Oracle Errata System Oracle Linux 5.11 2026-10-28T15:40:48 Oracle Linux 8 flute [1.3.0-19.OOo31] - OpenJDK 8 won't be supported anymore on RHEL 8 starting from November 2026, move to OpenJDK 21 - Resolves: RHEL-275416 libbase [1.1.3-21] - Remove commons logging dependency - Related: RHEL-286491 [1.1.3-20] - OpenJDK 8 won't be supported anymore on RHEL 8 starting from November 2026, move to OpenJDK 21 - Resolves: RHEL-275415 [1.1.3-19] - Resolves: rhbz#1896020 Use /usr/share/java instead of /usr/share/java for build dependencies libfonts [1.1.3-23] - Remove commons logging dependency - Related: RHEL-286491 [1.1.3-22] - OpenJDK 8 won't be supported anymore on RHEL 8 starting from November 2026, move to OpenJDK 21 - Update license to fix the failing rpminspect test - Resolves: RHEL-275421 libformula [1.1.3-20] - Remove commons logging dependency - Related: RHEL-286491 [1.1.3-19] - OpenJDK 8 won't be supported anymore on RHEL 8 starting from November 2026, move to OpenJDK 21 - Resolves: RHEL-275419 liblayout [0.2.10-19] - Remove commons logging dependency - Related: RHEL-286491 [0.2.10-18] - OpenJDK 8 won't be supported anymore on RHEL 8 starting from November 2026, move to OpenJDK 21 - Update the license to fix rpminspect test - Resolves: RHEL-275422 libloader [1.1.3-19] - Remove commons logging dependency - Related: RHEL-286491 [1.1.3-18] - OpenJDK 8 won't be supported anymore on RHEL 8 starting from November 2026, move to OpenJDK 21 - Resolves: RHEL-275418 libreoffice [7.1.8.1-3.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Build with --with-vendor='Oracle America, Inc.' - Added the --with-hamcrest option to configure [1:7.1.8.1-3] - Resolves: RHEL-286491 Bump Java requirements in program/javavendors.xml [1:7.1.8.1-2] - Resolves: RHEL-269267 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269190 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269176 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276430 CVE-2026-63277 Arbitrary code execution via remote Java database driver [1:7.1.8.1-1] - OpenJDK 8 won't be supported anymore on RHEL 8 starting from November 2026, move to OpenJDK 21. LibreOffice 6.x doesn't really support anything newer than OpenJDK 8, so a rebase to 7.x was needed and RHEL 9 was used as a base. OpenJDK 21 doesn't have i686 builds available so these are not built anymore (previously they were built, but stayed in the BUILDROOT repository). - Resolves: RHEL-260518 librepository [1.1.3-19] - Remove commons logging dependency - Related: RHEL-286491 [1.1.3-18] - OpenJDK 8 won't be supported anymore on RHEL 8 starting from November 2026, move to OpenJDK 21 - Resolves: RHEL-275420 libserializer [1.1.2-20] - Remove commons logging dependency - Related: RHEL-286491 [1.1.2-19] - OpenJDK 8 won't be supported anymore on RHEL 8 starting from November 2026, move to OpenJDK 21 - Resolves: RHEL-275417 pentaho-libxml [1.1.3-20] - Remove commons logging dependency - Related: RHEL-286491 [1.1.3-19] - OpenJDK 8 won't be supported anymore on RHEL 8 starting from November 2026, move to OpenJDK 21 - Resolves: RHEL-275423 [1.1.3-18] - Resolves: rhbz#1896326 Use /usr/share/java instead of _javadir macro for build dependencies pentaho-reporting-flow-engine [1:0.9.4-17] - Remove commons logging dependency - Related: RHEL-286491 [1:0.9.4-16] - OpenJDK 8 won't be supported anymore on RHEL 8 starting from November 2026, move to OpenJDK 21 - Resolves: RHEL-275424 sac [1.3-29] - OpenJDK 8 won't be supported anymore on RHEL 8 starting from November 2026, move to OpenJDK 21 - Resolves: RHEL-277813 IMPORTANT Copyright 2026 Oracle, Inc. CVE-2026-63274 CVE-2026-63275 CVE-2026-63276 CVE-2026-63277 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder