# xerces-j2 security updates

Patch Radar has 38 security fixes for xerces-j2, closing 48 CVEs, 2 of which are being exploited. The newest is ELSA-2026-90909 (0:2.11.0-34.module+el8.10.0+90642+1ede0e5a), released November 7, 2026.

- Web page: https://patchblox.com/security/product/linux/xerces-j2
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [ELSA-2026-90909](https://patchblox.com/security/data/fix/linux/elsa-2026-90909.md) | Nov 7, 2026 | ol 8 0:2.11.0-34.module+el8.10.0+90642+1ede0e5a | High | 3 | 0 |
| [ALSA-2026:90909](https://patchblox.com/security/data/fix/linux/alsa-2026-90909.md) | Nov 7, 2026 | almalinux 8 2.11.0-34.module_el8.5.0+2577+9e95fe00 | High | 3 | 0 |
| [RLSA-2026:90909](https://patchblox.com/security/data/fix/linux/rlsa-2026-90909.md) | Nov 7, 2026 | rocky 8 0:2.11.0-34.module+el8.10.0+1763+c7c02164 | High | 3 | 0 |
| [RHSA-2026:90909](https://patchblox.com/security/data/fix/linux/rhsa-2026-90909.md) | Oct 29, 2026 | RHEL 8 0:2.11.0-34.module+el8.10.0+20993+d0f024b0 | High | 3 | 0 |
| [ELSA-2026-43218](https://patchblox.com/security/data/fix/linux/elsa-2026-43218.md) | Jul 23, 2026 | ol 8 0:2.11.0-34.module+el8.10.0+90642+1ede0e5a | High | 1 | 0 |
| [RHSA-2026:43218](https://patchblox.com/security/data/fix/linux/rhsa-2026-43218.md) | Jul 22, 2026 | RHEL 8 0:2.11.0-34.module+el8.10.0+20993+d0f024b0 | High | 1 | 0 |
| [RLSA-2026:43218](https://patchblox.com/security/data/fix/linux/rlsa-2026-43218.md) | Jul 22, 2026 | rocky 8 0:2.11.0-34.module+el8.10.0+1763+c7c02164 | High | 1 | 0 |
| [ALSA-2026:43218](https://patchblox.com/security/data/fix/linux/alsa-2026-43218.md) | Jul 22, 2026 | almalinux 8 2.11.0-34.module_el8.5.0+2577+9e95fe00 | High | 1 | 0 |
| [RLSA-2026:41948](https://patchblox.com/security/data/fix/linux/rlsa-2026-41948.md) | Jul 20, 2026 | rocky 8 0:2.11.0-34.module+el8.10.0+2052+1b0fb438 | High | 1 | 0 |
| [ALSA-2026:41948](https://patchblox.com/security/data/fix/linux/alsa-2026-41948.md) | Jul 20, 2026 | almalinux 8 2.11.0-34.module_el8.0.0+6004+2fc32706 | High | 1 | 0 |
| [RHSA-2026:41948](https://patchblox.com/security/data/fix/linux/rhsa-2026-41948.md) | Jul 18, 2026 | RHEL 8 0:2.11.0-34.module+el8.10.0+23274+27840b45 | High | 1 | 0 |
| [RLSA-2025:14126](https://patchblox.com/security/data/fix/linux/rlsa-2025-14126.md) | Sep 8, 2025 | rocky 8 0:2.11.0-34.module+el8.10.0+2052+1b0fb438 | High | 1 | 0 |
| [ELSA-2025-14126](https://patchblox.com/security/data/fix/linux/elsa-2025-14126.md) | Aug 22, 2025 | ol 8 0:2.11.0-34.module+el8.10.0+90642+1ede0e5a | High | 1 | 0 |
| [ALSA-2025:14126](https://patchblox.com/security/data/fix/linux/alsa-2025-14126.md) | Aug 20, 2025 | almalinux 8 2.11.0-34.module_el8.5.0+2577+9e95fe00 | High | 1 | 0 |
| [RHSA-2025:14126](https://patchblox.com/security/data/fix/linux/rhsa-2025-14126.md) | Aug 20, 2025 | RHEL 8 0:2.11.0-34.module+el8.10.0+20993+d0f024b0 | High | 1 | 0 |
| [RLSA-2025:9318](https://patchblox.com/security/data/fix/linux/rlsa-2025-9318.md) | Jul 29, 2025 | rocky 8 0:2.11.0-34.module+el8.10.0+1763+c7c02164 | High | 2 | 0 |
| [ELSA-2025-9318](https://patchblox.com/security/data/fix/linux/elsa-2025-9318.md) | Jul 1, 2025 | ol 8 0:2.11.0-34.module+el8.10.0+90622+accb6b48 | High | 2 | 0 |
| [ALSA-2025:9318](https://patchblox.com/security/data/fix/linux/alsa-2025-9318.md) | Jun 23, 2025 | almalinux 8 2.11.0-34.module_el8.0.0+6004+2fc32706 | High | 2 | 0 |
| [RHSA-2025:9318](https://patchblox.com/security/data/fix/linux/rhsa-2025-9318.md) | Jun 23, 2025 | RHEL 8 0:2.11.0-34.module+el8.10.0+23274+27840b45 | High | 2 | 0 |
| [SUSE-RU-2024:3971-1](https://patchblox.com/security/data/fix/linux/suse-ru-2024-3971-1.md) | Nov 11, 2024 | sles 15.6 2.12.2-150200.3.10.2 | High | 1 | 0 |
| [SUSE-RU-2024:3971-1](https://patchblox.com/security/data/fix/linux/suse-ru-2024-3971-1.md) | Nov 11, 2024 | opensuse-leap 15.6 2.12.2-150200.3.10.2 | High | 1 | 0 |
| [RLSA-2024:3061](https://patchblox.com/security/data/fix/linux/rlsa-2024-3061.md) | Jun 14, 2024 | rocky 8 0:2.11.0-34.module+el8.10.0+1763+c7c02164 | High | 1 | 0 |
| [ELSA-2024-3061](https://patchblox.com/security/data/fix/linux/elsa-2024-3061.md) | May 24, 2024 | ol 8 0:2.11.0-34.module+el8.10.0+90302+23fbc0c1 | High | 1 | 0 |
| [ALSA-2024:3061](https://patchblox.com/security/data/fix/linux/alsa-2024-3061.md) | May 22, 2024 | almalinux 8 2.11.0-34.module_el8.5.0+2577+9e95fe00 | High | 1 | 0 |
| [RHSA-2024:3061](https://patchblox.com/security/data/fix/linux/rhsa-2024-3061.md) | May 22, 2024 | RHEL 8 0:2.11.0-34.module+el8.10.0+20993+d0f024b0 | High | 1 | 0 |
| [ELSA-2022-7470](https://patchblox.com/security/data/fix/linux/elsa-2022-7470.md) | Nov 15, 2022 | ol 8 0:2.11.0-34.module+el8.3.0+7697+44932688 | High | 1 | 0 |
| [RLSA-2022:7470](https://patchblox.com/security/data/fix/linux/rlsa-2022-7470.md) | Nov 8, 2022 | rocky 8 0:2.11.0-34.module+el8.3.0+53+ea062990 | High | 1 | 0 |
| [ELSA-2021-1775](https://patchblox.com/security/data/fix/linux/elsa-2021-1775.md) | May 25, 2021 | ol 8 0:2.11.0-34.module+el8.3.0+7697+44932688 | High | 1 | 0 |
| [RHSA-2021:1775](https://patchblox.com/security/data/fix/linux/rhsa-2021-1775.md) | May 18, 2021 | RHEL 8 0:2.11.0-34.module+el8.1.0+3366+6dfb954c | High | 1 | 0 |
| [ELSA-2020-4847](https://patchblox.com/security/data/fix/linux/elsa-2020-4847.md) | Nov 10, 2020 | ol 8 0:2.11.0-34.module+el8.3.0+7697+44932688 | Patch now | 13 | 1 |
| [RHSA-2020:4847](https://patchblox.com/security/data/fix/linux/rhsa-2020-4847.md) | Nov 4, 2020 | RHEL 8 0:2.11.0-34.module+el8.1.0+3366+6dfb954c | Patch now | 17 | 2 |
| [ELSA-2020-1644](https://patchblox.com/security/data/fix/linux/elsa-2020-1644.md) | May 5, 2020 | ol 8 0:2.11.0-34.module+el8.2.0+5508+146760da | High | 5 | 0 |
| [RHSA-2020:1644](https://patchblox.com/security/data/fix/linux/rhsa-2020-1644.md) | Apr 28, 2020 | RHEL 8 0:2.11.0-34.module+el8.1.0+3366+6dfb954c | High | 12 | 0 |
| [RHBA-2019:3416](https://patchblox.com/security/data/fix/linux/rhba-2019-3416.md) | Nov 5, 2019 | RHEL 8 0:2.11.0-34.module+el8.1.0+3366+6dfb954c | High | 2 | 0 |
| [ELSA-2019-2720](https://patchblox.com/security/data/fix/linux/elsa-2019-2720.md) | Sep 17, 2019 | ol 8 0:2.11.0-34.module+el8.0.0+5332+2d497d9a | High | 1 | 0 |
| [RHSA-2019:2720](https://patchblox.com/security/data/fix/linux/rhsa-2019-2720.md) | Sep 12, 2019 | RHEL 8 0:2.11.0-34.module+el8.0.0+3892+c903d3f0 | High | 1 | 0 |
| [ELSA-2019-1529](https://patchblox.com/security/data/fix/linux/elsa-2019-1529.md) | Jul 30, 2019 | ol 8 0:2.11.0-34.module+el8.0.0+5231+3e842911 | High | 4 | 0 |
| [RHSA-2019:1529](https://patchblox.com/security/data/fix/linux/rhsa-2019-1529.md) | Jun 18, 2019 | RHEL 8 0:2.11.0-34.module+el8.0.0+3248+9d514f3b | High | 4 | 0 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo
