ELSA-2026-42877

ELSA-2026-42877 - java-1.8.0-openjdk security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-08-11

Description


[1:1.8.0.502.b07-1.1.0.1]
- Add Oracle vendor bug URL [Orabug: 34340155]

[1:1.8.0.502.b07-1.1]
- Update to 8u502-b07 (GA).
- Update release notes for 8u502-b07.
- Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354
- Bump zlib version to 1.3.2 following JDK-8378631
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9
- Remove macro references in comments where possible (%dnl not compatible enough yet)
- Move version information and core NVR definitions back towards the top of the file
- Explictly define supported architectures
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Make zone string debug output optional in TestTranslations
- Change javadoc-zip to just own the top-level directory, not include the entire subtree
- Update tagged versions to include 9.8.0-z & 9.9.0.
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test 'x'' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test 'x'' usage.
- Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z)
- Sync the copy of the portable specfile with the latest update
- Sync portable naming with later JDKs, due to adoption of by portable
- Drop which is a redundant alias for version now
- Update tagging scripts to include signature checks and correctly handle gating
- Add gating scripts to simplify obtaining results and waiving issues
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212354
- Resolves: RHEL-188874
- Resolves: RHEL-212132
- Resolves: RHEL-212311
- Resolves: RHEL-212317
- Related: RHEL-212322
- Resolves: RHEL-212355
- Resolves: RHEL-212356
- Resolves: RHEL-212357
- Resolves: RHEL-212358

[1:1.8.0.502.b07-1.1]
- Make headless own /usr/share/doc/java-1.8.0-openjdk
- Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk
- Resolves: RHEL-212322


Related CVEs


CVE-2026-41254
CVE-2026-46968
CVE-2026-47010
CVE-2026-47021
CVE-2026-47027
CVE-2026-47057
CVE-2026-47058
CVE-2026-47059
CVE-2026-47063
CVE-2026-60147

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) java-1.8.0-openjdk-1.8.0.502.b07-1.1.0.1.el8.src.rpmc9d03072d848dc6e925557868c437794abc1498b0ef87ee35ecd5c52f3ef9563-ol8_aarch64_appstream
java-1.8.0-openjdk-1.8.0.502.b07-1.1.0.1.el8.src.rpmc9d03072d848dc6e925557868c437794abc1498b0ef87ee35ecd5c52f3ef9563-ol8_aarch64_codeready_builder
java-1.8.0-openjdk-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm4048a815d15a88d19d5c65b073c36b7b7d3672173175668d5af00e93260cd688-ol8_aarch64_appstream
java-1.8.0-openjdk-accessibility-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm026e4bd033f55e184b4283b754e75a06fae76680409b1b5cbe8d7dae1b1f2523-ol8_aarch64_appstream
java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm30d49452d4a459d656e5cf173ed2ca9ccc61d87230340252cbff0ca78f5b5c88-ol8_aarch64_codeready_builder
java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm649c34dc92aca5fc73436d467285bcb0f2ba735f6009888f593901010f6b0e4a-ol8_aarch64_codeready_builder
java-1.8.0-openjdk-demo-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm0d2b4e673ba211ffc2b497f6a9c6f312ecfd48a0c54a17346606061b53234404-ol8_aarch64_appstream
java-1.8.0-openjdk-demo-fastdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm595317140af8784cc72891fa47c854a383e03ae65c6b054fce8bd23c040d66c7-ol8_aarch64_codeready_builder
java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm355726c7594f65c1ddd03ee110c46f28b19335ca67c4f812cd6809c0d873ecbe-ol8_aarch64_codeready_builder
java-1.8.0-openjdk-devel-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm8bebb7c44ab171819024fed272bdca8d2aad1e7ea287fa6fa98da54e8db630bd-ol8_aarch64_appstream
java-1.8.0-openjdk-devel-fastdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm893f7e46d618df2c4b677f98dfdb9cb2cfef4d320461c1a720f75614edd6887d-ol8_aarch64_codeready_builder
java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm1d31a9f0a978406239567c2fca7d035f6f7cab8ec566dd005e14fea3f6d1e9ad-ol8_aarch64_codeready_builder
java-1.8.0-openjdk-fastdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm355de714de0d48a8382f349c6861bcf4599c94dd7b4142da497daafda3512647-ol8_aarch64_codeready_builder
java-1.8.0-openjdk-headless-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm6527b3b4b66fe303b05bcb31dc4b98e29b0b356823ad22cf334a75a5e6821418-ol8_aarch64_appstream
java-1.8.0-openjdk-headless-fastdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm18563a9327f0d63766d55498b25253fb2b6ceee28cb5027d39ecfee0d3f419bd-ol8_aarch64_codeready_builder
java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm5c9850f8cc36b2c3f109a37884a6968ced093d3aa7879358166d827895ec8ec4-ol8_aarch64_codeready_builder
java-1.8.0-openjdk-javadoc-1.8.0.502.b07-1.1.0.1.el8.noarch.rpm52388eb88e6487439d77f2519d4d3780324f77739053a78e755add0e1f2b6b4d-ol8_aarch64_appstream
java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-1.1.0.1.el8.noarch.rpm692cc8b6f6716cea348b39360728391d45e5020f89d51ad6dac0b19005c24708-ol8_aarch64_appstream
java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm1b5cebb4f13ec49b6bfe3f3faefc02f564f848dbded83beffe85cc57477a007f-ol8_aarch64_codeready_builder
java-1.8.0-openjdk-src-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpmb67e2a6c2e2aff0e57a6cb21e8c6dbd3fdc02863f6d2997c0af42e507a85ecd4-ol8_aarch64_appstream
java-1.8.0-openjdk-src-fastdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm7147a968abcd727b01f2ffc2d821dfcda7a536f2915f5e2284e28a2015692485-ol8_aarch64_codeready_builder
java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm8f65fc73ec068cafc962324122dfa4ebd9f487f4d1b8afbfba51f2157cf1ea88-ol8_aarch64_codeready_builder
Oracle Linux 8 (x86_64) java-1.8.0-openjdk-1.8.0.502.b07-1.1.0.1.el8.src.rpmc9d03072d848dc6e925557868c437794abc1498b0ef87ee35ecd5c52f3ef9563-ol8_x86_64_appstream
java-1.8.0-openjdk-1.8.0.502.b07-1.1.0.1.el8.src.rpmc9d03072d848dc6e925557868c437794abc1498b0ef87ee35ecd5c52f3ef9563-ol8_x86_64_codeready_builder
java-1.8.0-openjdk-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpmd51a065a6f8b798cc33b2d9c59cf05697e86d6a29a138d0a29872a21e4ed14ee-ol8_x86_64_appstream
java-1.8.0-openjdk-accessibility-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpma443dc75982c7fd32394f45f5c4d9379023ff841984d22208a024bb30d390171-ol8_x86_64_appstream
java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm9b2e49a88e51f75df5d9a50dd8826f6ffad99c81dedbd7683626facdb27767c7-ol8_x86_64_codeready_builder
java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm1f4ac03e7bbd30cd3f1da93204fc9075461823bcac07cdbe59dafcbbd95cdcb4-ol8_x86_64_codeready_builder
java-1.8.0-openjdk-demo-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm6eaa4968e39c41648b00af627a8443ef12192538cc04b8a10d97292a5d66a6d1-ol8_x86_64_appstream
java-1.8.0-openjdk-demo-fastdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm8aaf6479117b5b91789e4d466314f113ca4e3535c4611dfc6b0f25b76656ca9b-ol8_x86_64_codeready_builder
java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm769b3694c16753e98b2f76d9a205554b67cbceba6176b8e927ec0be19ad660d3-ol8_x86_64_codeready_builder
java-1.8.0-openjdk-devel-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm9d221c33e4208ead02d7160512b70ebb04149e85cc7858f5d428bdc5d10306be-ol8_x86_64_appstream
java-1.8.0-openjdk-devel-fastdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm717bd2b6db33e24b766ca19a844a705d905fea047f0162cb67d5cb5113e2c32e-ol8_x86_64_codeready_builder
java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm9b37626fa5b78e5a29cd7a4606f741db4af0f492ca4e3816dd40bb91836247e1-ol8_x86_64_codeready_builder
java-1.8.0-openjdk-fastdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpmd1167800526c5eee87ea7df1c5b7bd01abb51e963a19f12a9c38caf74ca63fa2-ol8_x86_64_codeready_builder
java-1.8.0-openjdk-headless-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm0ef18e1af8864a7313df4a7083e4e8ac5cf78e1b6825e29073615a067032a564-ol8_x86_64_appstream
java-1.8.0-openjdk-headless-fastdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm01e960dbe9f6b075102adba76f6346a57abf526b740ce2a79e22dd36600be56f-ol8_x86_64_codeready_builder
java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm0a9c9ca6695b8dc54db85674d08818d75ba3c8d1c77fe4731f2c8ae40b0da1cc-ol8_x86_64_codeready_builder
java-1.8.0-openjdk-javadoc-1.8.0.502.b07-1.1.0.1.el8.noarch.rpm52388eb88e6487439d77f2519d4d3780324f77739053a78e755add0e1f2b6b4d-ol8_x86_64_appstream
java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-1.1.0.1.el8.noarch.rpm692cc8b6f6716cea348b39360728391d45e5020f89d51ad6dac0b19005c24708-ol8_x86_64_appstream
java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpmacca3166efdc299dcdeb89c6d59dcf1f1029c106a33d6038dfab5ba65cfc6918-ol8_x86_64_codeready_builder
java-1.8.0-openjdk-src-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm9f9f068b8bc3915c53c463a864aa121a8354e50acc9fa09bd82201a1891dabd0-ol8_x86_64_appstream
java-1.8.0-openjdk-src-fastdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpmb87049af46535a672fdd29221fdde4d96769b588bf26d9151b77a61cefe92000-ol8_x86_64_codeready_builder
java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpma8f2212f5e12a07325f5ff48f4338f62706e70ab62103a252c61e68c363a2d22-ol8_x86_64_codeready_builder
Oracle Linux 9 (aarch64) java-1.8.0-openjdk-1.8.0.502.b07-1.2.0.1.el9.src.rpmdad885543f0468edc8110194b9c576cf0b39f2ccdd5be2d16fbcd6b873393c20-ol9_aarch64_appstream
java-1.8.0-openjdk-1.8.0.502.b07-1.2.0.1.el9.src.rpmdad885543f0468edc8110194b9c576cf0b39f2ccdd5be2d16fbcd6b873393c20-ol9_aarch64_codeready_builder
java-1.8.0-openjdk-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpm4b380f05f4480fdcf2cac0a29dece782a45955a1520dd8f497979ad4039dbb54-ol9_aarch64_appstream
java-1.8.0-openjdk-demo-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpm55479c0cc6264df78d5b562f454016fba55f5ce17442e1b6b701724dce6a4988-ol9_aarch64_appstream
java-1.8.0-openjdk-demo-fastdebug-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpmf54e6f39a9a5a2a01979c29df5e23939d1071e9ff09315153e43dce251863109-ol9_aarch64_codeready_builder
java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpm4262bd42856bc654de4e4281e03b24c32960b2edb79ada3718bc1d9aa56869fe-ol9_aarch64_codeready_builder
java-1.8.0-openjdk-devel-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpmff5eded073573644e7cf0cf15db199d4cef211556396855df21652365ca5904d-ol9_aarch64_appstream
java-1.8.0-openjdk-devel-fastdebug-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpmf9a3db86288a212c03d10fcfa0fba5befbf2eaefae297daf52c01195fd572bf3-ol9_aarch64_codeready_builder
java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpm6663f21bcbe886f32b07a130c44611fa696d986e1d87a74d40d35003e641278d-ol9_aarch64_codeready_builder
java-1.8.0-openjdk-fastdebug-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpm7382263145b8d7921a6941acafbdd34db6b1db99a8e2a640b46d70e6c9db9941-ol9_aarch64_codeready_builder
java-1.8.0-openjdk-headless-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpm93ed2113ec6944acf89ed00737e22a620fa5bd6a25ee72064a0b377a5a375b40-ol9_aarch64_appstream
java-1.8.0-openjdk-headless-fastdebug-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpm0deff776111c1ff27bae9bd6d8cb12859bf9c3c75328eedd94157c0b8ccc6565-ol9_aarch64_codeready_builder
java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpm0c789f10e24d69b241499974e9c16d89ff83cd6e9eb1853d904600439ea76c0a-ol9_aarch64_codeready_builder
java-1.8.0-openjdk-javadoc-1.8.0.502.b07-1.2.0.1.el9.noarch.rpm0691c3abf51f7448349f631b9fde2c4de892fa89b6aefd1c8ec6b8025c78aa88-ol9_aarch64_appstream
java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-1.2.0.1.el9.noarch.rpm77bceefbd7f3ebc5481397223135dfbceffff353305483e181bfff899e8a9890-ol9_aarch64_appstream
java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpm0b4a937583f9b0f6b8c5a8aebe781d411c557fc154cc44793396aaa9f9bf7d55-ol9_aarch64_codeready_builder
java-1.8.0-openjdk-src-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpmf9a26b3ab2f67cffc46ed92cd6135fa0bba69d9dee556a4989ca52c8dc420f6c-ol9_aarch64_appstream
java-1.8.0-openjdk-src-fastdebug-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpm7e2cdbd18e0142117ba2a90b89c4276a5a1b2db6bfbc762c63bf924207cbffe9-ol9_aarch64_codeready_builder
java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpmfc5e25990ca3d0929522d2892436a877f3ead67870550e64f0c1fc80374bac3a-ol9_aarch64_codeready_builder
Oracle Linux 9 (x86_64) java-1.8.0-openjdk-1.8.0.502.b07-1.2.0.1.el9.src.rpmdad885543f0468edc8110194b9c576cf0b39f2ccdd5be2d16fbcd6b873393c20-ol9_x86_64_appstream
java-1.8.0-openjdk-1.8.0.502.b07-1.2.0.1.el9.src.rpmdad885543f0468edc8110194b9c576cf0b39f2ccdd5be2d16fbcd6b873393c20-ol9_x86_64_codeready_builder
java-1.8.0-openjdk-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpmab6cd18abd54c887eb4e03f5987c4c4dee5fcf61378b707d884330b3aa5ca093-ol9_x86_64_appstream
java-1.8.0-openjdk-demo-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpmd85394bbc5a2d70c79cf75d43df4ee8b2ae3a83e59eef23b85fc5285a3c9f4f2-ol9_x86_64_appstream
java-1.8.0-openjdk-demo-fastdebug-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpmabce5b021d5aff5a6c63f9471fd3ba57ecafad1049f26cbf82b0278172b1b291-ol9_x86_64_codeready_builder
java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpm62bcebc28d58b52e4a0fb1a700664489bfc77750b4f3db77021a5a8e8acf488d-ol9_x86_64_codeready_builder
java-1.8.0-openjdk-devel-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpmbe3d2d34d5c457f0c2efd9997d542d1405eb9dd85b6dbd3c1fbd0bd5ee5c1120-ol9_x86_64_appstream
java-1.8.0-openjdk-devel-fastdebug-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpmdd62267cdb572a5100b28acd018a5a81aac06b98a472868792237a5bd4191683-ol9_x86_64_codeready_builder
java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpmdc1d276a940d3dddc4e0054547901a6db882fb1d46c65a1d801d97a3fbca04ea-ol9_x86_64_codeready_builder
java-1.8.0-openjdk-fastdebug-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpm3d4a365dc60e6904757efe03f8b164a5be3edc10654175e8df97de501a563a56-ol9_x86_64_codeready_builder
java-1.8.0-openjdk-headless-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpm1ecd2a049fab625a907a26bb9ff5e6349ac7d00211744d979c279b7e82bd2250-ol9_x86_64_appstream
java-1.8.0-openjdk-headless-fastdebug-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpmbea5eaf2c83f3987a362d308252e9fbb962ef57fe78b79ea8a0e204cc626f158-ol9_x86_64_codeready_builder
java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpmb11a10a50d089e572168030c2cbc5c9a099cad04e742efc4eabcce10e6f7903a-ol9_x86_64_codeready_builder
java-1.8.0-openjdk-javadoc-1.8.0.502.b07-1.2.0.1.el9.noarch.rpm0691c3abf51f7448349f631b9fde2c4de892fa89b6aefd1c8ec6b8025c78aa88-ol9_x86_64_appstream
java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-1.2.0.1.el9.noarch.rpm77bceefbd7f3ebc5481397223135dfbceffff353305483e181bfff899e8a9890-ol9_x86_64_appstream
java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpm83f88a5d88f2fe6f632b106e6010307f8adee7a74f48c63bd24c7a2a204bed75-ol9_x86_64_codeready_builder
java-1.8.0-openjdk-src-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpm19b41403e56364c81fb214e34f6883a5e9c07ed9603fee1b5188321ac14d82dd-ol9_x86_64_appstream
java-1.8.0-openjdk-src-fastdebug-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpm4d043388712cfe898680719af68c1ed1f267ce9bf6dd7a72f34093ed75e499cd-ol9_x86_64_codeready_builder
java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpm9649ecc96520e28c280ff7c363bc0cabffea67f53d5260755f965da1a8f52dee-ol9_x86_64_codeready_builder



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete