ELSA-2025-18814

ELSA-2025-18814 - java-1.8.0-openjdk security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2025-11-11

Description

[1.8.0.472.b08-1.0.1]
- Update to 8u472-b08 (GA) [Orabug: 38571645]
- Update release notes for 8u472-b08.
- Drop local JDK-8339414 fix as this is now included upstream
- Reset rpmrelease to 1 now there are no other RPM builds on RHEL 8
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: RHEL-118769
- Resolves: RHEL-119444
- Fixes CVE-2025-53057 CVE-2025-53066

[1:1.8.0.462.b08-1.0.1]
- Update to 8u462-b08 (GA) [Orabug: 38248370]
- Update release notes for 8u462-b08.
- Require tzdata 2025b due to upstream inclusion of JDK-8352716
- Add early backport of JDK-8339414
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
- Resolves: RHEL-101654
- Resolves: RHEL-102307
- Resolves: RHEL-102907

[1.8.0.452.b09-1.0.1]
- Update to 8u452-b09 (GA) [Orabug: 38144314]
- Update release notes for 8u452-b09.
- Remove long option documentation from JDK-8335912/JDK-8337499 as not present in 8u
- Require tzdata 2025a due to upstream inclusion of JDK-8347965
- ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
- Resolves: RHEL-86973
- Resolves: RHEL-86616

[1:1.8.0.442.b06-1.0.3]
- Fixed CVE-2025-21587, CVE-2025-30691 and CVE-2025-30698 [Orabug: 37840723]

[1:1.8.0.442.b06-1.0.1]
- Update to 8u442-b06 (GA) [Orabug: 37506184]
- Update release notes for 8u442-b06.
- Add a simple -version check on both the JDK and JRE bin/java

Related CVEs

CVE-2025-53057

CVE-2025-53066

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	java-1.8.0-openjdk-1.8.0.472.b08-1.0.1.el7_9.src.rpm	f3f43e5d772eee5de4a7dd9797e9780bc17febb2f8fbb888484e39413139888b	-	ol7_x86_64_latest_ELS
	java-1.8.0-openjdk-1.8.0.472.b08-1.0.1.el7_9.i686.rpm	1b775e71579d8bdd7c459e74a5b9f8e572b300993a7d9480ef95ffcdfa7116ec	-	ol7_x86_64_latest_ELS
	java-1.8.0-openjdk-1.8.0.472.b08-1.0.1.el7_9.x86_64.rpm	8defcc770775a4ad12d16364fd3d885fccf18cea7149f6b9b498fbbd0945939b	-	ol7_x86_64_latest_ELS
	java-1.8.0-openjdk-accessibility-1.8.0.472.b08-1.0.1.el7_9.i686.rpm	38228b0cc248a31edbe618719cbe4dc6244398e1130a7edd555eca07d481180d	-	ol7_x86_64_latest_ELS
	java-1.8.0-openjdk-accessibility-1.8.0.472.b08-1.0.1.el7_9.x86_64.rpm	6c4a66fb295a568596a555f2a3b7c732c5a703a3f7e6efce82870744186a1ed0	-	ol7_x86_64_latest_ELS
	java-1.8.0-openjdk-demo-1.8.0.472.b08-1.0.1.el7_9.i686.rpm	04d68b9d22f0d972383cddc36c7fe9465fd2de067aa4e0c54772eee73118a4a3	-	ol7_x86_64_latest_ELS
	java-1.8.0-openjdk-demo-1.8.0.472.b08-1.0.1.el7_9.x86_64.rpm	46f0b47cd9e0a559a12cf500ebd93e3e4cbc424a6e45a9fd4067b7acde86cc4f	-	ol7_x86_64_latest_ELS
	java-1.8.0-openjdk-devel-1.8.0.472.b08-1.0.1.el7_9.i686.rpm	f79f1c1fe116ef5a6119a72dbfcc010addf064f70d7a2ba6163ba0d377be1294	-	ol7_x86_64_latest_ELS
	java-1.8.0-openjdk-devel-1.8.0.472.b08-1.0.1.el7_9.x86_64.rpm	a334bf7426cbede4630ba375069edd5d06d87b5abdb118b7e32da54194fce3d1	-	ol7_x86_64_latest_ELS
	java-1.8.0-openjdk-headless-1.8.0.472.b08-1.0.1.el7_9.i686.rpm	a3569a54bc50ae46996e5cfb3c343281f836928a1746048ae52d077652fee291	-	ol7_x86_64_latest_ELS
	java-1.8.0-openjdk-headless-1.8.0.472.b08-1.0.1.el7_9.x86_64.rpm	1c8caddcae6b01d48e8e8ad5f0afdd71901c4261723f93f01df022a527340e89	-	ol7_x86_64_latest_ELS
	java-1.8.0-openjdk-javadoc-1.8.0.472.b08-1.0.1.el7_9.noarch.rpm	7b017b74543e34546727d1ffb819f5c6fbdd2543052bafb7d2de08874bc2b0b2	-	ol7_x86_64_latest_ELS
	java-1.8.0-openjdk-javadoc-zip-1.8.0.472.b08-1.0.1.el7_9.noarch.rpm	5d17af49fe751381ad21604b21bbe74ef25f76ff8b2d6e36293f8a33684fba25	-	ol7_x86_64_latest_ELS
	java-1.8.0-openjdk-src-1.8.0.472.b08-1.0.1.el7_9.i686.rpm	72378581a2d13b670bcb6f8fc51cbc6a51f082f687f06935dc18a3e1782bfdc7	-	ol7_x86_64_latest_ELS
	java-1.8.0-openjdk-src-1.8.0.472.b08-1.0.1.el7_9.x86_64.rpm	72fbdb98392b2e2883a5decd34278bf475baa5a074abcc9f15794e72653c7483	-	ol7_x86_64_latest_ELS

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team