Skip to content
OpenAdvisories
High ELSA-2026-9682 7 CVEs

Important: java-1.8.0-openjdk security update (Oracle Linux 7)

Published Jun 9, 2026 · Updated Jun 9, 2026

Summary

[1.8.0.492.b09-1.0.1]
- Update to 8u492-b09 (GA) [Orabug: 39247147][CVE-2026-22007][CVE-2026-22013]
[CVE-2026-22016][CVE-2026-22018][CVE-2026-22021][CVE-2026-23865][CVE-2026-34268]

[1.8.0.482.b08-1.0.1]
- Update to 8u482-b08 (GA). [Orabug: 38893614]
- Update release notes for 8u482-b08.
- Resolves: RHEL-142689
- Resolves: RHEL-139521
- Resolves: RHEL-131446
- Resolves: RHEL-131459
- Resolves: RHEL-142865
- Resolves: RHEL-142696
- Fixes CVE-2026-21925 CVE-2026-21933 CVE-2026-21945

[1.8.0.472.b08-1.0.1]
- Update to 8u472-b08 (GA) [Orabug: 38571645]
- Update release notes for 8u472-b08.
- Drop local JDK-8339414 fix as this is now included upstream
- Reset rpmrelease to 1 now there are no other RPM builds on RHEL 8
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: RHEL-118769
- Resolves: RHEL-119444
- Fixes CVE-2025-53057 CVE-2025-53066

[1:1.8.0.462.b08-1.0.1]
- Update to 8u462-b08 (GA) [Orabug: 38248370]
- Update release notes for 8u462-b08.
- Require tzdata 2025b due to upstream inclusion of JDK-8352716
- Add early backport of JDK-8339414
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
- Resolves: RHEL-101654
- Resolves: RHEL-102307
- Resolves: RHEL-102907

[1.8.0.452.b09-1.0.1]
- Update to 8u452-b09 (GA) [Orabug: 38144314]
- Update release notes for 8u452-b09.
- Remove long option documentation from JDK-8335912/JDK-8337499 as not present in 8u
- Require tzdata 2025a due to upstream inclusion of JDK-8347965
- ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
- Resolves: RHEL-86973
- Resolves: RHEL-86616

[1:1.8.0.442.b06-1.0.3]
- Fixed CVE-2025-21587, CVE-2025-30691 and CVE-2025-30698 [Orabug: 37840723]

[1:1.8.0.442.b06-1.0.1]
- Update to 8u442-b06 (GA) [Orabug: 37506184]
- Update release notes for 8u442-b06.
- Add a simple -version check on both the JDK and JRE bin/java

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 7 java-1.8.0-openjdk 1:1.8.0.492.b09-1.0.1.el7_9
Oracle Linux · 7 java-1.8.0-openjdk-accessibility 1:1.8.0.492.b09-1.0.1.el7_9
Oracle Linux · 7 java-1.8.0-openjdk-demo 1:1.8.0.492.b09-1.0.1.el7_9
Oracle Linux · 7 java-1.8.0-openjdk-devel 1:1.8.0.492.b09-1.0.1.el7_9
Oracle Linux · 7 java-1.8.0-openjdk-headless 1:1.8.0.492.b09-1.0.1.el7_9
Oracle Linux · 7 java-1.8.0-openjdk-javadoc 1:1.8.0.492.b09-1.0.1.el7_9
Oracle Linux · 7 java-1.8.0-openjdk-javadoc-zip 1:1.8.0.492.b09-1.0.1.el7_9
Oracle Linux · 7 java-1.8.0-openjdk-src 1:1.8.0.492.b09-1.0.1.el7_9

Vulnerabilities 7