE-2026-87294", "UBUNTU-CVE-2026-87367", "UBUNTU-CVE-2026-91332", "UBUNTU-CVE-2026-91334", "UBUNTU-CVE-2026-91335", "UBUNTU-CVE-2026-91373", "UBUNTU-CVE-2026-91374", "UBUNTU-CVE-2026-91375", "UBUNTU-CVE-2026-91379", "UBUNTU-CVE-2026-91380", "UBUNTU-CVE-2026-91382", "UBUNTU-CVE-2026-91394", "UBUNTU-CVE-2026-91395", "UBUNTU-CVE-2026-91396", "UBUNTU-CVE-2026-91397", "UBUNTU-CVE-2026-91398", "UBUNTU-CVE-2026-91400", "UBUNTU-CVE-2026-91403", "UBUNTU-CVE-2026-91410", "UBUNTU-CVE-2026-91411", "UBUNTU-CVE-2026-91415", "UBUNTU-CVE-2026-91418", "UBUNTU-CVE-2026-91451", "UBUNTU-CVE-2026-91452", "UBUNTU-CVE-2026-91453", "UBUNTU-CVE-2026-91461", "UBUNTU-CVE-2026-91462", "UBUNTU-CVE-2026-91463", "UBUNTU-CVE-2026-91464", "UBUNTU-CVE-2026-91487" ], "related": [], "published": "2026-11-09T15:35:24Z", "modified": "2026-11-09T15:35:24Z", "affected": [ { "package": { "ecosystem": "Ubuntu:Pro:18.04:LTS", "name": "openjdk-lts", "purl": "pkg:deb/ubuntu/openjdk-lts@11.0.33+9-1ubuntu1~18.04.1?arch=source&distro=esm-infra/bionic" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { "introduced": "0" }, { "fixed": "11.0.33+9-1ubuntu1~18.04.1" } ] } ], "versions": [ "9.0.4+12-2ubuntu4", "9.0.4+12-4ubuntu1", "10~46-4ubuntu1", "10~46-5ubuntu1", "10.0.1+10-1ubuntu2", "10.0.1+10-3ubuntu1", "10.0.2+13-1ubuntu0.18.04.1", "10.0.2+13-1ubuntu0.18.04.2", "10.0.2+13-1ubuntu0.18.04.3", "10.0.2+13-1ubuntu0.18.04.4", "11.0.2+9-3ubuntu1~18.04.3", "11.0.3+7-1ubuntu2~18.04.1", "11.0.4+11-1ubuntu2~18.04.3", "11.0.5+10-0ubuntu1.1~18.04", "11.0.6+10-1ubuntu1~18.04.1", "11.0.7+10-2ubuntu2~18.04", "11.0.8+10-0ubuntu1~18.04.1", "11.0.9+11-0ubuntu1~18.04.1", "11.0.9.1+1-0ubuntu1~18.04", "11.0.10+9-0ubuntu1~18.04", "11.0.11+9-0ubuntu2~18.04", "11.0.13+8-0ubuntu1~18.04", "11.0.14+9-0ubuntu2~18.04", "11.0.14.1+1-0ubuntu1~18.04", "11.0.15+10-0ubuntu0.18.04.1", "11.0.16+8-0ubuntu1~18.04", "11.0.17+8-1ubuntu2~18.04", "11.0.18+10-0ubuntu1~18.04.1", "11.0.19+7~us1-0ubuntu1~18.04.1", "11.0.20+8-1ubuntu1~18.04", "11.0.20.1+1-0ubuntu1~18.04", "11.0.21+9-0ubuntu1~18.04", "11.0.22+7-0ubuntu2~18.04.1", "11.0.23+9-1ubuntu1~18.04.1", "11.0.25+9-1ubuntu1~18.04", "11.0.26+4-1ubuntu1~18.04", "11.0.27+6~us1-0ubuntu1~18.04", "11.0.28+6-1ubuntu1~18.04.1", "11.0.29+7-1ubuntu1~18.04", "11.0.30+7-1ubuntu1~18.04", "11.0.31+11-1ubuntu1~18.04.2", "11.0.32+9-1ubuntu1~18.04", "11.0.32.1+1-1ubuntu1~18.04" ], "ecosystem_specific": { "binaries": [ { "binary_name": "openjdk-11-demo", "binary_version": "11.0.33+9-1ubuntu1~18.04.1" }, { "binary_name": "openjdk-11-jdk", "binary_version": "11.0.33+9-1ubuntu1~18.04.1" }, { "binary_name": "openjdk-11-jdk-headless", "binary_version": "11.0.33+9-1ubuntu1~18.04.1" }, { "binary_name": "openjdk-11-jre", "binary_version": "11.0.33+9-1ubuntu1~18.04.1" }, { "binary_name": "openjdk-11-jre-headless", "binary_version": "11.0.33+9-1ubuntu1~18.04.1" }, { "binary_name": "openjdk-11-jre-zero", "binary_version": "11.0.33+9-1ubuntu1~18.04.1" }, { "binary_name": "openjdk-11-source", "binary_version": "11.0.33+9-1ubuntu1~18.04.1" } ], "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro" }, "database_specific": { "cves_map": { "ecosystem": "Ubuntu:Pro:18.04:LTS", "cves": [ { "id": "CVE-2026-83374", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83376", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83380", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83381", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83387", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83395", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83400", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-87290", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-87292", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-87294", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-87367", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91332", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91334", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91335", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91373", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91374", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91375", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91379", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91380", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91382", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91394", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91395", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91396", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91397", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91398", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91400", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91403", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91410", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91411", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91415", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91418", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91451", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91452", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91453", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91461", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91462", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91463", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91464", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91487", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] } ] } } }, { "package": { "ecosystem": "Ubuntu:Pro:20.04:LTS", "name": "openjdk-lts", "purl": "pkg:deb/ubuntu/openjdk-lts@11.0.33+9-1ubuntu1~20.04.1?arch=source&distro=esm-infra/focal" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { "introduced": "0" }, { "fixed": "11.0.33+9-1ubuntu1~20.04.1" } ] } ], "versions": [ "11.0.5+10-0ubuntu1", "11.0.5+10-2ubuntu1", "11.0.6+10-1ubuntu1", "11.0.6+10-2ubuntu2", "11.0.7+9-1ubuntu1", "11.0.7+10-2ubuntu1", "11.0.7+10-3ubuntu1", "11.0.8+10-0ubuntu1~20.04", "11.0.9+11-0ubuntu1~20.04", "11.0.9.1+1-0ubuntu1~20.04", "11.0.10+9-0ubuntu1~20.04", "11.0.11+9-0ubuntu2~20.04", "11.0.13+8-0ubuntu1~20.04", "11.0.14+9-0ubuntu2~20.04", "11.0.14.1+1-0ubuntu1~20.04", "11.0.15+10-0ubuntu0.20.04.1", "11.0.16+8-0ubuntu1~20.04", "11.0.17+8-1ubuntu2~20.04", "11.0.18+10-0ubuntu1~20.04.1", "11.0.19+7~us1-0ubuntu1~20.04.1", "11.0.20+8-1ubuntu1~20.04", "11.0.20.1+1-0ubuntu1~20.04", "11.0.21+9-0ubuntu1~20.04", "11.0.22+7-0ubuntu2~20.04.1", "11.0.23+9-1ubuntu1~20.04.2", "11.0.24+8-1ubuntu3~20.04", "11.0.25+9-1ubuntu1~20.04", "11.0.26+4-1ubuntu1~20.04", "11.0.27+6~us1-0ubuntu1~20.04", "11.0.28+6-1ubuntu1~20.04.1", "11.0.29+7-1ubuntu1~20.04", "11.0.30+7-1ubuntu1~20.04", "11.0.31+11-1ubuntu1~20.04.2", "11.0.32+9-1ubuntu1~20.04", "11.0.32.1+1-1ubuntu1~20.04" ], "ecosystem_specific": { "binaries": [ { "binary_name": "openjdk-11-demo", "binary_version": "11.0.33+9-1ubuntu1~20.04.1" }, { "binary_name": "openjdk-11-jdk", "binary_version": "11.0.33+9-1ubuntu1~20.04.1" }, { "binary_name": "openjdk-11-jdk-headless", "binary_version": "11.0.33+9-1ubuntu1~20.04.1" }, { "binary_name": "openjdk-11-jre", "binary_version": "11.0.33+9-1ubuntu1~20.04.1" }, { "binary_name": "openjdk-11-jre-headless", "binary_version": "11.0.33+9-1ubuntu1~20.04.1" }, { "binary_name": "openjdk-11-jre-zero", "binary_version": "11.0.33+9-1ubuntu1~20.04.1" }, { "binary_name": "openjdk-11-source", "binary_version": "11.0.33+9-1ubuntu1~20.04.1" } ], "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro" }, "database_specific": { "cves_map": { "ecosystem": "Ubuntu:Pro:20.04:LTS", "cves": [ { "id": "CVE-2026-83374", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83376", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83380", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83381", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83387", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83395", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83400", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-87290", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-87292", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-87294", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-87367", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91332", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91334", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91335", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91373", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91374", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91375", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91379", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91380", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91382", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91394", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91395", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91396", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91397", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91398", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91400", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91403", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91410", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91411", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91415", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91418", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91451", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91452", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91453", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91461", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91462", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91463", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91464", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91487", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] } ] } } }, { "package": { "ecosystem": "Ubuntu:22.04:LTS", "name": "openjdk-lts", "purl": "pkg:deb/ubuntu/openjdk-lts@11.0.33+9-1ubuntu1~22.04.1?arch=source&distro=jammy" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { "introduced": "0" }, { "fixed": "11.0.33+9-1ubuntu1~22.04.1" } ] } ], "versions": [ "11.0.12+7-0ubuntu3", "11.0.13+8-0ubuntu1", "11.0.14+9-0ubuntu2", "11.0.14.1+1-0ubuntu1", "11.0.15+10-0ubuntu0.22.04.1", "11.0.16+8-0ubuntu1~22.04", "11.0.17+8-1ubuntu2~22.04", "11.0.18+10-0ubuntu1~22.04", "11.0.19+7~us1-0ubuntu1~22.04.1", "11.0.20+8-1ubuntu1~22.04", "11.0.20.1+1-0ubuntu1~22.04", "11.0.21+9-0ubuntu1~22.04", "11.0.22+7-0ubuntu2~22.04.1", "11.0.23+9-1ubuntu1~22.04.1", "11.0.24+8-1ubuntu3~22.04", "11.0.25+9-1ubuntu1~22.04", "11.0.26+4-1ubuntu1~22.04", "11.0.27+6~us1-0ubuntu1~22.04", "11.0.28+6-1ubuntu1~22.04.1", "11.0.29+7-1ubuntu1~22.04", "11.0.30+7-1ubuntu1~22.04", "11.0.31+11-1ubuntu1~22.04.2", "11.0.32+9-1ubuntu1~22.04", "11.0.32.1+1-1ubuntu1~22.04" ], "ecosystem_specific": { "binaries": [ { "binary_name": "openjdk-11-demo", "binary_version": "11.0.33+9-1ubuntu1~22.04.1" }, { "binary_name": "openjdk-11-jdk", "binary_version": "11.0.33+9-1ubuntu1~22.04.1" }, { "binary_name": "openjdk-11-jdk-headless", "binary_version": "11.0.33+9-1ubuntu1~22.04.1" }, { "binary_name": "openjdk-11-jre", "binary_version": "11.0.33+9-1ubuntu1~22.04.1" }, { "binary_name": "openjdk-11-jre-headless", "binary_version": "11.0.33+9-1ubuntu1~22.04.1" }, { "binary_name": "openjdk-11-jre-zero", "binary_version": "11.0.33+9-1ubuntu1~22.04.1" }, { "binary_name": "openjdk-11-source", "binary_version": "11.0.33+9-1ubuntu1~22.04.1" } ], "availability": "No subscription required" }, "database_specific": { "cves_map": { "ecosystem": "Ubuntu:22.04:LTS", "cves": [ { "id": "CVE-2026-83374", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83376", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83380", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83381", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83387", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83395", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83400", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-87290", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-87292", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-87294", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-87367", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91332", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91334", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91335", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91373", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91374", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91375", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91379", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91380", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91382", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91394", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91395", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91396", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91397", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91398", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91400", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91403", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91410", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91411", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91415", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91418", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91451", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91452", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91453", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91461", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91462", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91463", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91464", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91487", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] } ] } } }, { "package": { "ecosystem": "Ubuntu:24.04:LTS", "name": "openjdk-lts", "purl": "pkg:deb/ubuntu/openjdk-lts@11.0.33+9-1ubuntu1~24.04.1?arch=source&distro=noble" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { "introduced": "0" }, { "fixed": "11.0.33+9-1ubuntu1~24.04.1" } ] } ], "versions": [ "11.0.20+8-1ubuntu1", "11.0.21+9-0ubuntu1", "11.0.22+7-0ubuntu2", "11.0.23~7ea-1ubuntu1", "11.0.23~7ea-1ubuntu2", "11.0.23+9-1ubuntu1", "11.0.24+8-1ubuntu3~24.04.1", "11.0.25+9-1ubuntu1~24.04", "11.0.26+4-1ubuntu1~24.04", "11.0.27+6~us1-0ubuntu1~24.04", "11.0.28+6-1ubuntu1~24.04.1", "11.0.29+7-1ubuntu1~24.04", "11.0.30+7-1ubuntu1~24.04", "11.0.31+11-1ubuntu1~24.04.2", "11.0.32+9-1ubuntu1~24.04", "11.0.32.1+1-1ubuntu1~24.04" ], "ecosystem_specific": { "binaries": [ { "binary_name": "openjdk-11-demo", "binary_version": "11.0.33+9-1ubuntu1~24.04.1" }, { "binary_name": "openjdk-11-jdk", "binary_version": "11.0.33+9-1ubuntu1~24.04.1" }, { "binary_name": "openjdk-11-jdk-headless", "binary_version": "11.0.33+9-1ubuntu1~24.04.1" }, { "binary_name": "openjdk-11-jre", "binary_version": "11.0.33+9-1ubuntu1~24.04.1" }, { "binary_name": "openjdk-11-jre-headless", "binary_version": "11.0.33+9-1ubuntu1~24.04.1" }, { "binary_name": "openjdk-11-jre-zero", "binary_version": "11.0.33+9-1ubuntu1~24.04.1" }, { "binary_name": "openjdk-11-source", "binary_version": "11.0.33+9-1ubuntu1~24.04.1" } ], "availability": "No subscription required" }, "database_specific": { "cves_map": { "ecosystem": "Ubuntu:24.04:LTS", "cves": [ { "id": "CVE-2026-83374", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83376", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83380", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83381", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83387", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83395", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83400", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-87290", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-87292", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-87294", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-87367", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91332", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91334", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91335", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91373", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91374", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91375", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91379", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91380", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91382", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91394", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91395", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91396", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91397", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91398", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91400", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91403", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91410", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91411", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91415", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91418", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91451", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91452", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91453", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91461", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91462", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91463", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91464", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91487", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] } ] } } }, { "package": { "ecosystem": "Ubuntu:26.10", "name": "openjdk-lts", "purl": "pkg:deb/ubuntu/openjdk-lts@11.0.33+9-1ubuntu1~26.10.1?arch=source&distro=stonking" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { "introduced": "0" }, { "fixed": "11.0.33+9-1ubuntu1~26.10.1" } ] } ], "versions": [ "11.0.30+7-1ubuntu1", "11.0.31+11-1ubuntu2", "11.0.32+9-1ubuntu1", "11.0.32.1+1-1ubuntu1", "11.0.32.1+1-1ubuntu2" ], "ecosystem_specific": { "binaries": [ { "binary_name": "openjdk-11-demo", "binary_version": "11.0.33+9-1ubuntu1~26.10.1" }, { "binary_name": "openjdk-11-jdk", "binary_version": "11.0.33+9-1ubuntu1~26.10.1" }, { "binary_name": "openjdk-11-jdk-headless", "binary_version": "11.0.33+9-1ubuntu1~26.10.1" }, { "binary_name": "openjdk-11-jre", "binary_version": "11.0.33+9-1ubuntu1~26.10.1" }, { "binary_name": "openjdk-11-jre-headless", "binary_version": "11.0.33+9-1ubuntu1~26.10.1" }, { "binary_name": "openjdk-11-jre-zero", "binary_version": "11.0.33+9-1ubuntu1~26.10.1" }, { "binary_name": "openjdk-11-source", "binary_version": "11.0.33+9-1ubuntu1~26.10.1" } ], "availability": "No subscription required" }, "database_specific": { "cves_map": { "ecosystem": "Ubuntu:26.10", "cves": [ { "id": "CVE-2026-83374", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83376", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83380", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83381", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83387", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83395", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83400", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-87290", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-87292", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-87294", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-87367", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91332", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91334", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91335", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91373", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91374", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91375", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91379", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91380", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91382", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91394", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91395", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91396", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91397", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91398", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91400", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91403", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91410", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91411", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91415", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91418", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91451", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91452", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91453", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91461", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91462", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91463", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91464", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91487", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] } ] } } }, { "package": { "ecosystem": "Ubuntu:26.04:LTS", "name": "openjdk-lts", "purl": "pkg:deb/ubuntu/openjdk-lts@11.0.33+9-1ubuntu1~26.04.1?arch=source&distro=resolute" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { "introduced": "0" }, { "fixed": "11.0.33+9-1ubuntu1~26.04.1" } ] } ], "versions": [ "11.0.28+6-1ubuntu1", "11.0.29+7-1ubuntu1", "11.0.30+7-1ubuntu1", "11.0.31+11-1ubuntu1~26.04.2", "11.0.32+9-1ubuntu1~26.04", "11.0.32.1+1-1ubuntu1~26.04" ], "ecosystem_specific": { "binaries": [ { "binary_name": "openjdk-11-demo", "binary_version": "11.0.33+9-1ubuntu1~26.04.1" }, { "binary_name": "openjdk-11-jdk", "binary_version": "11.0.33+9-1ubuntu1~26.04.1" }, { "binary_name": "openjdk-11-jdk-headless", "binary_version": "11.0.33+9-1ubuntu1~26.04.1" }, { "binary_name": "openjdk-11-jre", "binary_version": "11.0.33+9-1ubuntu1~26.04.1" }, { "binary_name": "openjdk-11-jre-headless", "binary_version": "11.0.33+9-1ubuntu1~26.04.1" }, { "binary_name": "openjdk-11-jre-zero", "binary_version": "11.0.33+9-1ubuntu1~26.04.1" }, { "binary_name": "openjdk-11-source", "binary_version": "11.0.33+9-1ubuntu1~26.04.1" } ], "availability": "No subscription required" }, "database_specific": { "cves_map": { "ecosystem": "Ubuntu:26.04:LTS", "cves": [ { "id": "CVE-2026-83374", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83376", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83380", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83381", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83387", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83395", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-83400", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-87290", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-87292", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-87294", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-87367", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91332", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91334", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91335", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91373", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91374", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91375", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91379", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91380", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91382", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91394", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91395", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91396", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91397", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91398", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91400", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91403", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91410", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91411", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91415", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91418", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91451", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91452", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91453", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91461", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91462", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91463", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91464", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" }, { "type": "Ubuntu", "score": "medium" } ] }, { "id": "CVE-2026-91487", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "type": "Ubuntu", "score": "medium" } ] } ] } } } ], "references": [ { "type": "ADVISORY", "url": "https://ubuntu.com/security/notices/USN-9010-1" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-83374" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-83376" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-83380" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-83381" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-83387" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-83395" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-83400" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-87290" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-87292" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-87294" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-87367" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-91332" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-91334" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-91335" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-91373" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-91374" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-91375" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-91379" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-91380" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-91382" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-91394" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-91395" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-91396" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-91397" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-91398" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-91400" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-91403" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-91410" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-91411" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-91415" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-91418" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-91451" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-91452" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-91453" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-91461" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-91462" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-91463" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-91464" }, { "type": "REPORT", "url": "https://ubuntu.com/security/CVE-2026-91487" } ] }