Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 439
Alerts This Week
Warning Icon 1 439

Ubuntu 25.10 OpenJDK 8 Critical Remote Code Exec Security Alert USN-8000-1

ubuntu
Calendar Grey February 3, 2026
Dist Ubuntu Esm H88
Fix critical security issues in OpenJDK 8 for Ubuntu, preventing remote code execution and data leaks.
Several security issues were fixed in OpenJDK 8.

Summary

Several security issues were fixed in OpenJDK 8.

Software Description:

- openjdk-8: Open Source Java implementation

Details:

It was discovered that the RMI component of OpenJDK 8 would establish

RMI TCP endpoint connections to a remote host without setting an

endpoint identification algorithm. An unauthenticated remote attacker

could possibly use this issue to steal sensitive information.

(CVE-2026-21925)

Mingijung discovered that the AWT and JavaFX componenets of OpenJDK 8

could run programs if Desktop.browse() was supplied a filename as a

URI. An unauthenticated remote attacker could possibly use this issue

to execute arbitrary code. (CVE-2026-21932)

Zhihui Chen discovered that the Networking component of OpenJDK 8

was suceptible to a CRLF injection vulnerability via the HttpServer

class. An unauthenticated remote attacker could possibly use this

issue to modify files or leak sensitive information. (CVE-2026-21933)

Ireneusz Pastusiak discovered that the Security component o...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory critical remote code execution Ubuntu information leakage openjdk

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
  openjdk-8-jdk                   8u482-ga~us1-0ubuntu1~25.10
  openjdk-8-jdk-headless          8u482-ga~us1-0ubuntu1~25.10
  openjdk-8-jre                   8u482-ga~us1-0ubuntu1~25.10
  openjdk-8-jre-headless          8u482-ga~us1-0ubuntu1~25.10
  openjdk-8-jre-zero              8u482-ga~us1-0ubuntu1~25.10

Ubuntu 24.04 LTS
  openjdk-8-jdk                   8u482-ga~us1-0ubuntu1~24.04
  openjdk-8-jdk-headless          8u482-ga~us1-0ubuntu1~24.04
  openjdk-8-jre                   8u482-ga~us1-0ubuntu1~24.04
  openjdk-8-jre-headless          8u482-ga~us1-0ubuntu1~24.04
  openjdk-8-jre-zero              8u482-ga~us1-0ubuntu1~24.04

Ubuntu 22.04 LTS
  openjdk-8-jdk                   8u482-ga~us1-0ubuntu1~22.04
  openjdk-8-jdk-headless          8u482-ga~us1-0ubuntu1~22.04
  openjdk-8-jre                   8u482-ga~us1-0ubuntu1~22.04
  openjdk-8-jre-headless          8u482-ga~us1-0ubuntu1~22.04
  openjdk-8-jre-zero              8u482-ga~us1-0ubuntu1~22.04

Ubuntu 20.04 LTS
  openjdk-8-jdk                   8u482-ga~us1-0ubuntu1~20.04
                                  Available with Ubuntu Pro
  openjdk-8-jdk-headless          8u482-ga~us1-0ubuntu1~20.04
                                  Available with Ubuntu Pro
  openjdk-8-jre                   8u482-ga~us1-0ubuntu1~20.04
                                  Available with Ubuntu Pro
  openjdk-8-jre-headless          8u482-ga~us1-0ubuntu1~20.04
                                  Available with Ubuntu Pro
  openjdk-8-jre-zero              8u482-ga~us1-0ubuntu1~20.04
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  openjdk-8-jdk                   8u482-ga~us1-0ubuntu1~18.04
                                  Available with Ubuntu Pro
  openjdk-8-jdk-headless          8u482-ga~us1-0ubuntu1~18.04
                                  Available with Ubuntu Pro
  openjdk-8-jre                   8u482-ga~us1-0ubuntu1~18.04
                                  Available with Ubuntu Pro
  openjdk-8-jre-headless          8u482-ga~us1-0ubuntu1~18.04
                                  Available with Ubuntu Pro
  openjdk-8-jre-zero              8u482-ga~us1-0ubuntu1~18.04
                                  Available with Ubuntu Pro

Ubuntu 16.04 LTS
  openjdk-8-jdk                   8u482-ga~us1-0ubuntu1~16.04
                                  Available with Ubuntu Pro
  openjdk-8-jdk-headless          8u482-ga~us1-0ubuntu1~16.04
                                  Available with Ubuntu Pro
  openjdk-8-jre                   8u482-ga~us1-0ubuntu1~16.04
                                  Available with Ubuntu Pro
  openjdk-8-jre-headless          8u482-ga~us1-0ubuntu1~16.04
                                  Available with Ubuntu Pro
  openjdk-8-jre-jamvm             8u482-ga~us1-0ubuntu1~16.04
                                  Available with Ubuntu Pro
  openjdk-8-jre-zero              8u482-ga~us1-0ubuntu1~16.04
                                  Available with Ubuntu Pro

This update uses a new upstream release, which includes additional bug
fixes. After a standard system update you need to restart Java
applications to make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-8000-1

CVE-2026-21925, CVE-2026-21932, CVE-2026-21933, CVE-2026-21945

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-8000-1

Topics%20covered

Topics Covered

security advisory critical remote code execution Ubuntu information leakage openjdk

Package Information

https://launchpad.net/ubuntu/+source/openjdk-8/8u482-ga~us1-0ubuntu1~22.04

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.