{"id":"ALSA-2026:42877","summary":"Important: java-1.8.0-openjdk security update","details":"The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.  \n\nSecurity Fix(es):  \n\n  * JDK: Enhance TLS certificate handling (CVE-2026-46968)\n  * JDK: Enhance JPEG handling (CVE-2026-47010)\n  * JDK: Enhance XBM image support (CVE-2026-47021)\n  * JDK: Enhance Jar file processing (CVE-2026-47027)\n  * JDK: Improve certification checking (CVE-2026-60147)\n  * JDK: Enhance AWT ImagingLib (CVE-2026-47059)\n  * JDK: Enhance Jar handling (CVE-2026-47063)\n  * JDK: Improve Nashorn index handling (CVE-2026-47057)\n  * JDK: Enhance Dataview Implementation (CVE-2026-47058)\n  * JDK: Update LCMS to 2.19 (CVE-2026-41254)\n\n\nEnhancement(s):  \n\n  * For the last couple of years, OpenJDK has used a single build shared among multiple RPMs and a tarball available on the customer portal. The single \"portable\" build has a release number ('p') and each RPM has its own release number ('r'). However, the RPM naming only showed the RPM release number, while the version output from the build showed the portable release number, making it unclear that they were different numbers. From this release onwards, a release field of the form 'p.r' is always used for RPMs and the version output shows 'p'. (AlmaLinux-212308, AlmaLinux-212309, AlmaLinux-212310, AlmaLinux-212311, AlmaLinux-212312, AlmaLinux-212313, AlmaLinux-212314, AlmaLinux-212315)\n\n\nBug Fix(es):  \n\n  * In previous releases, the RPM did not correctly own the subdirectories used for documentation in /usr/share/doc and /usr/share/javadoc. This is fixed in this release, so these subdirectories will be removed when the package is uninstalled. (AlmaLinux-212319, AlmaLinux-212320, AlmaLinux-212321, AlmaLinux-212322, AlmaLinux-212323, AlmaLinux-212324, AlmaLinux-212325, AlmaLinux-212326)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","modified":"2026-07-24T14:45:07.021138080Z","published":"2026-07-23T00:00:00Z","related":["CVE-2026-41254","CVE-2026-46968","CVE-2026-47010","CVE-2026-47021","CVE-2026-47027","CVE-2026-47057","CVE-2026-47058","CVE-2026-47059","CVE-2026-47063","CVE-2026-60147"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:42877"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-41254"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-46968"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-47010"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-47021"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-47027"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-47057"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-47058"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-47059"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-47063"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-60147"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2459420"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2502751"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2502783"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2502784"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2502791"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2502792"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2502793"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2502794"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2502795"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2503636"},{"type":"ADVISORY","url":"https://errata.almalinux.org/8/ALSA-2026-42877.html"},{"type":"ADVISORY","url":"https://errata.almalinux.org/9/ALSA-2026-42877.html"}],"affected":[{"package":{"name":"java-1.8.0-openjdk","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-accessibility","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-accessibility"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-accessibility-fastdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-accessibility-fastdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-accessibility-slowdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-accessibility-slowdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-demo","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-demo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-demo-fastdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-demo-fastdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-demo-slowdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-demo-slowdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-devel","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-devel-fastdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-devel-fastdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-devel-slowdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-devel-slowdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-fastdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-fastdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-headless","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-headless"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-headless-fastdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-headless-fastdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-headless-slowdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-headless-slowdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-javadoc","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-javadoc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-javadoc-zip","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-javadoc-zip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-slowdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-slowdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-src","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-src"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-src-fastdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-src-fastdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-src-slowdebug","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-src-slowdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.1.el8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.2.el9.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-demo","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-demo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.2.el9.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-demo-fastdebug","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-demo-fastdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.2.el9.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-demo-slowdebug","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-demo-slowdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.2.el9.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-devel","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.2.el9.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-devel-fastdebug","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-devel-fastdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.2.el9.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-devel-slowdebug","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-devel-slowdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.2.el9.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-fastdebug","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-fastdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.2.el9.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-headless","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-headless"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.2.el9.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-headless-fastdebug","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-headless-fastdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.2.el9.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-headless-slowdebug","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-headless-slowdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.2.el9.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-javadoc","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-javadoc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.2.el9.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-javadoc-zip","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-javadoc-zip"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.2.el9.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-slowdebug","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-slowdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.2.el9.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-src","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-src"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.2.el9.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-src-fastdebug","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-src-fastdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.2.el9.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}},{"package":{"name":"java-1.8.0-openjdk-src-slowdebug","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/java-1.8.0-openjdk-src-slowdebug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.502.b07-1.2.el9.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:42877.json"}}],"schema_version":"1.7.5"}