Back Linuxsecurity

Oracle Linux 8 Java 1.8.0 Important Update ELSA-2026

Linuxsecurity •LinuxSecurity Advisories • August 12, 2026

Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×

[1:1.8.0.502.b07-1.1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:1.8.0.502.b07-1.1] - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in where possible (%dnl not compatible enough yet) - Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gat...

java-1.8.0-openjdk-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm java-1.8.0-openjdk-accessibility-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm java-1.8.0-openjdk-demo-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm java-1.8.0-openjdk-demo-fastdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm java-1.8.0-openjdk-devel-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm java-1.8.0-openjdk-devel-fastdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm java-1.8.0-openjdk-fastdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm java-1.8.0-openjdk-headless-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm java-1.8.0-openjdk-headless-fastdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm java-1.8.0-openjdk-ja...

java-1.8.0-openjdk-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm java-1.8.0-openjdk-accessibility-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm java-1.8.0-openjdk-demo-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm java-1.8.0-openjdk-demo-fastdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm java-1.8.0-openjdk-devel-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm java-1.8.0-openjdk-devel-fastdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm java-1.8.0-openjdk-fastdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm java-1.8.0-openjdk-headless-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm java-1.8.0-openjdk-headless-fastdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm java-1.8.0-openjdk-javadoc-1.8.0.502.b07-1.1.0.1.el8.noarch.rpm java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-1.1.0.1.el8.noarch.rpm java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm java-1.8.0-openjdk-src-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm java-1.8.0-openjdk-src-fastdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Oracle Linux Kernel ptrace Vulnerability CVE-2026-46333 Disclosed Oracle has disclosed a critical security vulnerability in the ptrace functionality of its Linux kernels, identified as CVE-2026-46333. This vulnerability affects multiple versions of Oracle Linux, including Oracle Linux 8, 9, and the Unbreakable Enterprise Kernel (UEK). The flaw allows unauthorized access to process memory, which could potentially be exploited to gain elevated privileges. The vulnerability was published on May 15, 2026, with a proof of concept (PoC) available as of May 16, 2026. Users are advised to apply the latest patches immediately to mitigate risks. The affected kernel versions include 6.12.0-202.76.4.3 and 5.15.0-320.202.8.4 for Oracle Linux 9 and 8, respectively. The issue has been confirmed by Oracle and is being treated with urgency due to its potential impact on system security. 364 sources 74

Extracted Entities

CVEs (10)

CVE-2026-41254 CVE-2026-46968 CVE-2026-47010 CVE-2026-47021 CVE-2026-47027 CVE-2026-47057 CVE-2026-47058 CVE-2026-47059 CVE-2026-47063 CVE-2026-60147

Platforms (5)

CentOS Java Linux OpenJDK Oracle Linux