Oracle Linux 7 : java-1.8.0-openjdk (ELSA-2026-55774)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55774 advisory. 1.8.0.504.b01-1.0.1 - update to open-jdk 8u504-b01 GA Orabug: 39966086 - Security update for CVE-2026-60589 CVE-2026-61308 and CVE-2026-70907 Tenable...

java-1.8.0-openjdk security update

1.8.0.504.b01-1.0.1 - update to open-jdk 8u504-b01 GA Orabug: 39966086 - Security update for CVE-2026-60589 CVE-2026-61308 and CVE-2026-70907...

ROS-20261019-73-0073

The vulnerability in Java 1.8.0-openjdk is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ROS-20261019-73-0096

The vulnerability in Java 1.8.0-openjdk is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20261019-73-0086

The vulnerability in Java 1.8.0-openjdk is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CLSA-2026-1788346723 java-1.8.0-openjdk: Fix of 10 CVEs

Build with devtoolset-7 on aarch64 as well as 32-bit ARM. Upstream refuses to build HotSpot on aarch64 with GCC 5 JDK-8360869, and el7 ships GCC 4.8.5, so the aarch64 build failed in configure. The devtoolset-7 machinery was already present but gated on %arm, which does not cover aarch64...

CLSA-2026-1787219937 java-1.8.0-openjdk: Fix of 11 CVEs

Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u502-b07 GA. That fixes following CVEs: - CVE-2026-46968: JSSE, remote high-complexity high-integrity compromise via TLS enhance TLS certificate handling - CVE-2026-47010: ImageIO, remote high-complexity low-impact integrity compromise enhance...

CLSA-2026-1787220312 java-1.8.0-openjdk: Fix of 14 CVEs

Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u502-b07 GA. That fixes following CVEs: - CVE-2026-46968: JSSE, remote high-complexity high-integrity compromise via TLS enhance TLS certificate handling - CVE-2026-47010: ImageIO, remote high-complexity low-impact integrity compromise enhance...

CLSA-2026-1787735855 java-1.8.0-openjdk: Fix of 5 CVEs

Update to shenandoah-jdk8u504-b01 - Security fixes from OpenJDK 8u504-b01: - CVE-2026-60589: improve resource resolving - CVE-2026-61308: enhance HTTP connections - CVE-2026-70907: enhance TLS server...

Rocky Linux 8.6 [CIQ] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (ciqsa-2026_0065)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260065 advisory. This advisory aggregates security fixes for the java-1.8.0-openjdk SRPM in CIQ LTS 8.6. It addresses 16 CVEs: CVE-2024-21011, CVE-2024-21131,...

Rocky Linux 8 [CIQ] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (crlsa-2022_7006)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20227006 advisory. OpenJDK: excessive memory allocation in X.509 certificate parsing Security, 8286533 CVE-2022-21626 OpenJDK: HttpServer no connection count limit Lightweigh...

Rocky Linux 8.6 [CIQ] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (ciqsa-2026_0921)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260921 advisory. This advisory aggregates security fixes for the java-1.8.0-openjdk SRPM in CIQ LTS 8.6. It addresses 18 CVEs: CVE-2022-40433, CVE-2024-20918,...

Rocky Linux 8 [CIQ] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (crlsa-2024_8117)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20248117 advisory. giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function CVE-2023-48161 JDK: Array indexing integer overflow 8328544 CVE-2024-21210 JDK:...

Rocky Linux 8 [CIQ] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (crlsa-2025_10862)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202510862 advisory. JDK: Better Glyph drawing CVE-2025-30749 JDK: Enhance TLS protocol support CVE-2025-30754 JDK: Improve scripting supports CVE-2025-30761 JDK: Better Glyph...

Rocky Linux 8 [CIQ] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (crlsa-2022_1491)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20221491 advisory. OpenJDK: Defective secure validation in Apache Santuario Libraries, 8278008 CVE-2022-21476 OpenJDK: Unbounded memory allocation when compiling crafted XPat...

AlmaLinux 9.2 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-demo / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1754341122)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1754341122 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

CentOS Linux 8 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-demo-fastdebug / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2025:1753373900)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2025:1753373900 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

CentOS Linux 7 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (CENTOS7:CLSA-2025:1749481242)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1749481242 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

Rocky Linux 9.6 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-demo / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1770116781)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1770116781 advisory. - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster ima...

CentOS Linux 8.5 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1770310846)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1770310846 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component...