ELSA-2026-9682

ELSA-2026-9682 - java-1.8.0-openjdk security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-06-09

Description

[1.8.0.492.b09-1.0.1]
- Update to 8u492-b09 (GA) [Orabug: 39247147][CVE-2026-22007][CVE-2026-22013]
[CVE-2026-22016][CVE-2026-22018][CVE-2026-22021][CVE-2026-23865][CVE-2026-34268]

[1.8.0.482.b08-1.0.1]
- Update to 8u482-b08 (GA). [Orabug: 38893614]
- Update release notes for 8u482-b08.
- Resolves: RHEL-142689
- Resolves: RHEL-139521
- Resolves: RHEL-131446
- Resolves: RHEL-131459
- Resolves: RHEL-142865
- Resolves: RHEL-142696
- Fixes CVE-2026-21925 CVE-2026-21933 CVE-2026-21945

[1.8.0.472.b08-1.0.1]
- Update to 8u472-b08 (GA) [Orabug: 38571645]
- Update release notes for 8u472-b08.
- Drop local JDK-8339414 fix as this is now included upstream
- Reset rpmrelease to 1 now there are no other RPM builds on RHEL 8
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: RHEL-118769
- Resolves: RHEL-119444
- Fixes CVE-2025-53057 CVE-2025-53066

[1:1.8.0.462.b08-1.0.1]
- Update to 8u462-b08 (GA) [Orabug: 38248370]
- Update release notes for 8u462-b08.
- Require tzdata 2025b due to upstream inclusion of JDK-8352716
- Add early backport of JDK-8339414
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
- Resolves: RHEL-101654
- Resolves: RHEL-102307
- Resolves: RHEL-102907

[1.8.0.452.b09-1.0.1]
- Update to 8u452-b09 (GA) [Orabug: 38144314]
- Update release notes for 8u452-b09.
- Remove long option documentation from JDK-8335912/JDK-8337499 as not present in 8u
- Require tzdata 2025a due to upstream inclusion of JDK-8347965
- ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
- Resolves: RHEL-86973
- Resolves: RHEL-86616

[1:1.8.0.442.b06-1.0.3]
- Fixed CVE-2025-21587, CVE-2025-30691 and CVE-2025-30698 [Orabug: 37840723]

[1:1.8.0.442.b06-1.0.1]
- Update to 8u442-b06 (GA) [Orabug: 37506184]
- Update release notes for 8u442-b06.
- Add a simple -version check on both the JDK and JRE bin/java

Related CVEs

CVE-2026-22007

CVE-2026-22013

CVE-2026-22016

CVE-2026-22018

CVE-2026-22021

CVE-2026-23865

CVE-2026-34268

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	java-1.8.0-openjdk-1.8.0.492.b09-1.0.1.el7_9.src.rpm	c032ebe619ffe0685f3e9c0bdb03b1f21f55505a0ac6cbb57bc7d986c85f20d1	-	ol7_x86_64_latest_ELS
	java-1.8.0-openjdk-1.8.0.492.b09-1.0.1.el7_9.i686.rpm	6ec9a8dc67265b8537f6c084f40ec8cd86ad57ca1e3cd9ca23d010f214667ee9	-	ol7_x86_64_latest_ELS
	java-1.8.0-openjdk-1.8.0.492.b09-1.0.1.el7_9.x86_64.rpm	92b81a89606fc649892784656daf882f565fcbaf24344e67cef3543b22c877d3	-	ol7_x86_64_latest_ELS
	java-1.8.0-openjdk-accessibility-1.8.0.492.b09-1.0.1.el7_9.i686.rpm	38d8ee847bd1d1f3fafd01ec5e1d936f06496cf71f798d9729a68d3b3bbe4bf3	-	ol7_x86_64_latest_ELS
	java-1.8.0-openjdk-accessibility-1.8.0.492.b09-1.0.1.el7_9.x86_64.rpm	b57dc5eebfd0da8c8b0e23139037f98d66ca10d66c8223ca462f21188350976d	-	ol7_x86_64_latest_ELS
	java-1.8.0-openjdk-demo-1.8.0.492.b09-1.0.1.el7_9.i686.rpm	4d017378446f5e201e38167f614246c148d72a7645ea1bbe28f4f40fb9f42be6	-	ol7_x86_64_latest_ELS
	java-1.8.0-openjdk-demo-1.8.0.492.b09-1.0.1.el7_9.x86_64.rpm	454e24f8cf1bfbd25c9545966b553867e5e70b2dfe3419523fa1943c6af99ffa	-	ol7_x86_64_latest_ELS
	java-1.8.0-openjdk-devel-1.8.0.492.b09-1.0.1.el7_9.i686.rpm	cf6b66b8d0c0e9ae5679c9a684a410ecd5368ac955ebb723371e46b01ad9d571	-	ol7_x86_64_latest_ELS
	java-1.8.0-openjdk-devel-1.8.0.492.b09-1.0.1.el7_9.x86_64.rpm	56b10f00749e0eb008edd9e037ab64e06154df964e2a80b32a0963f7b2a1c328	-	ol7_x86_64_latest_ELS
	java-1.8.0-openjdk-headless-1.8.0.492.b09-1.0.1.el7_9.i686.rpm	7e41820588641f5a62209381e8b2429d80de0dea78d648d7cd7cbaf7953caf2d	-	ol7_x86_64_latest_ELS
	java-1.8.0-openjdk-headless-1.8.0.492.b09-1.0.1.el7_9.x86_64.rpm	7db4242b833909473ed7eee8b67ae0b68f774bf493d5b97ef557b521bd235032	-	ol7_x86_64_latest_ELS
	java-1.8.0-openjdk-javadoc-1.8.0.492.b09-1.0.1.el7_9.noarch.rpm	403cc8f07baf1f69f3855cb745f8a34f99904431069eef06bf78e07cafc99633	-	ol7_x86_64_latest_ELS
	java-1.8.0-openjdk-javadoc-zip-1.8.0.492.b09-1.0.1.el7_9.noarch.rpm	ce2ba7a8b3fc39b6178f589745c9d909ecbb742033c2d3dcda53d414f6765499	-	ol7_x86_64_latest_ELS
	java-1.8.0-openjdk-src-1.8.0.492.b09-1.0.1.el7_9.i686.rpm	f5868383a1cec6629f2ef1f9d519a8e70dd15d4b9b3c67e8cf8f8fb33abcae19	-	ol7_x86_64_latest_ELS
	java-1.8.0-openjdk-src-1.8.0.492.b09-1.0.1.el7_9.x86_64.rpm	37ce97afe670bc6a0a3c8727a52981b918a8e0b4e78825361c01fc8dbd855ad0	-	ol7_x86_64_latest_ELS

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team