{
	"document":{
		"aggregate_severity":{
			"namespace":"https://nvd.nist.gov/vuln-metrics/cvss",
			"text":"High"
		},
		"category":"csaf_vex",
		"csaf_version":"2.0",
		"distribution":{
			"tlp":{
				"label":"WHITE",
				"url":"https:/www.first.org/tlp/"
			}
		},
		"lang":"en",
		"notes":[
			{
				"text":"openjdk-1.8.0 security update",
				"category":"general",
				"title":"Synopsis"
			},
			{
				"text":"An update for openjdk-1.8.0 is now available for openEuler-24.03-LTS-SP1",
				"category":"general",
				"title":"Summary"
			},
			{
				"text":"The OpenJDK runtime environment 8.\n\nSecurity Fix(es):\n\nAn integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed in version 2.14.2.(CVE-2026-23865)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versions 1.2.1 through 1.6.55, `png_set_tRNS` and `png_set_PLTE` each alias a heap-allocated buffer between `png_struct` and `png_info`, sharing a single allocation across two structs with independent lifetimes. The `trans_alpha` aliasing has been present since at least libpng 1.0, and the `palette` aliasing since at least 1.2.1. Both affect all prior release lines `png_set_tRNS` sets `png_ptr->trans_alpha = info_ptr->trans_alpha` (256-byte buffer) and `png_set_PLTE` sets `info_ptr->palette = png_ptr->palette` (768-byte buffer). In both cases, calling `png_free_data` (with `PNG_FREE_TRNS` or `PNG_FREE_PLTE`) frees the buffer through `info_ptr` while the corresponding `png_ptr` pointer remains dangling. Subsequent row-transform functions dereference and, in some code paths, write to the freed memory. A second call to `png_set_tRNS` or `png_set_PLTE` has the same effect, because both functions call `png_free_data` internally before reallocating the `info_ptr` buffer. Version 1.6.56 fixes the issue.(CVE-2026-33416)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versions 1.6.36 through 1.6.55, an out-of-bounds read and write exists in libpng's ARM/AArch64 Neon-optimized palette expansion path. When expanding 8-bit paletted rows to RGB or RGBA, the Neon loop processes a final partial chunk without verifying that enough input pixels remain. Because the implementation works backward from the end of the row, the final iteration dereferences pointers before the start of the row buffer (OOB read) and writes expanded pixel data to the same underflowed positions (OOB write). This is reachable via normal decoding of attacker-controlled PNG input if Neon is enabled. Version 1.6.56 fixes the issue.(CVE-2026-33636)\n\nLIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.0.9 to before 1.6.57, passing a pointer obtained from png_get_PLTE, png_get_tRNS, or png_get_hIST back into the corresponding setter on the same png_struct/png_info pair causes the setter to read from freed memory and copy its contents into the replacement buffer. The setter frees the internal buffer before copying from the caller-supplied pointer, which now dangles. The freed region may contain stale data (producing silently corrupted chunk metadata) or data from subsequent heap allocations (leaking unrelated heap contents into the chunk struct). This vulnerability is fixed in 1.6.57.(CVE-2026-34757)\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2026-60147)",
				"category":"general",
				"title":"Description"
			},
			{
				"text":"An update for java-1.8.0-openjdk is now available for openEuler-24.03-LTS-SP1.\n\nopenEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.",
				"category":"general",
				"title":"Topic"
			},
			{
				"text":"High",
				"category":"general",
				"title":"Severity"
			},
			{
				"text":"openjdk-1.8.0",
				"category":"general",
				"title":"Affected Component"
			}
		],
		"publisher":{
			"issuing_authority":"openEuler security committee",
			"name":"openEuler",
			"namespace":"https://www.openeuler.org",
			"contact_details":"openeuler-security@openeuler.org",
			"category":"vendor"
		},
		"references":[
			{
				"summary":"openEuler-SA-2026-3908",
				"category":"self",
				"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3908"
			},
			{
				"summary":"CVE-2026-23865",
				"category":"self",
				"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-23865&packageName=openjdk-1.8.0"
			},
			{
				"summary":"CVE-2026-33416",
				"category":"self",
				"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-33416&packageName=openjdk-1.8.0"
			},
			{
				"summary":"CVE-2026-33636",
				"category":"self",
				"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-33636&packageName=openjdk-1.8.0"
			},
			{
				"summary":"CVE-2026-34757",
				"category":"self",
				"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-34757&packageName=openjdk-1.8.0"
			},
			{
				"summary":"CVE-2026-60147",
				"category":"self",
				"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-60147&packageName=openjdk-1.8.0"
			},
			{
				"summary":"nvd cve",
				"category":"external",
				"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23865"
			},
			{
				"summary":"nvd cve",
				"category":"external",
				"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33416"
			},
			{
				"summary":"nvd cve",
				"category":"external",
				"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33636"
			},
			{
				"summary":"nvd cve",
				"category":"external",
				"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34757"
			},
			{
				"summary":"nvd cve",
				"category":"external",
				"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-60147"
			},
			{
				"summary":"openEuler-SA-2026-3908 vex file",
				"category":"self",
				"url":"https://repo.openeuler.org/security/data/csaf/advisories/2026/csaf-openeuler-sa-2026-3908.json"
			}
		],
		"title":"An update for openjdk-1.8.0 is now available for openEuler-24.03-LTS-SP1",
		"tracking":{
			"initial_release_date":"2026-09-21T15:04:14+08:00",
			"revision_history":[
				{
					"date":"2026-09-21T15:04:14+08:00",
					"summary":"Initial",
					"number":"1.0.0"
				}
			],
			"generator":{
				"date":"2026-09-21T15:04:14+08:00",
				"engine":{
					"name":"openEuler CSAF Tool V1.0"
				}
			},
			"current_release_date":"2026-09-21T15:04:14+08:00",
			"id":"openEuler-SA-2026-3908",
			"version":"1.0.0",
			"status":"final"
		}
	},
	"product_tree":{
		"branches":[
			{
				"name":"openEuler",
				"category":"vendor",
				"branches":[
					{
						"name":"openEuler",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"openEuler-24.03-LTS-SP1",
									"name":"openEuler-24.03-LTS-SP1"
								},
								"name":"openEuler-24.03-LTS-SP1",
								"category":"product_version"
							}
						],
						"category":"product_name"
					},
					{
						"name":"x86_64",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
									"name":"java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm"
								},
								"name":"java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
									"name":"java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm"
								},
								"name":"java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
									"name":"java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm"
								},
								"name":"java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
									"name":"java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm"
								},
								"name":"java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
									"name":"java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm"
								},
								"name":"java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
									"name":"java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm"
								},
								"name":"java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
									"name":"java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm"
								},
								"name":"java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
									"name":"java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm"
								},
								"name":"java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
									"name":"java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm"
								},
								"name":"java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
									"name":"java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm"
								},
								"name":"java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
									"name":"java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm"
								},
								"name":"java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
									"name":"java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm"
								},
								"name":"java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
									"name":"java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm"
								},
								"name":"java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
									"name":"java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm"
								},
								"name":"java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
									"name":"java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm"
								},
								"name":"java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
									"name":"java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm"
								},
								"name":"java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
									"name":"java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm"
								},
								"name":"java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
									"name":"java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm"
								},
								"name":"java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					},
					{
						"name":"noarch",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-javadoc-1.8.0.502.b07-0.oe2403sp1.noarch.rpm",
									"name":"java-1.8.0-openjdk-javadoc-1.8.0.502.b07-0.oe2403sp1.noarch.rpm"
								},
								"name":"java-1.8.0-openjdk-javadoc-1.8.0.502.b07-0.oe2403sp1.noarch.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-0.oe2403sp1.noarch.rpm",
									"name":"java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-0.oe2403sp1.noarch.rpm"
								},
								"name":"java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-0.oe2403sp1.noarch.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					},
					{
						"name":"aarch64",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
									"name":"java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm"
								},
								"name":"java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
									"name":"java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm"
								},
								"name":"java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
									"name":"java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm"
								},
								"name":"java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
									"name":"java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm"
								},
								"name":"java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
									"name":"java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm"
								},
								"name":"java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
									"name":"java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm"
								},
								"name":"java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
									"name":"java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm"
								},
								"name":"java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
									"name":"java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm"
								},
								"name":"java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
									"name":"java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm"
								},
								"name":"java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
									"name":"java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm"
								},
								"name":"java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
									"name":"java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm"
								},
								"name":"java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
									"name":"java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm"
								},
								"name":"java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
									"name":"java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm"
								},
								"name":"java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
									"name":"java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm"
								},
								"name":"java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
									"name":"java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm"
								},
								"name":"java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
									"name":"java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm"
								},
								"name":"java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
									"name":"java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm"
								},
								"name":"java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
									"name":"java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm"
								},
								"name":"java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					},
					{
						"name":"src",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.src.rpm",
									"name":"java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.src.rpm"
								},
								"name":"java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.src.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					}
				]
			}
		],
		"relationships":[
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"name":"java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"name":"java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"name":"java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"name":"java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"name":"java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"name":"java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"name":"java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"name":"java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"name":"java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"name":"java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"name":"java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"name":"java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"name":"java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"name":"java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"name":"java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"name":"java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"name":"java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"name":"java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-javadoc-1.8.0.502.b07-0.oe2403sp1.noarch.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-1.8.0.502.b07-0.oe2403sp1.noarch",
					"name":"java-1.8.0-openjdk-javadoc-1.8.0.502.b07-0.oe2403sp1.noarch as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-0.oe2403sp1.noarch.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-0.oe2403sp1.noarch",
					"name":"java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-0.oe2403sp1.noarch as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"name":"java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"name":"java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"name":"java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"name":"java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"name":"java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"name":"java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"name":"java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"name":"java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"name":"java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"name":"java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"name":"java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"name":"java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"name":"java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"name":"java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"name":"java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"name":"java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"name":"java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"name":"java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.src.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.src",
					"name":"java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.src as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			}
		]
	},
	"vulnerabilities":[
		{
			"cve":"CVE-2026-23865",
			"notes":[
				{
					"text":"An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed in version 2.14.2.",
					"category":"description",
					"title":"Vulnerability Description"
				}
			],
			"product_status":{
				"fixed":[
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-1.8.0.502.b07-0.oe2403sp1.noarch",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-0.oe2403sp1.noarch",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.src"
				]
			},
			"remediations":[
				{
					"product_ids":[
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-1.8.0.502.b07-0.oe2403sp1.noarch",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-0.oe2403sp1.noarch",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.src"
					],
					"details":"openjdk-1.8.0 security update",
					"category":"vendor_fix",
					"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3908"
				}
			],
			"scores":[
				{
					"cvss_v3":{
						"baseSeverity":"MEDIUM",
						"baseScore":5.3,
						"vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
						"version":"3.1"
					},
					"products":[
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-1.8.0.502.b07-0.oe2403sp1.noarch",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-0.oe2403sp1.noarch",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.src"
					]
				}
			],
			"threats":[
				{
					"details":"Medium",
					"category":"impact"
				}
			],
			"title":"CVE-2026-23865"
		},
		{
			"cve":"CVE-2026-33416",
			"notes":[
				{
					"text":"LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versions 1.2.1 through 1.6.55, `png_set_tRNS` and `png_set_PLTE` each alias a heap-allocated buffer between `png_struct` and `png_info`, sharing a single allocation across two structs with independent lifetimes. The `trans_alpha` aliasing has been present since at least libpng 1.0, and the `palette` aliasing since at least 1.2.1. Both affect all prior release lines `png_set_tRNS` sets `png_ptr->trans_alpha = info_ptr->trans_alpha` (256-byte buffer) and `png_set_PLTE` sets `info_ptr->palette = png_ptr->palette` (768-byte buffer). In both cases, calling `png_free_data` (with `PNG_FREE_TRNS` or `PNG_FREE_PLTE`) frees the buffer through `info_ptr` while the corresponding `png_ptr` pointer remains dangling. Subsequent row-transform functions dereference and, in some code paths, write to the freed memory. A second call to `png_set_tRNS` or `png_set_PLTE` has the same effect, because both functions call `png_free_data` internally before reallocating the `info_ptr` buffer. Version 1.6.56 fixes the issue.",
					"category":"description",
					"title":"Vulnerability Description"
				}
			],
			"product_status":{
				"fixed":[
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-1.8.0.502.b07-0.oe2403sp1.noarch",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-0.oe2403sp1.noarch",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.src"
				]
			},
			"remediations":[
				{
					"product_ids":[
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-1.8.0.502.b07-0.oe2403sp1.noarch",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-0.oe2403sp1.noarch",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.src"
					],
					"details":"openjdk-1.8.0 security update",
					"category":"vendor_fix",
					"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3908"
				}
			],
			"scores":[
				{
					"cvss_v3":{
						"baseSeverity":"HIGH",
						"baseScore":7.5,
						"vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
						"version":"3.1"
					},
					"products":[
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-1.8.0.502.b07-0.oe2403sp1.noarch",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-0.oe2403sp1.noarch",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.src"
					]
				}
			],
			"threats":[
				{
					"details":"High",
					"category":"impact"
				}
			],
			"title":"CVE-2026-33416"
		},
		{
			"cve":"CVE-2026-33636",
			"notes":[
				{
					"text":"LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versions 1.6.36 through 1.6.55, an out-of-bounds read and write exists in libpng's ARM/AArch64 Neon-optimized palette expansion path. When expanding 8-bit paletted rows to RGB or RGBA, the Neon loop processes a final partial chunk without verifying that enough input pixels remain. Because the implementation works backward from the end of the row, the final iteration dereferences pointers before the start of the row buffer (OOB read) and writes expanded pixel data to the same underflowed positions (OOB write). This is reachable via normal decoding of attacker-controlled PNG input if Neon is enabled. Version 1.6.56 fixes the issue.",
					"category":"description",
					"title":"Vulnerability Description"
				}
			],
			"product_status":{
				"fixed":[
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-1.8.0.502.b07-0.oe2403sp1.noarch",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-0.oe2403sp1.noarch",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.src"
				]
			},
			"remediations":[
				{
					"product_ids":[
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-1.8.0.502.b07-0.oe2403sp1.noarch",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-0.oe2403sp1.noarch",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.src"
					],
					"details":"openjdk-1.8.0 security update",
					"category":"vendor_fix",
					"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3908"
				}
			],
			"scores":[
				{
					"cvss_v3":{
						"baseSeverity":"HIGH",
						"baseScore":7.6,
						"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
						"version":"3.1"
					},
					"products":[
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-1.8.0.502.b07-0.oe2403sp1.noarch",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-0.oe2403sp1.noarch",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.src"
					]
				}
			],
			"threats":[
				{
					"details":"High",
					"category":"impact"
				}
			],
			"title":"CVE-2026-33636"
		},
		{
			"cve":"CVE-2026-34757",
			"notes":[
				{
					"text":"LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.0.9 to before 1.6.57, passing a pointer obtained from png_get_PLTE, png_get_tRNS, or png_get_hIST back into the corresponding setter on the same png_struct/png_info pair causes the setter to read from freed memory and copy its contents into the replacement buffer. The setter frees the internal buffer before copying from the caller-supplied pointer, which now dangles. The freed region may contain stale data (producing silently corrupted chunk metadata) or data from subsequent heap allocations (leaking unrelated heap contents into the chunk struct). This vulnerability is fixed in 1.6.57.",
					"category":"description",
					"title":"Vulnerability Description"
				}
			],
			"product_status":{
				"fixed":[
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-1.8.0.502.b07-0.oe2403sp1.noarch",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-0.oe2403sp1.noarch",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.src"
				]
			},
			"remediations":[
				{
					"product_ids":[
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-1.8.0.502.b07-0.oe2403sp1.noarch",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-0.oe2403sp1.noarch",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.src"
					],
					"details":"openjdk-1.8.0 security update",
					"category":"vendor_fix",
					"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3908"
				}
			],
			"scores":[
				{
					"cvss_v3":{
						"baseSeverity":"MEDIUM",
						"baseScore":4.4,
						"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
						"version":"3.1"
					},
					"products":[
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-1.8.0.502.b07-0.oe2403sp1.noarch",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-0.oe2403sp1.noarch",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.src"
					]
				}
			],
			"threats":[
				{
					"details":"Medium",
					"category":"impact"
				}
			],
			"title":"CVE-2026-34757"
		},
		{
			"cve":"CVE-2026-60147",
			"notes":[
				{
					"text":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).",
					"category":"description",
					"title":"Vulnerability Description"
				}
			],
			"product_status":{
				"fixed":[
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-1.8.0.502.b07-0.oe2403sp1.noarch",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-0.oe2403sp1.noarch",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.src"
				]
			},
			"remediations":[
				{
					"product_ids":[
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-1.8.0.502.b07-0.oe2403sp1.noarch",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-0.oe2403sp1.noarch",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.src"
					],
					"details":"openjdk-1.8.0 security update",
					"category":"vendor_fix",
					"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3908"
				}
			],
			"scores":[
				{
					"cvss_v3":{
						"baseSeverity":"MEDIUM",
						"baseScore":6.5,
						"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
						"version":"3.1"
					},
					"products":[
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-1.8.0.502.b07-0.oe2403sp1.noarch",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-0.oe2403sp1.noarch",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debuginfo-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-debugsource-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-openjfx-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-0.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:java-1.8.0-openjdk-1.8.0.502.b07-0.oe2403sp1.src"
					]
				}
			],
			"threats":[
				{
					"details":"Medium",
					"category":"impact"
				}
			],
			"title":"CVE-2026-60147"
		}
	]
}