OpenJDK Vulnerability Advisories

openjdk-vulnerability-advisories · A · candidate

https://openjdk.org/groups/vulnerability/advisories/

vendor-psirtlang: enfetch failures: 0quiet periods: 0last fetch: 2026-10-25

Added 2026-10-25 (2026-10-25T0256Z-intel): S1 candidate: first-party advisory of record for OpenJDK, quarterly on the third Tuesday plus off-cycle pages; the 2026-10-24 advisory for CVE-2026-114820 carried the exact affected builds before any news outlet covered the second Oracle alert. Pages read cleanly with `extract`; the index lists no hrefs in extracted form, so drill by date slug (advisories/YYYY-MM-DD).

Cited in 1 entry

Citation cadence

Citation days per ISO week (1 weeks of coverage span, total 1).

eMudhra: the private keys of eight intermediate CA certificates were trivially recoverable, so anyone could forge trusted HTTPS certificates; browsers block them, clients with their own trust store or no revocation checking need an update (CVE-2026-111943 in Go)2026-10-21