CLSA-2026-1788346723
java-1.8.0-openjdk: Fix of 10 CVEs
No scoreFix available
- Build with devtoolset-7 on aarch64 as well as 32-bit ARM. Upstream refuses to build HotSpot on aarch64 with GCC < 5 (JDK-8360869), and el7 ships GCC 4.8.5, so the aarch64 build failed in configure. The devtoolset-7 machinery was already present but gated on %{arm}, which does not cover aarch64.
What each source reports
OSVNo score
java-1.8.0-openjdk: Fix of 10 CVEs
- Build with devtoolset-7 on aarch64 as well as 32-bit ARM. Upstream refuses to build HotSpot on aarch64 with GCC < 5 (JDK-8360869), and el7 ships GCC 4.8.5, so the aarch64 build failed in configure. The devtoolset-7 machinery was already present but gated on %{arm}, which does not cover aarch64.
- Record
CLSA-2026-1788346723- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.8.0-openjdkTuxCare:CentOS:7 | before 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 | 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 |
java-1.8.0-openjdk-accessibilityTuxCare:CentOS:7 | before 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 | 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 |
java-1.8.0-openjdk-accessibility-debugTuxCare:CentOS:7 | before 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 | 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 |
java-1.8.0-openjdk-debugTuxCare:CentOS:7 | before 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 | 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 |
java-1.8.0-openjdk-demoTuxCare:CentOS:7 | before 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 | 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 |
java-1.8.0-openjdk-demo-debugTuxCare:CentOS:7 | before 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 | 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 |
java-1.8.0-openjdk-develTuxCare:CentOS:7 | before 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 | 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 |
java-1.8.0-openjdk-devel-debugTuxCare:CentOS:7 | before 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 | 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 |
java-1.8.0-openjdk-headlessTuxCare:CentOS:7 | before 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 | 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 |
java-1.8.0-openjdk-headless-debugTuxCare:CentOS:7 | before 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 | 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 |
Show 6 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.8.0-openjdk-javadocTuxCare:CentOS:7 | before 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 | 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 |
java-1.8.0-openjdk-javadoc-debugTuxCare:CentOS:7 | before 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 | 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 |
java-1.8.0-openjdk-javadoc-zipTuxCare:CentOS:7 | before 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 | 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 |
java-1.8.0-openjdk-javadoc-zip-debugTuxCare:CentOS:7 | before 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 | 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 |
java-1.8.0-openjdk-srcTuxCare:CentOS:7 | before 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 | 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 |
java-1.8.0-openjdk-src-debugTuxCare:CentOS:7 | before 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 | 1:1.8.0.502.b07-1.el7_9.tuxcare.els2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CLSA-2026-1788346723 is a vulnerability with no CVSS score yet in java-1.8.0-openjdk, published October 16, 2026. No source lists public exploit code. Fixed in java-1.8.0-openjdk 1:1.8.0.502.b07-1.el7_9.tuxcare.els2.