ROS-20261019-73-0073

The vulnerability in Java 1.8.0-openjdk is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ROS-20261019-73-0086

The vulnerability in Java 1.8.0-openjdk is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ROS-20261019-73-0096

The vulnerability in Java 1.8.0-openjdk is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

CLSA-2026-1788346723 java-1.8.0-openjdk: Fix of 10 CVEs

Build with devtoolset-7 on aarch64 as well as 32-bit ARM. Upstream refuses to build HotSpot on aarch64 with GCC 5 JDK-8360869, and el7 ships GCC 4.8.5, so the aarch64 build failed in configure. The devtoolset-7 machinery was already present but gated on %arm, which does not cover aarch64...

CLSA-2026-1787219937 java-1.8.0-openjdk: Fix of 11 CVEs

Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u502-b07 GA. That fixes following CVEs: - CVE-2026-46968: JSSE, remote high-complexity high-integrity compromise via TLS enhance TLS certificate handling - CVE-2026-47010: ImageIO, remote high-complexity low-impact integrity compromise enhance...

CLSA-2026-1787220312 java-1.8.0-openjdk: Fix of 14 CVEs

Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u502-b07 GA. That fixes following CVEs: - CVE-2026-46968: JSSE, remote high-complexity high-integrity compromise via TLS enhance TLS certificate handling - CVE-2026-47010: ImageIO, remote high-complexity low-impact integrity compromise enhance...

CLSA-2026-1787735855 java-1.8.0-openjdk: Fix of 5 CVEs

Update to shenandoah-jdk8u504-b01 - Security fixes from OpenJDK 8u504-b01: - CVE-2026-60589: improve resource resolving - CVE-2026-61308: enhance HTTP connections - CVE-2026-70907: enhance TLS server...

AlmaLinux 9.2 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-demo / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1785501342)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1785501342 advisory. - Vulnerability in the Java SE product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 11.0.5 a...

Rocky Linux 8.8 [CIQ] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (ciqsa-2026_0336)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260336 advisory. This advisory aggregates security fixes for the java-1.8.0-openjdk SRPM in CIQ LTS 8.8. It addresses 15 CVEs: CVE-2024-21011, CVE-2024-21131,...

AlmaLinux 9.6 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-demo / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1770116781)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1770116781 advisory. - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image...

Rocky Linux 8 [CIQ] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (crlsa-2023_4176)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20234176 advisory. OpenJDK: improper handling of slash characters in URI-to-path conversion 8305312 CVE-2023-22049 OpenJDK: array indexing integer overflow issue 8304468...

Rocky Linux 8 [CIQ] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (crlsa-2021_2776)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20212776 advisory. OpenJDK: Incorrect comparison during range check elimination Hotspot, 8264066 CVE-2021-2388 OpenJDK: FTP PASV command response can cause FtpClient to conne...

Rocky Linux 9.2 [CIQ] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_1073)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261073 advisory. This advisory aggregates security fixes for the java-1.8.0-openjdk SRPM in CIQ LTS 9.2. It addresses 6 CVEs: CVE-2024-20918, CVE-2024-20921,...

CentOS Linux 6 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-debug / etc Multiple Vulnerabilities (CENTOS6:CLSA-2025:1755074145)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2025:1755074145 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

CentOS Linux 6 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-demo-debug / etc Multiple Vulnerabilities (CENTOS6:CLSA-2025:1751612332)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2025:1751612332 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

CentOS Linux 8 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1770310264)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1770310264 advisory. - The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. Thi...

CentOS Linux 7 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (CENTOS7:CLSA-2024:1706698462)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2024:1706698462 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component:...

Rocky Linux 8 [CIQ] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (crlsa-2026_55775)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202655775 advisory. JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Enhance TLS server CVE-2026-70907 Tenable has extracted t...

CentOS Linux 8.5 [TuxCare] Security Update: java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2025:1753374348)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2025:1753374348 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

CentOS Linux 7 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (CENTOS7:CLSA-2025:1753982295)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1753982295 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...