ELSA-2026-55781 — Moderate: java-17-openjdk security update (Oracle Linux 8)

Summary

[17.0.20.1.1-1.1.0.1]
- Add Oracle vendor bug URL [Orabug: 34340155]

[1:17.0.20.1.1-1.1]
- Update to jdk-17.0.20.1+1 (GA)
- Add to .gitignore openjdk-17.0.20.1+1.tar.xz
- Set patchver to 1
- Set buildver to 1
- Update sources to openjdk-17.0.20.1+1.tar.xz
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235606
- Update NEWS for jdk-17.0.20.1+1 (GA)
- Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8

Fixed packages 23

Release	Package	Fixed in
Oracle Linux · 8	java-17-openjdk	1:17.0.20.1.1-1.2.0.1.el9
Oracle Linux · 8	java-17-openjdk-demo	1:17.0.20.1.1-1.2.0.1.el9
Oracle Linux · 8	java-17-openjdk-demo-fastdebug	1:17.0.20.1.1-1.2.0.1.el9
Oracle Linux · 8	java-17-openjdk-demo-slowdebug	1:17.0.20.1.1-1.2.0.1.el9
Oracle Linux · 8	java-17-openjdk-devel	1:17.0.20.1.1-1.2.0.1.el9
Oracle Linux · 8	java-17-openjdk-devel-fastdebug	1:17.0.20.1.1-1.2.0.1.el9
Oracle Linux · 8	java-17-openjdk-devel-slowdebug	1:17.0.20.1.1-1.2.0.1.el9
Oracle Linux · 8	java-17-openjdk-fastdebug	1:17.0.20.1.1-1.2.0.1.el9
Oracle Linux · 8	java-17-openjdk-headless	1:17.0.20.1.1-1.2.0.1.el9
Oracle Linux · 8	java-17-openjdk-headless-fastdebug	1:17.0.20.1.1-1.2.0.1.el9
Oracle Linux · 8	java-17-openjdk-headless-slowdebug	1:17.0.20.1.1-1.2.0.1.el9
Oracle Linux · 8	java-17-openjdk-javadoc	1:17.0.20.1.1-1.2.0.1.el9
Oracle Linux · 8	java-17-openjdk-javadoc-zip	1:17.0.20.1.1-1.2.0.1.el9
Oracle Linux · 8	java-17-openjdk-jmods	1:17.0.20.1.1-1.2.0.1.el9
Oracle Linux · 8	java-17-openjdk-jmods-fastdebug	1:17.0.20.1.1-1.2.0.1.el9
Oracle Linux · 8	java-17-openjdk-jmods-slowdebug	1:17.0.20.1.1-1.2.0.1.el9
Oracle Linux · 8	java-17-openjdk-slowdebug	1:17.0.20.1.1-1.2.0.1.el9
Oracle Linux · 8	java-17-openjdk-src	1:17.0.20.1.1-1.2.0.1.el9
Oracle Linux · 8	java-17-openjdk-src-fastdebug	1:17.0.20.1.1-1.2.0.1.el9
Oracle Linux · 8	java-17-openjdk-src-slowdebug	1:17.0.20.1.1-1.2.0.1.el9
Oracle Linux · 8	java-17-openjdk-static-libs	1:17.0.20.1.1-1.2.0.1.el9
Oracle Linux · 8	java-17-openjdk-static-libs-fastdebug	1:17.0.20.1.1-1.2.0.1.el9
Oracle Linux · 8	java-17-openjdk-static-libs-slowdebug	1:17.0.20.1.1-1.2.0.1.el9

Vulnerabilities 3

Medium 6.8

CVE-2026-61308

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition openjdk-8 openjdk-lts Debian Ubuntu

Aug 18, 2026
Medium 5.3

CVE-2026-70907

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition openjdk-8 openjdk-lts Debian Ubuntu

Aug 18, 2026
Low 3.7

CVE-2026-60589

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition openjdk-8 openjdk-lts Debian Ubuntu

Aug 18, 2026

Moderate: java-17-openjdk security update (Oracle Linux 8)

Summary

Fixed packages 23

Vulnerabilities 3

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…