UBUNTU-CVE-2026-47021

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2026-47021

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-47021

Upstream

CVE-2026-47021

Published

2026-07-23T00:00:00Z

Modified

2026-07-23T09:30:19.827945163Z

Severity

Ubuntu - medium

Summary

[none]

Details

(Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)

References

Affected packages

Ubuntu:16.04:LTS

openjdk-9

Package

Name: openjdk-9
Purl: pkg:deb/ubuntu/openjdk-9?arch=source&distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

Other

9~b88-1

9~b101-2ubuntu2

9~b102-1

9~b113-0ubuntu1

9~b114-0ubuntu1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-9-demo",
            "binary_version": "9~b114-0ubuntu1"
        },
        {
            "binary_name": "openjdk-9-jdk",
            "binary_version": "9~b114-0ubuntu1"
        },
        {
            "binary_name": "openjdk-9-jdk-headless",
            "binary_version": "9~b114-0ubuntu1"
        },
        {
            "binary_name": "openjdk-9-jre",
            "binary_version": "9~b114-0ubuntu1"
        },
        {
            "binary_name": "openjdk-9-jre-headless",
            "binary_version": "9~b114-0ubuntu1"
        },
        {
            "binary_name": "openjdk-9-source",
            "binary_version": "9~b114-0ubuntu1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"

Ubuntu:20.04:LTS

openjdk-13

Package

Name: openjdk-13
Purl: pkg:deb/ubuntu/openjdk-13?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

Other

13+33-1

13.*

13.0.1+9-2

13.0.2+8-1

13.0.2+8-2

13.0.3+3-1ubuntu2

13.0.4+8-1~20.04

13.0.7+5-0ubuntu1~20.04

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-13-demo",
            "binary_version": "13.0.7+5-0ubuntu1~20.04"
        },
        {
            "binary_name": "openjdk-13-jdk",
            "binary_version": "13.0.7+5-0ubuntu1~20.04"
        },
        {
            "binary_name": "openjdk-13-jdk-headless",
            "binary_version": "13.0.7+5-0ubuntu1~20.04"
        },
        {
            "binary_name": "openjdk-13-jre",
            "binary_version": "13.0.7+5-0ubuntu1~20.04"
        },
        {
            "binary_name": "openjdk-13-jre-headless",
            "binary_version": "13.0.7+5-0ubuntu1~20.04"
        },
        {
            "binary_name": "openjdk-13-jre-zero",
            "binary_version": "13.0.7+5-0ubuntu1~20.04"
        },
        {
            "binary_name": "openjdk-13-source",
            "binary_version": "13.0.7+5-0ubuntu1~20.04"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"

openjdk-16

Package

Name: openjdk-16
Purl: pkg:deb/ubuntu/openjdk-16?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

16.*

16.0.1+9-1~20.04

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-16-demo",
            "binary_version": "16.0.1+9-1~20.04"
        },
        {
            "binary_name": "openjdk-16-jdk",
            "binary_version": "16.0.1+9-1~20.04"
        },
        {
            "binary_name": "openjdk-16-jdk-headless",
            "binary_version": "16.0.1+9-1~20.04"
        },
        {
            "binary_name": "openjdk-16-jre",
            "binary_version": "16.0.1+9-1~20.04"
        },
        {
            "binary_name": "openjdk-16-jre-headless",
            "binary_version": "16.0.1+9-1~20.04"
        },
        {
            "binary_name": "openjdk-16-jre-zero",
            "binary_version": "16.0.1+9-1~20.04"
        },
        {
            "binary_name": "openjdk-16-source",
            "binary_version": "16.0.1+9-1~20.04"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"

Ubuntu:22.04:LTS

openjdk-17

Package

Name: openjdk-17
Purl: pkg:deb/ubuntu/openjdk-17?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

Other

17+35-1

17.*

17.0.1+12-1

17.0.2+8-1

17.0.3+7-0ubuntu0.22.04.1

17.0.4+8-1~22.04

17.0.5+8-2ubuntu1~22.04

17.0.6+10-0ubuntu1~22.04

17.0.7+7~us1-0ubuntu1~22.04.2

17.0.8+7-1~22.04

17.0.8.1+1~us1-0ubuntu1~22.04

17.0.9+9-1~22.04

17.0.10+7-1~22.04.1

17.0.11+9-1~22.04.1

17.0.12+7-1ubuntu2~22.04

17.0.13+11-2ubuntu1~22.04

17.0.14+7-1~22.04.1

17.0.15+6~us1-0ubuntu1~22.04

17.0.16+8~us1-0ubuntu1~22.04.1

17.0.17+10-1~22.04

17.0.18+8-1~22.04.1

17.0.19+10-1~22.04.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-17-demo",
            "binary_version": "17.0.19+10-1~22.04.2"
        },
        {
            "binary_name": "openjdk-17-jdk",
            "binary_version": "17.0.19+10-1~22.04.2"
        },
        {
            "binary_name": "openjdk-17-jdk-headless",
            "binary_version": "17.0.19+10-1~22.04.2"
        },
        {
            "binary_name": "openjdk-17-jre",
            "binary_version": "17.0.19+10-1~22.04.2"
        },
        {
            "binary_name": "openjdk-17-jre-headless",
            "binary_version": "17.0.19+10-1~22.04.2"
        },
        {
            "binary_name": "openjdk-17-jre-zero",
            "binary_version": "17.0.19+10-1~22.04.2"
        },
        {
            "binary_name": "openjdk-17-source",
            "binary_version": "17.0.19+10-1~22.04.2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"

openjdk-18

Package

Name: openjdk-18
Purl: pkg:deb/ubuntu/openjdk-18?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

Other

18~15ea-4

18~20ea-1

18~32ea-1

18~36ea-1

18.*

18.0.2+9-2~22.04

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-18-demo",
            "binary_version": "18.0.2+9-2~22.04"
        },
        {
            "binary_name": "openjdk-18-jdk",
            "binary_version": "18.0.2+9-2~22.04"
        },
        {
            "binary_name": "openjdk-18-jdk-headless",
            "binary_version": "18.0.2+9-2~22.04"
        },
        {
            "binary_name": "openjdk-18-jre",
            "binary_version": "18.0.2+9-2~22.04"
        },
        {
            "binary_name": "openjdk-18-jre-headless",
            "binary_version": "18.0.2+9-2~22.04"
        },
        {
            "binary_name": "openjdk-18-jre-zero",
            "binary_version": "18.0.2+9-2~22.04"
        },
        {
            "binary_name": "openjdk-18-source",
            "binary_version": "18.0.2+9-2~22.04"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"

openjdk-21

Package

Name: openjdk-21
Purl: pkg:deb/ubuntu/openjdk-21?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

21.*

21.0.1+12-2~22.04

21.0.2+13-1~22.04.1

21.0.3+9-1ubuntu1~22.04.1

21.0.4+7-1ubuntu2~22.04

21.0.5+11-1ubuntu1~22.04

21.0.6+7-1~22.04.1

21.0.7+6~us1-0ubuntu1~22.04

21.0.8+9~us1-0ubuntu1~22.04.1

21.0.9+10-1~22.04

21.0.10+7-1~22.04

21.0.11+10-1~22.04.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-21-demo",
            "binary_version": "21.0.11+10-1~22.04.2"
        },
        {
            "binary_name": "openjdk-21-jdk",
            "binary_version": "21.0.11+10-1~22.04.2"
        },
        {
            "binary_name": "openjdk-21-jdk-headless",
            "binary_version": "21.0.11+10-1~22.04.2"
        },
        {
            "binary_name": "openjdk-21-jre",
            "binary_version": "21.0.11+10-1~22.04.2"
        },
        {
            "binary_name": "openjdk-21-jre-headless",
            "binary_version": "21.0.11+10-1~22.04.2"
        },
        {
            "binary_name": "openjdk-21-jre-zero",
            "binary_version": "21.0.11+10-1~22.04.2"
        },
        {
            "binary_name": "openjdk-21-source",
            "binary_version": "21.0.11+10-1~22.04.2"
        },
        {
            "binary_name": "openjdk-21-testsupport",
            "binary_version": "21.0.11+10-1~22.04.2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"

openjdk-25

Package

Name: openjdk-25
Purl: pkg:deb/ubuntu/openjdk-25?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

25+36-1~22.*

25+36-1~22.04.2

25.*

25.0.1+8-1~22.04

25.0.2+10-1~22.04

25.0.3+9-2~22.04.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-25-demo",
            "binary_version": "25.0.3+9-2~22.04.2"
        },
        {
            "binary_name": "openjdk-25-jdk",
            "binary_version": "25.0.3+9-2~22.04.2"
        },
        {
            "binary_name": "openjdk-25-jdk-headless",
            "binary_version": "25.0.3+9-2~22.04.2"
        },
        {
            "binary_name": "openjdk-25-jre",
            "binary_version": "25.0.3+9-2~22.04.2"
        },
        {
            "binary_name": "openjdk-25-jre-headless",
            "binary_version": "25.0.3+9-2~22.04.2"
        },
        {
            "binary_name": "openjdk-25-jre-zero",
            "binary_version": "25.0.3+9-2~22.04.2"
        },
        {
            "binary_name": "openjdk-25-source",
            "binary_version": "25.0.3+9-2~22.04.2"
        },
        {
            "binary_name": "openjdk-25-testsupport",
            "binary_version": "25.0.3+9-2~22.04.2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"

openjdk-8

Package

Name: openjdk-8
Purl: pkg:deb/ubuntu/openjdk-8?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

Other

8u302-b08-0ubuntu2

8u312-b07-0ubuntu1

8u342-b07-0ubuntu1~22.*

8u342-b07-0ubuntu1~22.04

8u352-ga-1~22.*

8u352-ga-1~22.04

8u362-ga-0ubuntu1~22.*

8u362-ga-0ubuntu1~22.04

8u372-ga~us1-0ubuntu1~22.*

8u372-ga~us1-0ubuntu1~22.04

8u382-ga-1~22.*

8u382-ga-1~22.04.1

8u392-ga-1~22.*

8u392-ga-1~22.04

8u402-ga-2ubuntu1~22.*

8u402-ga-2ubuntu1~22.04

8u412-ga-1~22.*

8u412-ga-1~22.04.1

8u422-b05-1~22.*

8u422-b05-1~22.04

8u432-ga~us1-0ubuntu2~22.*

8u432-ga~us1-0ubuntu2~22.04

8u442-b06~us1-0ubuntu1~22.*

8u442-b06~us1-0ubuntu1~22.04

8u452-ga~us1-0ubuntu1~22.*

8u452-ga~us1-0ubuntu1~22.04

8u462-ga~us1-0ubuntu2~22.*

8u462-ga~us1-0ubuntu2~22.04.2

8u472-ga-1~22.*

8u472-ga-1~22.04

8u482-ga~us1-0ubuntu1~22.*

8u482-ga~us1-0ubuntu1~22.04

8u492-ga~us2-0ubuntu1~22.*

8u492-ga~us2-0ubuntu1~22.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-8-demo",
            "binary_version": "8u492-ga~us2-0ubuntu1~22.04.1"
        },
        {
            "binary_name": "openjdk-8-jdk",
            "binary_version": "8u492-ga~us2-0ubuntu1~22.04.1"
        },
        {
            "binary_name": "openjdk-8-jdk-headless",
            "binary_version": "8u492-ga~us2-0ubuntu1~22.04.1"
        },
        {
            "binary_name": "openjdk-8-jre",
            "binary_version": "8u492-ga~us2-0ubuntu1~22.04.1"
        },
        {
            "binary_name": "openjdk-8-jre-headless",
            "binary_version": "8u492-ga~us2-0ubuntu1~22.04.1"
        },
        {
            "binary_name": "openjdk-8-jre-zero",
            "binary_version": "8u492-ga~us2-0ubuntu1~22.04.1"
        },
        {
            "binary_name": "openjdk-8-source",
            "binary_version": "8u492-ga~us2-0ubuntu1~22.04.1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"

openjdk-lts

Package

Name: openjdk-lts
Purl: pkg:deb/ubuntu/openjdk-lts?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

11.*

11.0.12+7-0ubuntu3

11.0.13+8-0ubuntu1

11.0.14+9-0ubuntu2

11.0.14.1+1-0ubuntu1

11.0.15+10-0ubuntu0.22.04.1

11.0.16+8-0ubuntu1~22.04

11.0.17+8-1ubuntu2~22.04

11.0.18+10-0ubuntu1~22.04

11.0.19+7~us1-0ubuntu1~22.04.1

11.0.20+8-1ubuntu1~22.04

11.0.20.1+1-0ubuntu1~22.04

11.0.21+9-0ubuntu1~22.04

11.0.22+7-0ubuntu2~22.04.1

11.0.23+9-1ubuntu1~22.04.1

11.0.24+8-1ubuntu3~22.04

11.0.25+9-1ubuntu1~22.04

11.0.26+4-1ubuntu1~22.04

11.0.27+6~us1-0ubuntu1~22.04

11.0.28+6-1ubuntu1~22.04.1

11.0.29+7-1ubuntu1~22.04

11.0.30+7-1ubuntu1~22.04

11.0.31+11-1ubuntu1~22.04.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-11-demo",
            "binary_version": "11.0.31+11-1ubuntu1~22.04.2"
        },
        {
            "binary_name": "openjdk-11-jdk",
            "binary_version": "11.0.31+11-1ubuntu1~22.04.2"
        },
        {
            "binary_name": "openjdk-11-jdk-headless",
            "binary_version": "11.0.31+11-1ubuntu1~22.04.2"
        },
        {
            "binary_name": "openjdk-11-jre",
            "binary_version": "11.0.31+11-1ubuntu1~22.04.2"
        },
        {
            "binary_name": "openjdk-11-jre-headless",
            "binary_version": "11.0.31+11-1ubuntu1~22.04.2"
        },
        {
            "binary_name": "openjdk-11-jre-zero",
            "binary_version": "11.0.31+11-1ubuntu1~22.04.2"
        },
        {
            "binary_name": "openjdk-11-source",
            "binary_version": "11.0.31+11-1ubuntu1~22.04.2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"

Ubuntu:24.04:LTS

openjdk-17

Package

Name: openjdk-17
Purl: pkg:deb/ubuntu/openjdk-17?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

17.*

17.0.9~6ea-1

17.0.9+9-1

17.0.9+9-2

17.0.10~6ea-1

17.0.10+7-1

17.0.11~7ea-1

17.0.11~7ea-1build1

17.0.11+9-1

17.0.12+7-1ubuntu2~24.04

17.0.13+11-2ubuntu1~24.04

17.0.14+7-1~24.04

17.0.15+6~us1-0ubuntu1~24.04

17.0.16+8~us1-0ubuntu1~24.04.1

17.0.17+10-1~24.04

17.0.18+8-1~24.04.1

17.0.19+10-1~24.04.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-17-demo",
            "binary_version": "17.0.19+10-1~24.04.2"
        },
        {
            "binary_name": "openjdk-17-jdk",
            "binary_version": "17.0.19+10-1~24.04.2"
        },
        {
            "binary_name": "openjdk-17-jdk-headless",
            "binary_version": "17.0.19+10-1~24.04.2"
        },
        {
            "binary_name": "openjdk-17-jre",
            "binary_version": "17.0.19+10-1~24.04.2"
        },
        {
            "binary_name": "openjdk-17-jre-headless",
            "binary_version": "17.0.19+10-1~24.04.2"
        },
        {
            "binary_name": "openjdk-17-jre-zero",
            "binary_version": "17.0.19+10-1~24.04.2"
        },
        {
            "binary_name": "openjdk-17-source",
            "binary_version": "17.0.19+10-1~24.04.2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"

openjdk-21

Package

Name: openjdk-21
Purl: pkg:deb/ubuntu/openjdk-21?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

Other

21+35-1

21.*

21.0.1+12-2

21.0.1+12-3

21.0.2+13-1

21.0.2+13-2

21.0.3~7ea-1

21.0.3~7ea-1build1

21.0.3~7ea-1build2

21.0.3+9-1

21.0.3+9-1ubuntu1

21.0.4+7-1ubuntu2~24.04

21.0.5+11-1ubuntu1~24.04

21.0.6+7-1~24.04.1

21.0.7+6~us1-0ubuntu1~24.04

21.0.8+9~us1-0ubuntu1~24.04.1

21.0.9+10-1~24.04

21.0.10+7-1~24.04

21.0.11+10-1~24.04.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-21-demo",
            "binary_version": "21.0.11+10-1~24.04.2"
        },
        {
            "binary_name": "openjdk-21-jdk",
            "binary_version": "21.0.11+10-1~24.04.2"
        },
        {
            "binary_name": "openjdk-21-jdk-headless",
            "binary_version": "21.0.11+10-1~24.04.2"
        },
        {
            "binary_name": "openjdk-21-jre",
            "binary_version": "21.0.11+10-1~24.04.2"
        },
        {
            "binary_name": "openjdk-21-jre-headless",
            "binary_version": "21.0.11+10-1~24.04.2"
        },
        {
            "binary_name": "openjdk-21-jre-zero",
            "binary_version": "21.0.11+10-1~24.04.2"
        },
        {
            "binary_name": "openjdk-21-source",
            "binary_version": "21.0.11+10-1~24.04.2"
        },
        {
            "binary_name": "openjdk-21-testsupport",
            "binary_version": "21.0.11+10-1~24.04.2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"

openjdk-25

Package

Name: openjdk-25
Purl: pkg:deb/ubuntu/openjdk-25?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

25+36-1~24.*

25+36-1~24.04.2

25.*

25.0.1+8-1~24.04

25.0.2+10-1~24.04

25.0.3+9-2~24.04.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-25-demo",
            "binary_version": "25.0.3+9-2~24.04.2"
        },
        {
            "binary_name": "openjdk-25-jdk",
            "binary_version": "25.0.3+9-2~24.04.2"
        },
        {
            "binary_name": "openjdk-25-jdk-headless",
            "binary_version": "25.0.3+9-2~24.04.2"
        },
        {
            "binary_name": "openjdk-25-jre",
            "binary_version": "25.0.3+9-2~24.04.2"
        },
        {
            "binary_name": "openjdk-25-jre-headless",
            "binary_version": "25.0.3+9-2~24.04.2"
        },
        {
            "binary_name": "openjdk-25-jre-zero",
            "binary_version": "25.0.3+9-2~24.04.2"
        },
        {
            "binary_name": "openjdk-25-source",
            "binary_version": "25.0.3+9-2~24.04.2"
        },
        {
            "binary_name": "openjdk-25-testsupport",
            "binary_version": "25.0.3+9-2~24.04.2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"

openjdk-8

Package

Name: openjdk-8
Purl: pkg:deb/ubuntu/openjdk-8?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

Other

8u382-ga-1ubuntu1

8u392-ga-1

8u402-ga-1

8u402-ga-2

8u402-ga-2ubuntu1

8u402-ga-2ubuntu6

8u402-ga-2ubuntu7

8u402-ga-8build1

8u412-ga-1~24.*

8u412-ga-1~24.04.2

8u422-b05-1~24.*

8u422-b05-1~24.04

8u432-ga~us1-0ubuntu2~24.*

8u432-ga~us1-0ubuntu2~24.04

8u442-b06~us1-0ubuntu1~24.*

8u442-b06~us1-0ubuntu1~24.04

8u452-ga~us1-0ubuntu1~24.*

8u452-ga~us1-0ubuntu1~24.04

8u462-ga~us1-0ubuntu2~24.*

8u462-ga~us1-0ubuntu2~24.04.2

8u472-ga-1~24.*

8u472-ga-1~24.04

8u482-ga~us1-0ubuntu1~24.*

8u482-ga~us1-0ubuntu1~24.04

8u492-ga~us2-0ubuntu1~24.*

8u492-ga~us2-0ubuntu1~24.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-8-demo",
            "binary_version": "8u492-ga~us2-0ubuntu1~24.04.1"
        },
        {
            "binary_name": "openjdk-8-jdk",
            "binary_version": "8u492-ga~us2-0ubuntu1~24.04.1"
        },
        {
            "binary_name": "openjdk-8-jdk-headless",
            "binary_version": "8u492-ga~us2-0ubuntu1~24.04.1"
        },
        {
            "binary_name": "openjdk-8-jre",
            "binary_version": "8u492-ga~us2-0ubuntu1~24.04.1"
        },
        {
            "binary_name": "openjdk-8-jre-headless",
            "binary_version": "8u492-ga~us2-0ubuntu1~24.04.1"
        },
        {
            "binary_name": "openjdk-8-jre-zero",
            "binary_version": "8u492-ga~us2-0ubuntu1~24.04.1"
        },
        {
            "binary_name": "openjdk-8-source",
            "binary_version": "8u492-ga~us2-0ubuntu1~24.04.1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"

Ubuntu:26.04:LTS

openjdk-17

Package

Name: openjdk-17
Purl: pkg:deb/ubuntu/openjdk-17?arch=source&distro=resolute

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

17.*

17.0.17~8ea-1

17.0.17+10-1

17.0.18~7ea-1

17.0.18+8-1

17.0.19+10-1~26.04.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-17-demo",
            "binary_version": "17.0.19+10-1~26.04.2"
        },
        {
            "binary_name": "openjdk-17-jdk",
            "binary_version": "17.0.19+10-1~26.04.2"
        },
        {
            "binary_name": "openjdk-17-jdk-headless",
            "binary_version": "17.0.19+10-1~26.04.2"
        },
        {
            "binary_name": "openjdk-17-jre",
            "binary_version": "17.0.19+10-1~26.04.2"
        },
        {
            "binary_name": "openjdk-17-jre-headless",
            "binary_version": "17.0.19+10-1~26.04.2"
        },
        {
            "binary_name": "openjdk-17-jre-zero",
            "binary_version": "17.0.19+10-1~26.04.2"
        },
        {
            "binary_name": "openjdk-17-source",
            "binary_version": "17.0.19+10-1~26.04.2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"

openjdk-17-crac

Package

Name: openjdk-17-crac
Purl: pkg:deb/ubuntu/openjdk-17-crac?arch=source&distro=resolute

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

17.*

17.0.16+8-0ubuntu1

17.0.17+10-0ubuntu1

17.0.18+8-0ubuntu1

17.0.19+10-0ubuntu1~26.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-17-crac-demo",
            "binary_version": "17.0.19+10-0ubuntu1~26.04.1"
        },
        {
            "binary_name": "openjdk-17-crac-jdk",
            "binary_version": "17.0.19+10-0ubuntu1~26.04.1"
        },
        {
            "binary_name": "openjdk-17-crac-jdk-headless",
            "binary_version": "17.0.19+10-0ubuntu1~26.04.1"
        },
        {
            "binary_name": "openjdk-17-crac-jre",
            "binary_version": "17.0.19+10-0ubuntu1~26.04.1"
        },
        {
            "binary_name": "openjdk-17-crac-jre-headless",
            "binary_version": "17.0.19+10-0ubuntu1~26.04.1"
        },
        {
            "binary_name": "openjdk-17-crac-jre-zero",
            "binary_version": "17.0.19+10-0ubuntu1~26.04.1"
        },
        {
            "binary_name": "openjdk-17-crac-source",
            "binary_version": "17.0.19+10-0ubuntu1~26.04.1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"

openjdk-21

Package

Name: openjdk-21
Purl: pkg:deb/ubuntu/openjdk-21?arch=source&distro=resolute

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

21.*

21.0.9~8ea-1

21.0.9+10-1

21.0.10~4ea-1

21.0.10~6ea-1

21.0.10+7-1

21.0.11~5ea-1

21.0.11~8ea-1

21.0.11+10-1~26.04.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-21-demo",
            "binary_version": "21.0.11+10-1~26.04.2"
        },
        {
            "binary_name": "openjdk-21-jdk",
            "binary_version": "21.0.11+10-1~26.04.2"
        },
        {
            "binary_name": "openjdk-21-jdk-headless",
            "binary_version": "21.0.11+10-1~26.04.2"
        },
        {
            "binary_name": "openjdk-21-jre",
            "binary_version": "21.0.11+10-1~26.04.2"
        },
        {
            "binary_name": "openjdk-21-jre-headless",
            "binary_version": "21.0.11+10-1~26.04.2"
        },
        {
            "binary_name": "openjdk-21-jre-zero",
            "binary_version": "21.0.11+10-1~26.04.2"
        },
        {
            "binary_name": "openjdk-21-source",
            "binary_version": "21.0.11+10-1~26.04.2"
        },
        {
            "binary_name": "openjdk-21-testsupport",
            "binary_version": "21.0.11+10-1~26.04.2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"

openjdk-21-crac

Package

Name: openjdk-21-crac
Purl: pkg:deb/ubuntu/openjdk-21-crac?arch=source&distro=resolute

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

21.*

21.0.8+9-0ubuntu1

21.0.9+10-0ubuntu1

21.0.10+7-0ubuntu1

21.0.11+10-0ubuntu1~26.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-21-crac-demo",
            "binary_version": "21.0.11+10-0ubuntu1~26.04.1"
        },
        {
            "binary_name": "openjdk-21-crac-jdk",
            "binary_version": "21.0.11+10-0ubuntu1~26.04.1"
        },
        {
            "binary_name": "openjdk-21-crac-jdk-headless",
            "binary_version": "21.0.11+10-0ubuntu1~26.04.1"
        },
        {
            "binary_name": "openjdk-21-crac-jre",
            "binary_version": "21.0.11+10-0ubuntu1~26.04.1"
        },
        {
            "binary_name": "openjdk-21-crac-jre-headless",
            "binary_version": "21.0.11+10-0ubuntu1~26.04.1"
        },
        {
            "binary_name": "openjdk-21-crac-jre-zero",
            "binary_version": "21.0.11+10-0ubuntu1~26.04.1"
        },
        {
            "binary_name": "openjdk-21-crac-source",
            "binary_version": "21.0.11+10-0ubuntu1~26.04.1"
        },
        {
            "binary_name": "openjdk-21-crac-testsupport",
            "binary_version": "21.0.11+10-0ubuntu1~26.04.1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"

openjdk-25

Package

Name: openjdk-25
Purl: pkg:deb/ubuntu/openjdk-25?arch=source&distro=resolute

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

Other

25+36-1

25.*

25.0.1+8-1

25.0.1+8-2

25.0.1+8-3

25.0.2+10-1

25.0.3~5ea-2

25.0.3~7ea-2

25.0.3+9-2~26.04.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-25-demo",
            "binary_version": "25.0.3+9-2~26.04.2"
        },
        {
            "binary_name": "openjdk-25-jdk",
            "binary_version": "25.0.3+9-2~26.04.2"
        },
        {
            "binary_name": "openjdk-25-jdk-headless",
            "binary_version": "25.0.3+9-2~26.04.2"
        },
        {
            "binary_name": "openjdk-25-jre",
            "binary_version": "25.0.3+9-2~26.04.2"
        },
        {
            "binary_name": "openjdk-25-jre-headless",
            "binary_version": "25.0.3+9-2~26.04.2"
        },
        {
            "binary_name": "openjdk-25-jre-zero",
            "binary_version": "25.0.3+9-2~26.04.2"
        },
        {
            "binary_name": "openjdk-25-source",
            "binary_version": "25.0.3+9-2~26.04.2"
        },
        {
            "binary_name": "openjdk-25-testsupport",
            "binary_version": "25.0.3+9-2~26.04.2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"

openjdk-26

Package

Name: openjdk-26
Purl: pkg:deb/ubuntu/openjdk-26?arch=source&distro=resolute

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

Other

26~17ea-1

26~26ea-1

26~28ea-1

26~30ea-1

26~32ea-1

26~34ea-1

26.*

26.0.1+8-2~26.04.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-26-demo",
            "binary_version": "26.0.1+8-2~26.04.2"
        },
        {
            "binary_name": "openjdk-26-jdk",
            "binary_version": "26.0.1+8-2~26.04.2"
        },
        {
            "binary_name": "openjdk-26-jdk-headless",
            "binary_version": "26.0.1+8-2~26.04.2"
        },
        {
            "binary_name": "openjdk-26-jre",
            "binary_version": "26.0.1+8-2~26.04.2"
        },
        {
            "binary_name": "openjdk-26-jre-headless",
            "binary_version": "26.0.1+8-2~26.04.2"
        },
        {
            "binary_name": "openjdk-26-jre-zero",
            "binary_version": "26.0.1+8-2~26.04.2"
        },
        {
            "binary_name": "openjdk-26-source",
            "binary_version": "26.0.1+8-2~26.04.2"
        },
        {
            "binary_name": "openjdk-26-testsupport",
            "binary_version": "26.0.1+8-2~26.04.2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"

openjdk-8

Package

Name: openjdk-8
Purl: pkg:deb/ubuntu/openjdk-8?arch=source&distro=resolute

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

Other

8u462-ga-1

8u472-ga~us1-0ubuntu1

8u472-ga-1

8u482-ga~us1-0ubuntu1

8u492-ga~us2-0ubuntu1~26.*

8u492-ga~us2-0ubuntu1~26.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-8-demo",
            "binary_version": "8u492-ga~us2-0ubuntu1~26.04.1"
        },
        {
            "binary_name": "openjdk-8-jdk",
            "binary_version": "8u492-ga~us2-0ubuntu1~26.04.1"
        },
        {
            "binary_name": "openjdk-8-jdk-headless",
            "binary_version": "8u492-ga~us2-0ubuntu1~26.04.1"
        },
        {
            "binary_name": "openjdk-8-jre",
            "binary_version": "8u492-ga~us2-0ubuntu1~26.04.1"
        },
        {
            "binary_name": "openjdk-8-jre-headless",
            "binary_version": "8u492-ga~us2-0ubuntu1~26.04.1"
        },
        {
            "binary_name": "openjdk-8-jre-zero",
            "binary_version": "8u492-ga~us2-0ubuntu1~26.04.1"
        },
        {
            "binary_name": "openjdk-8-source",
            "binary_version": "8u492-ga~us2-0ubuntu1~26.04.1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"

openjdk-lts

Package

Name: openjdk-lts
Purl: pkg:deb/ubuntu/openjdk-lts?arch=source&distro=resolute

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

11.*

11.0.28+6-1ubuntu1

11.0.29+7-1ubuntu1

11.0.30+7-1ubuntu1

11.0.31+11-1ubuntu1~26.04.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-11-demo",
            "binary_version": "11.0.31+11-1ubuntu1~26.04.2"
        },
        {
            "binary_name": "openjdk-11-jdk",
            "binary_version": "11.0.31+11-1ubuntu1~26.04.2"
        },
        {
            "binary_name": "openjdk-11-jdk-headless",
            "binary_version": "11.0.31+11-1ubuntu1~26.04.2"
        },
        {
            "binary_name": "openjdk-11-jre",
            "binary_version": "11.0.31+11-1ubuntu1~26.04.2"
        },
        {
            "binary_name": "openjdk-11-jre-headless",
            "binary_version": "11.0.31+11-1ubuntu1~26.04.2"
        },
        {
            "binary_name": "openjdk-11-jre-zero",
            "binary_version": "11.0.31+11-1ubuntu1~26.04.2"
        },
        {
            "binary_name": "openjdk-11-source",
            "binary_version": "11.0.31+11-1ubuntu1~26.04.2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"

Ubuntu:Pro:16.04:LTS

openjdk-8

Package

Name: openjdk-8
Purl: pkg:deb/ubuntu/openjdk-8?arch=source&distro=esm-infra-legacy%2Fxenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

Other

8u66-b01-5

8u72-b05-1ubuntu1

8u72-b05-5

8u72-b05-6

8u72-b15-1

8u72-b15-2ubuntu1

8u72-b15-2ubuntu3

8u72-b15-3ubuntu1

8u77-b03-1ubuntu2

8u77-b03-3ubuntu1

8u77-b03-3ubuntu2

8u77-b03-3ubuntu3

8u91-b14-0ubuntu4~16.*

8u91-b14-0ubuntu4~16.04.1

8u91-b14-3ubuntu1~16.*

8u91-b14-3ubuntu1~16.04.1

8u111-b14-2ubuntu0.*

8u111-b14-2ubuntu0.16.04.2

8u121-b13-0ubuntu1.*

8u121-b13-0ubuntu1.16.04.2

8u131-b11-0ubuntu1.*

8u131-b11-0ubuntu1.16.04.2

8u131-b11-2ubuntu1.*

8u131-b11-2ubuntu1.16.04.2

8u131-b11-2ubuntu1.16.04.3

8u151-b12-0ubuntu0.*

8u151-b12-0ubuntu0.16.04.2

8u162-b12-0ubuntu0.*

8u162-b12-0ubuntu0.16.04.2

8u171-b11-0ubuntu0.*

8u171-b11-0ubuntu0.16.04.1

8u181-b13-0ubuntu0.*

8u181-b13-0ubuntu0.16.04.1

8u181-b13-1ubuntu0.*

8u181-b13-1ubuntu0.16.04.1

8u191-b12-0ubuntu0.*

8u191-b12-0ubuntu0.16.04.1

8u191-b12-2ubuntu0.*

8u191-b12-2ubuntu0.16.04.1

8u212-b03-0ubuntu1.*

8u212-b03-0ubuntu1.16.04.1

8u222-b10-1ubuntu1~16.*

8u222-b10-1ubuntu1~16.04.1

8u232-b09-0ubuntu1~16.*

8u232-b09-0ubuntu1~16.04.1

8u242-b08-0ubuntu3~16.*

8u242-b08-0ubuntu3~16.04

8u252-b09-1~16.*

8u252-b09-1~16.04

8u265-b01-0ubuntu2~16.*

8u265-b01-0ubuntu2~16.04

8u272-b10-0ubuntu1~16.*

8u272-b10-0ubuntu1~16.04

8u275-b01-0ubuntu1~16.*

8u275-b01-0ubuntu1~16.04

8u282-b08-0ubuntu1~16.*

8u282-b08-0ubuntu1~16.04

8u292-b10-0ubuntu1~16.*

8u292-b10-0ubuntu1~16.04.1

8u312-b07-0ubuntu1~16.*

8u312-b07-0ubuntu1~16.04

8u342-b07-0ubuntu1~16.*

8u342-b07-0ubuntu1~16.04

8u352-ga-1~16.*

8u352-ga-1~16.04

8u362-ga-0ubuntu1~16.*

8u362-ga-0ubuntu1~16.04.1

8u372-ga~us1-0ubuntu1~16.*

8u372-ga~us1-0ubuntu1~16.04

8u382-ga-1~16.*

8u382-ga-1~16.04.1

8u392-ga-1~16.*

8u392-ga-1~16.04

8u432-ga~us1-0ubuntu2~16.*

8u432-ga~us1-0ubuntu2~16.04.4

8u442-b06~us1-0ubuntu1~16.*

8u442-b06~us1-0ubuntu1~16.04

8u452-ga~us1-0ubuntu1~16.*

8u452-ga~us1-0ubuntu1~16.04.1

8u462-ga~us1-0ubuntu2~16.*

8u462-ga~us1-0ubuntu2~16.04.2

8u472-ga-1~16.*

8u472-ga-1~16.04

8u482-ga~us1-0ubuntu1~16.*

8u482-ga~us1-0ubuntu1~16.04

8u492-ga~us2-0ubuntu1~16.*

8u492-ga~us2-0ubuntu1~16.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-8-demo",
            "binary_version": "8u492-ga~us2-0ubuntu1~16.04.1"
        },
        {
            "binary_name": "openjdk-8-jdk",
            "binary_version": "8u492-ga~us2-0ubuntu1~16.04.1"
        },
        {
            "binary_name": "openjdk-8-jdk-headless",
            "binary_version": "8u492-ga~us2-0ubuntu1~16.04.1"
        },
        {
            "binary_name": "openjdk-8-jre",
            "binary_version": "8u492-ga~us2-0ubuntu1~16.04.1"
        },
        {
            "binary_name": "openjdk-8-jre-headless",
            "binary_version": "8u492-ga~us2-0ubuntu1~16.04.1"
        },
        {
            "binary_name": "openjdk-8-jre-jamvm",
            "binary_version": "8u492-ga~us2-0ubuntu1~16.04.1"
        },
        {
            "binary_name": "openjdk-8-jre-zero",
            "binary_version": "8u492-ga~us2-0ubuntu1~16.04.1"
        },
        {
            "binary_name": "openjdk-8-source",
            "binary_version": "8u492-ga~us2-0ubuntu1~16.04.1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"

Ubuntu:Pro:18.04:LTS

openjdk-lts

Package

Name: openjdk-lts
Purl: pkg:deb/ubuntu/openjdk-lts?arch=source&distro=esm-infra%2Fbionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

9.*

9.0.4+12-2ubuntu4

9.0.4+12-4ubuntu1

Other

10~46-4ubuntu1

10~46-5ubuntu1

10.*

10.0.1+10-1ubuntu2

10.0.1+10-3ubuntu1

10.0.2+13-1ubuntu0.18.04.1

10.0.2+13-1ubuntu0.18.04.2

10.0.2+13-1ubuntu0.18.04.3

10.0.2+13-1ubuntu0.18.04.4

11.*

11.0.2+9-3ubuntu1~18.04.3

11.0.3+7-1ubuntu2~18.04.1

11.0.4+11-1ubuntu2~18.04.3

11.0.5+10-0ubuntu1.1~18.04

11.0.6+10-1ubuntu1~18.04.1

11.0.7+10-2ubuntu2~18.04

11.0.8+10-0ubuntu1~18.04.1

11.0.9+11-0ubuntu1~18.04.1

11.0.9.1+1-0ubuntu1~18.04

11.0.10+9-0ubuntu1~18.04

11.0.11+9-0ubuntu2~18.04

11.0.13+8-0ubuntu1~18.04

11.0.14+9-0ubuntu2~18.04

11.0.14.1+1-0ubuntu1~18.04

11.0.15+10-0ubuntu0.18.04.1

11.0.16+8-0ubuntu1~18.04

11.0.17+8-1ubuntu2~18.04

11.0.18+10-0ubuntu1~18.04.1

11.0.19+7~us1-0ubuntu1~18.04.1

11.0.20+8-1ubuntu1~18.04

11.0.20.1+1-0ubuntu1~18.04

11.0.21+9-0ubuntu1~18.04

11.0.22+7-0ubuntu2~18.04.1

11.0.23+9-1ubuntu1~18.04.1

11.0.25+9-1ubuntu1~18.04

11.0.26+4-1ubuntu1~18.04

11.0.27+6~us1-0ubuntu1~18.04

11.0.28+6-1ubuntu1~18.04.1

11.0.29+7-1ubuntu1~18.04

11.0.30+7-1ubuntu1~18.04

11.0.31+11-1ubuntu1~18.04.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-11-demo",
            "binary_version": "11.0.31+11-1ubuntu1~18.04.2"
        },
        {
            "binary_name": "openjdk-11-jdk",
            "binary_version": "11.0.31+11-1ubuntu1~18.04.2"
        },
        {
            "binary_name": "openjdk-11-jdk-headless",
            "binary_version": "11.0.31+11-1ubuntu1~18.04.2"
        },
        {
            "binary_name": "openjdk-11-jre",
            "binary_version": "11.0.31+11-1ubuntu1~18.04.2"
        },
        {
            "binary_name": "openjdk-11-jre-headless",
            "binary_version": "11.0.31+11-1ubuntu1~18.04.2"
        },
        {
            "binary_name": "openjdk-11-jre-zero",
            "binary_version": "11.0.31+11-1ubuntu1~18.04.2"
        },
        {
            "binary_name": "openjdk-11-source",
            "binary_version": "11.0.31+11-1ubuntu1~18.04.2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"

openjdk-17

Package

Name: openjdk-17
Purl: pkg:deb/ubuntu/openjdk-17?arch=source&distro=esm-apps%2Fbionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

17+35-1~18.*

17+35-1~18.04

17.*

17.0.1+12-1~18.04

17.0.2+8-1~18.04

17.0.3+7-0ubuntu0.18.04.1

17.0.4+8-1~18.04

17.0.5+8-2ubuntu1~18.04

17.0.6+10-0ubuntu1~18.04.1

17.0.7+7~us1-0ubuntu1~18.04

17.0.8+7-1~18.04

17.0.8.1+1~us1-0ubuntu1~18.04

17.0.9+9-1~18.04

17.0.10+7-1~18.04.1

17.0.11+9-1~18.04.1

17.0.13+11-2ubuntu1~18.04.2

17.0.14+7-1~18.04

17.0.15+6~us1-0ubuntu1~18.04

17.0.16+8~us1-0ubuntu1~18.04.1

17.0.17+10-1~18.04

17.0.18+8-1~18.04

17.0.19+10-1~18.04.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-17-demo",
            "binary_version": "17.0.19+10-1~18.04.2"
        },
        {
            "binary_name": "openjdk-17-jdk",
            "binary_version": "17.0.19+10-1~18.04.2"
        },
        {
            "binary_name": "openjdk-17-jdk-headless",
            "binary_version": "17.0.19+10-1~18.04.2"
        },
        {
            "binary_name": "openjdk-17-jre",
            "binary_version": "17.0.19+10-1~18.04.2"
        },
        {
            "binary_name": "openjdk-17-jre-headless",
            "binary_version": "17.0.19+10-1~18.04.2"
        },
        {
            "binary_name": "openjdk-17-jre-zero",
            "binary_version": "17.0.19+10-1~18.04.2"
        },
        {
            "binary_name": "openjdk-17-source",
            "binary_version": "17.0.19+10-1~18.04.2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"

openjdk-8

Package

Name: openjdk-8
Purl: pkg:deb/ubuntu/openjdk-8?arch=source&distro=esm-apps%2Fbionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

Other

8u144-b01-2

8u151-b12-1

8u162-b12-1

8u171-b11-0ubuntu0.*

8u171-b11-0ubuntu0.18.04.1

8u181-b13-0ubuntu0.*

8u181-b13-0ubuntu0.18.04.1

8u181-b13-1ubuntu0.*

8u181-b13-1ubuntu0.18.04.1

8u191-b12-0ubuntu0.*

8u191-b12-0ubuntu0.18.04.1

8u191-b12-2ubuntu0.*

8u191-b12-2ubuntu0.18.04.1

8u212-b03-0ubuntu1.*

8u212-b03-0ubuntu1.18.04.1

8u222-b10-1ubuntu1~18.*

8u222-b10-1ubuntu1~18.04.1

8u232-b09-0ubuntu1~18.*

8u232-b09-0ubuntu1~18.04.1

8u242-b08-0ubuntu3~18.*

8u242-b08-0ubuntu3~18.04

8u252-b09-1~18.*

8u252-b09-1~18.04

8u265-b01-0ubuntu2~18.*

8u265-b01-0ubuntu2~18.04

8u272-b10-0ubuntu1~18.*

8u272-b10-0ubuntu1~18.04

8u275-b01-0ubuntu1~18.*

8u275-b01-0ubuntu1~18.04

8u282-b08-0ubuntu1~18.*

8u282-b08-0ubuntu1~18.04

8u292-b10-0ubuntu1~18.*

8u292-b10-0ubuntu1~18.04

8u312-b07-0ubuntu1~18.*

8u312-b07-0ubuntu1~18.04

8u342-b07-0ubuntu1~18.*

8u342-b07-0ubuntu1~18.04

8u352-ga-1~18.*

8u352-ga-1~18.04

8u362-ga-0ubuntu1~18.*

8u362-ga-0ubuntu1~18.04.1

8u372-ga~us1-0ubuntu1~18.*

8u372-ga~us1-0ubuntu1~18.04

8u382-ga-1~18.*

8u382-ga-1~18.04.1

8u392-ga-1~18.*

8u392-ga-1~18.04

8u402-ga-2ubuntu1~18.*

8u402-ga-2ubuntu1~18.04

8u412-ga-1~18.*

8u412-ga-1~18.04.1

8u422-b05-1~18.*

8u422-b05-1~18.04

8u432-ga~us1-0ubuntu2~18.*

8u432-ga~us1-0ubuntu2~18.04

8u442-b06~us1-0ubuntu1~18.*

8u442-b06~us1-0ubuntu1~18.04

8u452-ga~us1-0ubuntu1~18.*

8u452-ga~us1-0ubuntu1~18.04

8u462-ga~us1-0ubuntu2~18.*

8u462-ga~us1-0ubuntu2~18.04.2

8u472-ga-1~18.*

8u472-ga-1~18.04

8u482-ga~us1-0ubuntu1~18.*

8u482-ga~us1-0ubuntu1~18.04

8u492-ga~us2-0ubuntu1~18.*

8u492-ga~us2-0ubuntu1~18.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-8-demo",
            "binary_version": "8u492-ga~us2-0ubuntu1~18.04.1"
        },
        {
            "binary_name": "openjdk-8-jdk",
            "binary_version": "8u492-ga~us2-0ubuntu1~18.04.1"
        },
        {
            "binary_name": "openjdk-8-jdk-headless",
            "binary_version": "8u492-ga~us2-0ubuntu1~18.04.1"
        },
        {
            "binary_name": "openjdk-8-jre",
            "binary_version": "8u492-ga~us2-0ubuntu1~18.04.1"
        },
        {
            "binary_name": "openjdk-8-jre-headless",
            "binary_version": "8u492-ga~us2-0ubuntu1~18.04.1"
        },
        {
            "binary_name": "openjdk-8-jre-zero",
            "binary_version": "8u492-ga~us2-0ubuntu1~18.04.1"
        },
        {
            "binary_name": "openjdk-8-source",
            "binary_version": "8u492-ga~us2-0ubuntu1~18.04.1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"

Ubuntu:Pro:20.04:LTS

openjdk-lts

Package

Name: openjdk-lts
Purl: pkg:deb/ubuntu/openjdk-lts?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

11.*

11.0.5+10-0ubuntu1

11.0.5+10-2ubuntu1

11.0.6+10-1ubuntu1

11.0.6+10-2ubuntu2

11.0.7+9-1ubuntu1

11.0.7+10-2ubuntu1

11.0.7+10-3ubuntu1

11.0.8+10-0ubuntu1~20.04

11.0.9+11-0ubuntu1~20.04

11.0.9.1+1-0ubuntu1~20.04

11.0.10+9-0ubuntu1~20.04

11.0.11+9-0ubuntu2~20.04

11.0.13+8-0ubuntu1~20.04

11.0.14+9-0ubuntu2~20.04

11.0.14.1+1-0ubuntu1~20.04

11.0.15+10-0ubuntu0.20.04.1

11.0.16+8-0ubuntu1~20.04

11.0.17+8-1ubuntu2~20.04

11.0.18+10-0ubuntu1~20.04.1

11.0.19+7~us1-0ubuntu1~20.04.1

11.0.20+8-1ubuntu1~20.04

11.0.20.1+1-0ubuntu1~20.04

11.0.21+9-0ubuntu1~20.04

11.0.22+7-0ubuntu2~20.04.1

11.0.23+9-1ubuntu1~20.04.2

11.0.24+8-1ubuntu3~20.04

11.0.25+9-1ubuntu1~20.04

11.0.26+4-1ubuntu1~20.04

11.0.27+6~us1-0ubuntu1~20.04

11.0.28+6-1ubuntu1~20.04.1

11.0.29+7-1ubuntu1~20.04

11.0.30+7-1ubuntu1~20.04

11.0.31+11-1ubuntu1~20.04.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-11-demo",
            "binary_version": "11.0.31+11-1ubuntu1~20.04.2"
        },
        {
            "binary_name": "openjdk-11-jdk",
            "binary_version": "11.0.31+11-1ubuntu1~20.04.2"
        },
        {
            "binary_name": "openjdk-11-jdk-headless",
            "binary_version": "11.0.31+11-1ubuntu1~20.04.2"
        },
        {
            "binary_name": "openjdk-11-jre",
            "binary_version": "11.0.31+11-1ubuntu1~20.04.2"
        },
        {
            "binary_name": "openjdk-11-jre-headless",
            "binary_version": "11.0.31+11-1ubuntu1~20.04.2"
        },
        {
            "binary_name": "openjdk-11-jre-zero",
            "binary_version": "11.0.31+11-1ubuntu1~20.04.2"
        },
        {
            "binary_name": "openjdk-11-source",
            "binary_version": "11.0.31+11-1ubuntu1~20.04.2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"

openjdk-17

Package

Name: openjdk-17
Purl: pkg:deb/ubuntu/openjdk-17?arch=source&distro=esm-apps%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

17+35-1~20.*

17+35-1~20.04

17.*

17.0.1+12-1~20.04

17.0.2+8-1~20.04

17.0.3+7-0ubuntu0.20.04.1

17.0.4+8-1~20.04

17.0.5+8-2ubuntu1~20.04

17.0.6+10-0ubuntu1~20.04.1

17.0.7+7~us1-0ubuntu1~20.04

17.0.8+7-1~20.04.2

17.0.8.1+1~us1-0ubuntu1~20.04

17.0.9+9-1~20.04

17.0.10+7-1~20.04.1

17.0.11+9-1~20.04.2

17.0.12+7-1ubuntu2~20.04

17.0.13+11-2ubuntu1~20.04

17.0.14+7-1~20.04

17.0.15+6~us1-0ubuntu1~20.04

17.0.16+8~us1-0ubuntu1~20.04.6

17.0.17+10-1~20.04

17.0.18+8-1~20.04

17.0.19+10-1~20.04.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-17-demo",
            "binary_version": "17.0.19+10-1~20.04.2"
        },
        {
            "binary_name": "openjdk-17-jdk",
            "binary_version": "17.0.19+10-1~20.04.2"
        },
        {
            "binary_name": "openjdk-17-jdk-headless",
            "binary_version": "17.0.19+10-1~20.04.2"
        },
        {
            "binary_name": "openjdk-17-jre",
            "binary_version": "17.0.19+10-1~20.04.2"
        },
        {
            "binary_name": "openjdk-17-jre-headless",
            "binary_version": "17.0.19+10-1~20.04.2"
        },
        {
            "binary_name": "openjdk-17-jre-zero",
            "binary_version": "17.0.19+10-1~20.04.2"
        },
        {
            "binary_name": "openjdk-17-source",
            "binary_version": "17.0.19+10-1~20.04.2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"

openjdk-21

Package

Name: openjdk-21
Purl: pkg:deb/ubuntu/openjdk-21?arch=source&distro=esm-apps%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

21.*

21.0.1+12-2~20.04.1

21.0.2+13-1~20.04.1

21.0.3+9-1ubuntu1~20.04.1

21.0.4+7-1ubuntu2~20.04

21.0.5+11-1ubuntu1~20.04

21.0.6+7-1~20.04.1

21.0.7+6~us1-0ubuntu1~20.04

21.0.8+9~us1-0ubuntu1~20.04.1

21.0.9+10-1~20.04

21.0.10+7-1~20.04

21.0.11+10-1~20.04.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-21-demo",
            "binary_version": "21.0.11+10-1~20.04.2"
        },
        {
            "binary_name": "openjdk-21-jdk",
            "binary_version": "21.0.11+10-1~20.04.2"
        },
        {
            "binary_name": "openjdk-21-jdk-headless",
            "binary_version": "21.0.11+10-1~20.04.2"
        },
        {
            "binary_name": "openjdk-21-jre",
            "binary_version": "21.0.11+10-1~20.04.2"
        },
        {
            "binary_name": "openjdk-21-jre-headless",
            "binary_version": "21.0.11+10-1~20.04.2"
        },
        {
            "binary_name": "openjdk-21-jre-zero",
            "binary_version": "21.0.11+10-1~20.04.2"
        },
        {
            "binary_name": "openjdk-21-source",
            "binary_version": "21.0.11+10-1~20.04.2"
        },
        {
            "binary_name": "openjdk-21-testsupport",
            "binary_version": "21.0.11+10-1~20.04.2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"

openjdk-8

Package

Name: openjdk-8
Purl: pkg:deb/ubuntu/openjdk-8?arch=source&distro=esm-apps%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

Other

8u232-b09-0ubuntu1

8u232-b09-1

8u242-b04-1

8u242-b08-0ubuntu3

8u252-b07-1

8u252-b09-1ubuntu1

8u265-b01-0ubuntu2~20.*

8u265-b01-0ubuntu2~20.04

8u272-b10-0ubuntu1~20.*

8u272-b10-0ubuntu1~20.04

8u275-b01-0ubuntu1~20.*

8u275-b01-0ubuntu1~20.04

8u282-b08-0ubuntu1~20.*

8u282-b08-0ubuntu1~20.04

8u292-b10-0ubuntu1~20.*

8u292-b10-0ubuntu1~20.04

8u312-b07-0ubuntu1~20.*

8u312-b07-0ubuntu1~20.04

8u342-b07-0ubuntu1~20.*

8u342-b07-0ubuntu1~20.04

8u352-ga-1~20.*

8u352-ga-1~20.04

8u362-ga-0ubuntu1~20.*

8u362-ga-0ubuntu1~20.04.1

8u372-ga~us1-0ubuntu1~20.*

8u372-ga~us1-0ubuntu1~20.04

8u382-ga-1~20.*

8u382-ga-1~20.04.1

8u392-ga-1~20.*

8u392-ga-1~20.04

8u402-ga-2ubuntu1~20.*

8u402-ga-2ubuntu1~20.04

8u412-ga-1~20.*

8u412-ga-1~20.04.1

8u422-b05-1~20.*

8u422-b05-1~20.04

8u432-ga~us1-0ubuntu2~20.*

8u432-ga~us1-0ubuntu2~20.04

8u442-b06~us1-0ubuntu1~20.*

8u442-b06~us1-0ubuntu1~20.04

8u452-ga~us1-0ubuntu1~20.*

8u452-ga~us1-0ubuntu1~20.04

8u462-ga~us1-0ubuntu2~20.*

8u462-ga~us1-0ubuntu2~20.04.2

8u472-ga-1~20.*

8u472-ga-1~20.04

8u482-ga~us1-0ubuntu1~20.*

8u482-ga~us1-0ubuntu1~20.04

8u492-ga~us2-0ubuntu1~20.*

8u492-ga~us2-0ubuntu1~20.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-8-demo",
            "binary_version": "8u492-ga~us2-0ubuntu1~20.04.1"
        },
        {
            "binary_name": "openjdk-8-jdk",
            "binary_version": "8u492-ga~us2-0ubuntu1~20.04.1"
        },
        {
            "binary_name": "openjdk-8-jdk-headless",
            "binary_version": "8u492-ga~us2-0ubuntu1~20.04.1"
        },
        {
            "binary_name": "openjdk-8-jre",
            "binary_version": "8u492-ga~us2-0ubuntu1~20.04.1"
        },
        {
            "binary_name": "openjdk-8-jre-headless",
            "binary_version": "8u492-ga~us2-0ubuntu1~20.04.1"
        },
        {
            "binary_name": "openjdk-8-jre-zero",
            "binary_version": "8u492-ga~us2-0ubuntu1~20.04.1"
        },
        {
            "binary_name": "openjdk-8-source",
            "binary_version": "8u492-ga~us2-0ubuntu1~20.04.1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"

Ubuntu:Pro:24.04:LTS

openjdk-lts

Package

Name: openjdk-lts
Purl: pkg:deb/ubuntu/openjdk-lts?arch=source&distro=esm-apps%2Fnoble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

11.*

11.0.20+8-1ubuntu1

11.0.21+9-0ubuntu1

11.0.22+7-0ubuntu2

11.0.23~7ea-1ubuntu1

11.0.23~7ea-1ubuntu2

11.0.23+9-1ubuntu1

11.0.24+8-1ubuntu3~24.04.1

11.0.25+9-1ubuntu1~24.04

11.0.26+4-1ubuntu1~24.04

11.0.27+6~us1-0ubuntu1~24.04

11.0.28+6-1ubuntu1~24.04.1

11.0.29+7-1ubuntu1~24.04

11.0.30+7-1ubuntu1~24.04

11.0.31+11-1ubuntu1~24.04.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openjdk-11-demo",
            "binary_version": "11.0.31+11-1ubuntu1~24.04.2"
        },
        {
            "binary_name": "openjdk-11-jdk",
            "binary_version": "11.0.31+11-1ubuntu1~24.04.2"
        },
        {
            "binary_name": "openjdk-11-jdk-headless",
            "binary_version": "11.0.31+11-1ubuntu1~24.04.2"
        },
        {
            "binary_name": "openjdk-11-jre",
            "binary_version": "11.0.31+11-1ubuntu1~24.04.2"
        },
        {
            "binary_name": "openjdk-11-jre-headless",
            "binary_version": "11.0.31+11-1ubuntu1~24.04.2"
        },
        {
            "binary_name": "openjdk-11-jre-zero",
            "binary_version": "11.0.31+11-1ubuntu1~24.04.2"
        },
        {
            "binary_name": "openjdk-11-source",
            "binary_version": "11.0.31+11-1ubuntu1~24.04.2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-47021.json"