CLSA-2026-1772113038
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1772113038.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CLSA-2026-1772113038
- Upstream
- Published
- 2026-02-26T13:37:26Z
- Modified
- 2026-06-04T10:04:43.290214970Z
- Summary
- Fix of 12 CVEs
- Details
-
- OpenJDK 8u482 release, build 8.
Release notes:
https://mail.openjdk.org/pipermail/jdk8u-dev/2026-January/020959.html
- Security fixes (8u482):
- CVE-2026-21945: Prevent DoS via repeated crash or hang in sandbox security
- CVE-2026-21932: Fix integrity issue in sandboxed handling of untrusted input
- CVE-2026-21933: Prevent unauthorized data access or modification via networking APIs
- CVE-2026-21925: Fix RMI flaw allowing unauthorized data read or modification
- Previously fixed:
- 8u472:
- CVE-2025-53066: Prevent DoS or data exposure from untrusted input handling
- CVE-2025-53057: Fix validation flaw affecting sandboxed networking/security logic
- CVE-2025-61748: Prevent resource-consumption denial-of-service via crafted input
- 8u462:
- CVE-2025-30749: Fix security flaw enabling unauthorized actions or data exposure
- CVE-2025-30754: Correct validation weakness affecting sandboxed execution integrity
- CVE-2025-30761: Prevent unintended data access or via insufficient checks
- CVE-2025-50106: Fix parsing weakness leading to potential denial-of-service
- CVE-2025-50059: Fix improper HTTP header handling to prevent unintended requests
- 8u472:
- Security fixes (8u482):
- OpenJDK 8u482 release, build 8.
Release notes:
https://mail.openjdk.org/pipermail/jdk8u-dev/2026-January/020959.html
- References