Oracle Linux Java Updates Address Critical Security Vulnerabilities

Severity: High (Score: 60.6)

Sources: Linuxsecurity

Summary

On April 27, 2026, Oracle released important updates for Java in Oracle Linux 8 and 9, addressing vulnerabilities in OpenJDK 17 and 25. The updates include security patches for multiple libraries, with specific versions noted for freetype, giflib, libpng, and zlib. The updates are crucial for users of Oracle Linux 8 and 9, as they resolve several critical issues, including those tracked under Oracle bug ID 34340155. The updates are embargoed until April 21, 2026, and are now available for deployment. Users are advised to apply these patches promptly to mitigate potential security risks. The updates are part of Oracle's ongoing commitment to maintaining security in its software products. Key Points: • Oracle released critical Java updates for Oracle Linux 8 and 9 on April 27, 2026. • The updates address vulnerabilities in OpenJDK 17 and 25, including library patches. • Users are urged to apply the updates immediately to mitigate security risks.

Key Entities

• Oracle Linux (platform)