{"id":"CLSA-2026-1778268804","aliases":[],"status":"published","title":"java-1.8.0-openjdk: Fix of 9 CVEs","description":"- Fix release version format: place .el9 before .tuxcare.els1 suffix; bump rpmrelease to 2","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-08-07T12:15:51Z","modified":"2026-10-26T09:30:05Z","fixes":[{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk","fixed_in":["1:1.8.0.492.b09-2.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-demo","fixed_in":["1:1.8.0.492.b09-2.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-demo-fastdebug","fixed_in":["1:1.8.0.492.b09-2.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-demo-slowdebug","fixed_in":["1:1.8.0.492.b09-2.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-devel","fixed_in":["1:1.8.0.492.b09-2.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-devel-fastdebug","fixed_in":["1:1.8.0.492.b09-2.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-devel-slowdebug","fixed_in":["1:1.8.0.492.b09-2.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-fastdebug","fixed_in":["1:1.8.0.492.b09-2.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-headless","fixed_in":["1:1.8.0.492.b09-2.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-headless-fastdebug","fixed_in":["1:1.8.0.492.b09-2.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-headless-slowdebug","fixed_in":["1:1.8.0.492.b09-2.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-javadoc","fixed_in":["1:1.8.0.492.b09-2.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-javadoc-zip","fixed_in":["1:1.8.0.492.b09-2.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-slowdebug","fixed_in":["1:1.8.0.492.b09-2.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-src","fixed_in":["1:1.8.0.492.b09-2.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-src-fastdebug","fixed_in":["1:1.8.0.492.b09-2.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-src-slowdebug","fixed_in":["1:1.8.0.492.b09-2.el9.tuxcare.els1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.492.b09-2.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.492.b09-2.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.492.b09-2.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.492.b09-2.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.492.b09-2.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.492.b09-2.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.492.b09-2.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.492.b09-2.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.492.b09-2.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.492.b09-2.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.492.b09-2.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.492.b09-2.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.492.b09-2.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.492.b09-2.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.492.b09-2.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.492.b09-2.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.492.b09-2.el9.tuxcare.els1"}]}]}],"references":[{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1778268804.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2816","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22007","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22013","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22016","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22018","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22021","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23865","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33416","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34268","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2026-1778268804","title":"java-1.8.0-openjdk: Fix of 9 CVEs","description":"- Fix release version format: place .el9 before .tuxcare.els1 suffix; bump rpmrelease to 2","status":"published","published":"2026-08-07T12:15:51Z","modified":"2026-10-26T09:30:05.857829018Z","updated_at":"2026-11-02T15:43:44.737408Z"}]}}