Oracle Linux 8 ELSA-2026-0927 java-17-openjdk Important Remote Access Risks
oracle
January 23, 2026
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Summary
[1:17.0.18.0.8-1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:17.0.18.0.8-1] - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** [1:17.0.18.0.7-0.1.ea] - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
Topics Covered
SRPMs
http://oss.oracle.com/ol8/SRPMS-updates/java-17-openjdk-17.0.18.0.8-1.0.1.el8.src.rpm
x86_64
java-17-openjdk-17.0.18.0.8-1.0.1.el8.x86_64.rpm java-17-openjdk-demo-17.0.18.0.8-1.0.1.el8.x86_64.rpm java-17-openjdk-demo-fastdebug-17.0.18.0.8-1.0.1.el8.x86_64.rpm java-17-openjdk-demo-slowdebug-17.0.18.0.8-1.0.1.el8.x86_64.rpm java-17-openjdk-devel-17.0.18.0.8-1.0.1.el8.x86_64.rpm java-17-openjdk-devel-fastdebug-17.0.18.0.8-1.0.1.el8.x86_64.rpm java-17-openjdk-devel-slowdebug-17.0.18.0.8-1.0.1.el8.x86_64.rpm java-17-openjdk-fastdebug-17.0.18.0.8-1.0.1.el8.x86_64.rpm java-17-openjdk-headless-17.0.18.0.8-1.0.1.el8.x86_64.rpm java-17-openjdk-headless-fastdebug-17.0.18.0.8-1.0.1.el8.x86_64.rpm java-17-openjdk-headless-slowdebug-17.0.18.0.8-1.0.1.el8.x86_64.rpm java-17-openjdk-javadoc-17.0.18.0.8-1.0.1.el8.x86_64.rpm java-17-openjdk-javadoc-zip-17.0.18.0.8-1.0.1.el8.x86_64.rpm java-17-openjdk-jmods-17.0.18.0.8-1.0.1.el8.x86_64.rpm java-17-openjdk-jmods-fastdebug-17.0.18.0.8-1.0.1.el8.x86_64.rpm java-17-openjdk-jmods-slowdebug-17.0.18.0.8-1.0.1.el8.x86_64.rpm java-17-openjdk-slowdebug...
Read the Full Advisoryaarch64
java-17-openjdk-17.0.18.0.8-1.0.1.el8.aarch64.rpm java-17-openjdk-demo-17.0.18.0.8-1.0.1.el8.aarch64.rpm java-17-openjdk-demo-fastdebug-17.0.18.0.8-1.0.1.el8.aarch64.rpm java-17-openjdk-demo-slowdebug-17.0.18.0.8-1.0.1.el8.aarch64.rpm java-17-openjdk-devel-17.0.18.0.8-1.0.1.el8.aarch64.rpm java-17-openjdk-devel-fastdebug-17.0.18.0.8-1.0.1.el8.aarch64.rpm java-17-openjdk-devel-slowdebug-17.0.18.0.8-1.0.1.el8.aarch64.rpm java-17-openjdk-fastdebug-17.0.18.0.8-1.0.1.el8.aarch64.rpm java-17-openjdk-headless-17.0.18.0.8-1.0.1.el8.aarch64.rpm java-17-openjdk-headless-fastdebug-17.0.18.0.8-1.0.1.el8.aarch64.rpm java-17-openjdk-headless-slowdebug-17.0.18.0.8-1.0.1.el8.aarch64.rpm java-17-openjdk-javadoc-17.0.18.0.8-1.0.1.el8.aarch64.rpm java-17-openjdk-javadoc-zip-17.0.18.0.8-1.0.1.el8.aarch64.rpm java-17-openjdk-jmods-17.0.18.0.8-1.0.1.el8.aarch64.rpm java-17-openjdk-jmods-fastdebug-17.0.18.0.8-1.0.1.el8.aarch64.rpm java-17-openjdk-jmods-slowdebug-17.0.18.0.8-1.0.1.el8.aarch64.rpm java-17-openjdk-slowdebug-17.0.18.0.8-1.0.1.el8.aarch64.rpm java-17-openjdk-src-17.0.18.0.8-1.0.1.el8.aarch64.rpm java-17-openjdk-src-fastdebug-17.0.18.0.8-1.0.1.el8.aarch64.rpm java-17-openjdk-src-slowdebug-17.0.18.0.8-1.0.1.el8.aarch64.rpm java-17-openjdk-static-libs-17.0.18.0.8-1.0.1.el8.aarch64.rpm java-17-openjdk-static-libs-fastdebug-17.0.18.0.8-1.0.1.el8.aarch64.rpm java-17-openjdk-static-libs-slowdebug-17.0.18.0.8-1.0.1.el8.aarch64.rpm
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Related CVEs:
CVE-2025-64720
CVE-2025-65018
CVE-2026-21925
CVE-2026-21933
CVE-2026-21945
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!