Medium ELSA-2026-55774 3 CVEs

Moderate: java-1.8.0-openjdk security update (Oracle Linux 7)

Published Oct 30, 2026 · Updated Oct 30, 2026

Ecosystem: Oracle Linux

Summary

[1.8.0.504.b01-1.0.1]
- update to open-jdk 8u504-b01 (GA) [Orabug: 39966086]
- Security update for CVE-2026-60589 CVE-2026-61308 and CVE-2026-70907

Fixed packages 8

Release	Package	Fixed in
Oracle Linux · 7	java-1.8.0-openjdk	1:1.8.0.504.b01-1.0.1.el7_9
Oracle Linux · 7	java-1.8.0-openjdk-accessibility	1:1.8.0.504.b01-1.0.1.el7_9
Oracle Linux · 7	java-1.8.0-openjdk-demo	1:1.8.0.504.b01-1.0.1.el7_9
Oracle Linux · 7	java-1.8.0-openjdk-devel	1:1.8.0.504.b01-1.0.1.el7_9
Oracle Linux · 7	java-1.8.0-openjdk-headless	1:1.8.0.504.b01-1.0.1.el7_9
Oracle Linux · 7	java-1.8.0-openjdk-javadoc	1:1.8.0.504.b01-1.0.1.el7_9
Oracle Linux · 7	java-1.8.0-openjdk-javadoc-zip	1:1.8.0.504.b01-1.0.1.el7_9
Oracle Linux · 7	java-1.8.0-openjdk-src	1:1.8.0.504.b01-1.0.1.el7_9

Vulnerabilities 3

Medium 6.8

CVE-2026-61308

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition openjdk-8 openjdk-lts Debian Ubuntu

Aug 18, 2026
Medium 5.3

CVE-2026-70907

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition openjdk-8 openjdk-lts Debian Ubuntu

Aug 18, 2026
Low 3.7

CVE-2026-60589

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition openjdk-8 openjdk-lts Debian Ubuntu

Aug 18, 2026