{"id":"CLSA-2026-1784715933","summary":"Fix CVE(s): CVE-2026-25646","details":"   * SECURITY UPDATE: enforce fixed libpng at runtime for CVE-2026-25646\n     - debian/control: pin openjdk-8-jre Depends on\n       libpng16-16 (\u003e= 1.6.37-2+tuxcare.els2); libsplashscreen dynamically\n       links the system libpng, so the ELS libpng1.6 rebuild carrying the\n       png_set_quantize heap-overflow fix must be present at install time\n     - CVE-2026-25646\n   * Ref: ELSCVE-134720","modified":"2026-10-26T09:32:05.537890384Z","published":"2026-07-22T10:25:59Z","upstream":["CVE-2026-25646"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1784715933.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25646"}],"affected":[{"package":{"name":"openjdk-8-demo","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/openjdk-8-demo?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u492-ga~us2-0ubuntu1~20.04+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1784715933.json"}},{"package":{"name":"openjdk-8-doc","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/openjdk-8-doc?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u492-ga~us2-0ubuntu1~20.04+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1784715933.json"}},{"package":{"name":"openjdk-8-jdk","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/openjdk-8-jdk?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u492-ga~us2-0ubuntu1~20.04+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1784715933.json"}},{"package":{"name":"openjdk-8-jdk-headless","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/openjdk-8-jdk-headless?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u492-ga~us2-0ubuntu1~20.04+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1784715933.json"}},{"package":{"name":"openjdk-8-jre","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/openjdk-8-jre?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u492-ga~us2-0ubuntu1~20.04+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1784715933.json"}},{"package":{"name":"openjdk-8-jre-headless","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/openjdk-8-jre-headless?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u492-ga~us2-0ubuntu1~20.04+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1784715933.json"}},{"package":{"name":"openjdk-8-jre-zero","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/openjdk-8-jre-zero?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u492-ga~us2-0ubuntu1~20.04+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1784715933.json"}},{"package":{"name":"openjdk-8-source","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/openjdk-8-source?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u492-ga~us2-0ubuntu1~20.04+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1784715933.json"}}],"schema_version":"1.9.0"}