CLSA-2026-1783969255

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1783969255.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1783969255
Upstream
CVE (3)
Published
2026-07-13T19:01:15Z
Modified
2026-10-26T09:43:23Z
Summary
Fix CVE(s): CVE-2026-22016, CVE-2026-34282
Details
  • OpenJDK 8u492 release, build 9 (Oracle April 2026 CPU). Release notes: https://openjdk.org/groups/vulnerability/advisories/2026-04-21
    • Security fixes (8u492):
      • CVE-2026-22016: JAXP unauthorized data access via network
      • CVE-2026-34282: Networking denial of service (hang or repeatable crash) (CVE-2026-25646 libpng is not applicable to this package: openjdk-8 is built with --with-libpng=system and system-libpng.diff strips the bundled AWT libpng; the fix lives in the libpng1.6 package.)
  • debian/rules: bump gh_tag to jdk8u492-ga, version_dash_buildnr to 492-b09, gh_tag_aarch32 to jdk8u492-b09-aarch32-20260428.
  • Refresh orig tarball from Ubuntu archive (openjdk-8_8u492-gaus2.orig.tar.gz, sha1 6f80ef059e27dfc14c99f3c21990a1bc69b4d249, size 67951797 bytes; source: archive.ubuntu.com openjdk-8 8u492-gaus2; content byte-identical to upstream jdk8u492-ga after DFSG scrub).
  • Refresh Ubuntu quilt patches for u492 context:
    • pass-extra-flags.diff (upstream removed hotspot vm.make; jsig.make hunk retained)
    • jdk-target-arch-define.diff (context drift only)
    • gcc14.diff (upstream removed splashscreen_stubs.c; remaining two hunks retained) All 48 quilt patches apply cleanly (0 rejects).
  • Ref: ELSCVE-134714, ELSCVE-134717
References

Affected packages

TuxCare:Ubuntu:20.04
openjdk-8-demo

Package

Name
openjdk-8-demo
Purl
pkg:deb/tuxcare/openjdk-8-demo?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8u492-ga~us2-0ubuntu1~20.04+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1783969255.json"
openjdk-8-doc

Package

Name
openjdk-8-doc
Purl
pkg:deb/tuxcare/openjdk-8-doc?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8u492-ga~us2-0ubuntu1~20.04+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1783969255.json"
openjdk-8-jdk

Package

Name
openjdk-8-jdk
Purl
pkg:deb/tuxcare/openjdk-8-jdk?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8u492-ga~us2-0ubuntu1~20.04+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1783969255.json"
openjdk-8-jdk-headless

Package

Name
openjdk-8-jdk-headless
Purl
pkg:deb/tuxcare/openjdk-8-jdk-headless?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8u492-ga~us2-0ubuntu1~20.04+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1783969255.json"
openjdk-8-jre

Package

Name
openjdk-8-jre
Purl
pkg:deb/tuxcare/openjdk-8-jre?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8u492-ga~us2-0ubuntu1~20.04+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1783969255.json"
openjdk-8-jre-headless

Package

Name
openjdk-8-jre-headless
Purl
pkg:deb/tuxcare/openjdk-8-jre-headless?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8u492-ga~us2-0ubuntu1~20.04+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1783969255.json"
openjdk-8-jre-zero

Package

Name
openjdk-8-jre-zero
Purl
pkg:deb/tuxcare/openjdk-8-jre-zero?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8u492-ga~us2-0ubuntu1~20.04+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1783969255.json"
openjdk-8-source

Package

Name
openjdk-8-source
Purl
pkg:deb/tuxcare/openjdk-8-source?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8u492-ga~us2-0ubuntu1~20.04+tuxcare.els1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1783969255.json"