Summary
[1.8.0.492.b09-1.0.1]
- Update to 8u492-b09 (GA) [Orabug: 39247147][CVE-2026-22007][CVE-2026-22013]
[CVE-2026-22016][CVE-2026-22018][CVE-2026-22021][CVE-2026-23865][CVE-2026-34268]
[1.8.0.482.b08-1.0.1]
- Update to 8u482-b08 (GA). [Orabug: 38893614]
- Update release notes for 8u482-b08.
- Resolves: RHEL-142689
- Resolves: RHEL-139521
- Resolves: RHEL-131446
- Resolves: RHEL-131459
- Resolves: RHEL-142865
- Resolves: RHEL-142696
- Fixes CVE-2026-21925 CVE-2026-21933 CVE-2026-21945
[1.8.0.472.b08-1.0.1]
- Update to 8u472-b08 (GA) [Orabug: 38571645]
- Update release notes for 8u472-b08.
- Drop local JDK-8339414 fix as this is now included upstream
- Reset rpmrelease to 1 now there are no other RPM builds on RHEL 8
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: RHEL-118769
- Resolves: RHEL-119444
- Fixes CVE-2025-53057 CVE-2025-53066
[1:1.8.0.462.b08-1.0.1]
- Update to 8u462-b08 (GA) [Orabug: 38248370]
- Update release notes for 8u462-b08.
- Require tzdata 2025b due to upstream inclusion of JDK-8352716
- Add early backport of JDK-8339414
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
- Resolves: RHEL-101654
- Resolves: RHEL-102307
- Resolves: RHEL-102907
[1.8.0.452.b09-1.0.1]
- Update to 8u452-b09 (GA) [Orabug: 38144314]
- Update release notes for 8u452-b09.
- Remove long option documentation from JDK-8335912/JDK-8337499 as not present in 8u
- Require tzdata 2025a due to upstream inclusion of JDK-8347965
- ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
- Resolves: RHEL-86973
- Resolves: RHEL-86616
[1:1.8.0.442.b06-1.0.3]
- Fixed CVE-2025-21587, CVE-2025-30691 and CVE-2025-30698 [Orabug: 37840723]
[1:1.8.0.442.b06-1.0.1]
- Update to 8u442-b06 (GA) [Orabug: 37506184]
- Update release notes for 8u442-b06.
- Add a simple -version check on both the JDK and JRE bin/java
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | java-1.8.0-openjdk | 1:1.8.0.492.b09-1.0.1.el7_9 |
| Oracle Linux · 7 | java-1.8.0-openjdk-accessibility | 1:1.8.0.492.b09-1.0.1.el7_9 |
| Oracle Linux · 7 | java-1.8.0-openjdk-demo | 1:1.8.0.492.b09-1.0.1.el7_9 |
| Oracle Linux · 7 | java-1.8.0-openjdk-devel | 1:1.8.0.492.b09-1.0.1.el7_9 |
| Oracle Linux · 7 | java-1.8.0-openjdk-headless | 1:1.8.0.492.b09-1.0.1.el7_9 |
| Oracle Linux · 7 | java-1.8.0-openjdk-javadoc | 1:1.8.0.492.b09-1.0.1.el7_9 |
| Oracle Linux · 7 | java-1.8.0-openjdk-javadoc-zip | 1:1.8.0.492.b09-1.0.1.el7_9 |
| Oracle Linux · 7 | java-1.8.0-openjdk-src | 1:1.8.0.492.b09-1.0.1.el7_9 |
Vulnerabilities 7
-
High 7.5CVE-2026-22016 Public exploit
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
-
Medium 5.3CVE-2026-22013 Public exploit
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
-
Medium 5.3
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
-
Medium 5.3
An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.1…
-
Low 3.7CVE-2026-22018 Public exploit
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
-
Low 2.9CVE-2026-22007 Public exploit
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
-
Low 2.9
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…