Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
OpenJDK 8 packages could expose data or connections
published 2 months ago
Summary
The OpenJDK 8 runtime and development kits on AlmaLinux may mishandle resources, web connections, and secure communications, potentially allowing unauthorized access or data leaks. Update the java-1.8.0-openjdk packages (including accessibility and demo versions) to the latest release to protect your systems.
What to do
- Update almalinux java-1.8.0-openjdk to version 1:1.8.0.504.b01-1.1.el8.
- Update almalinux java-1.8.0-openjdk-accessibility to version 1:1.8.0.504.b01-1.1.el8.
- Update almalinux java-1.8.0-openjdk-accessibility-fastdebug to version 1:1.8.0.504.b01-1.1.el8.
- Update almalinux java-1.8.0-openjdk-accessibility-slowdebug to version 1:1.8.0.504.b01-1.1.el8.
- Update almalinux java-1.8.0-openjdk-demo to version 1:1.8.0.504.b01-1.1.el8.
- Update almalinux java-1.8.0-openjdk-demo-fastdebug to version 1:1.8.0.504.b01-1.1.el8.
- Update almalinux java-1.8.0-openjdk-demo-slowdebug to version 1:1.8.0.504.b01-1.1.el8.
- Update almalinux java-1.8.0-openjdk-devel to version 1:1.8.0.504.b01-1.1.el8.
- Update almalinux java-1.8.0-openjdk-devel-fastdebug to version 1:1.8.0.504.b01-1.1.el8.
- Update almalinux java-1.8.0-openjdk-devel-slowdebug to version 1:1.8.0.504.b01-1.1.el8.
- Update almalinux java-1.8.0-openjdk-fastdebug to version 1:1.8.0.504.b01-1.1.el8.
- Update almalinux java-1.8.0-openjdk-headless to version 1:1.8.0.504.b01-1.1.el8.
- Update almalinux java-1.8.0-openjdk-headless-fastdebug to version 1:1.8.0.504.b01-1.1.el8.
- Update almalinux java-1.8.0-openjdk-headless-slowdebug to version 1:1.8.0.504.b01-1.1.el8.
- Update almalinux java-1.8.0-openjdk-javadoc to version 1:1.8.0.504.b01-1.1.el8.
- Update almalinux java-1.8.0-openjdk-javadoc-zip to version 1:1.8.0.504.b01-1.1.el8.
- Update almalinux java-1.8.0-openjdk-slowdebug to version 1:1.8.0.504.b01-1.1.el8.
- Update almalinux java-1.8.0-openjdk-src to version 1:1.8.0.504.b01-1.1.el8.
- Update almalinux java-1.8.0-openjdk-src-fastdebug to version 1:1.8.0.504.b01-1.1.el8.
- Update almalinux java-1.8.0-openjdk-src-slowdebug to version 1:1.8.0.504.b01-1.1.el8.
- Update almalinux java-1.8.0-openjdk to version 1:1.8.0.504.b01-1.2.el9.alma.1.
- Update almalinux java-1.8.0-openjdk-demo to version 1:1.8.0.504.b01-1.2.el9.alma.1.
- Update almalinux java-1.8.0-openjdk-demo-fastdebug to version 1:1.8.0.504.b01-1.2.el9.alma.1.
- Update almalinux java-1.8.0-openjdk-demo-slowdebug to version 1:1.8.0.504.b01-1.2.el9.alma.1.
- Update almalinux java-1.8.0-openjdk-devel to version 1:1.8.0.504.b01-1.2.el9.alma.1.
- Update almalinux java-1.8.0-openjdk-devel-fastdebug to version 1:1.8.0.504.b01-1.2.el9.alma.1.
- Update almalinux java-1.8.0-openjdk-devel-slowdebug to version 1:1.8.0.504.b01-1.2.el9.alma.1.
- Update almalinux java-1.8.0-openjdk-fastdebug to version 1:1.8.0.504.b01-1.2.el9.alma.1.
- Update almalinux java-1.8.0-openjdk-headless to version 1:1.8.0.504.b01-1.2.el9.alma.1.
- Update almalinux java-1.8.0-openjdk-headless-fastdebug to version 1:1.8.0.504.b01-1.2.el9.alma.1.
- Update almalinux java-1.8.0-openjdk-headless-slowdebug to version 1:1.8.0.504.b01-1.2.el9.alma.1.
- Update almalinux java-1.8.0-openjdk-javadoc to version 1:1.8.0.504.b01-1.2.el9.alma.1.
- Update almalinux java-1.8.0-openjdk-javadoc-zip to version 1:1.8.0.504.b01-1.2.el9.alma.1.
- Update almalinux java-1.8.0-openjdk-slowdebug to version 1:1.8.0.504.b01-1.2.el9.alma.1.
- Update almalinux java-1.8.0-openjdk-src to version 1:1.8.0.504.b01-1.2.el9.alma.1.
- Update almalinux java-1.8.0-openjdk-src-fastdebug to version 1:1.8.0.504.b01-1.2.el9.alma.1.
- Update almalinux java-1.8.0-openjdk-src-slowdebug to version 1:1.8.0.504.b01-1.2.el9.alma.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:8 | almalinux | java-1.8.0-openjdk |
< 1:1.8.0.504.b01-1.1.el8 Fix: upgrade to 1:1.8.0.504.b01-1.1.el8
|
| AlmaLinux:8 | almalinux | java-1.8.0-openjdk-accessibility |
< 1:1.8.0.504.b01-1.1.el8 Fix: upgrade to 1:1.8.0.504.b01-1.1.el8
|
| AlmaLinux:8 | almalinux | java-1.8.0-openjdk-accessibility-fastdebug |
< 1:1.8.0.504.b01-1.1.el8 Fix: upgrade to 1:1.8.0.504.b01-1.1.el8
|
| AlmaLinux:8 | almalinux | java-1.8.0-openjdk-accessibility-slowdebug |
< 1:1.8.0.504.b01-1.1.el8 Fix: upgrade to 1:1.8.0.504.b01-1.1.el8
|
| AlmaLinux:8 | almalinux | java-1.8.0-openjdk-demo |
< 1:1.8.0.504.b01-1.1.el8 Fix: upgrade to 1:1.8.0.504.b01-1.1.el8
|
| AlmaLinux:8 | almalinux | java-1.8.0-openjdk-demo-fastdebug |
< 1:1.8.0.504.b01-1.1.el8 Fix: upgrade to 1:1.8.0.504.b01-1.1.el8
|
| AlmaLinux:8 | almalinux | java-1.8.0-openjdk-demo-slowdebug |
< 1:1.8.0.504.b01-1.1.el8 Fix: upgrade to 1:1.8.0.504.b01-1.1.el8
|
| AlmaLinux:8 | almalinux | java-1.8.0-openjdk-devel |
< 1:1.8.0.504.b01-1.1.el8 Fix: upgrade to 1:1.8.0.504.b01-1.1.el8
|
| AlmaLinux:8 | almalinux | java-1.8.0-openjdk-devel-fastdebug |
< 1:1.8.0.504.b01-1.1.el8 Fix: upgrade to 1:1.8.0.504.b01-1.1.el8
|
| AlmaLinux:8 | almalinux | java-1.8.0-openjdk-devel-slowdebug |
< 1:1.8.0.504.b01-1.1.el8 Fix: upgrade to 1:1.8.0.504.b01-1.1.el8
|
| AlmaLinux:8 | almalinux | java-1.8.0-openjdk-fastdebug |
< 1:1.8.0.504.b01-1.1.el8 Fix: upgrade to 1:1.8.0.504.b01-1.1.el8
|
| AlmaLinux:8 | almalinux | java-1.8.0-openjdk-headless |
< 1:1.8.0.504.b01-1.1.el8 Fix: upgrade to 1:1.8.0.504.b01-1.1.el8
|
| AlmaLinux:8 | almalinux | java-1.8.0-openjdk-headless-fastdebug |
< 1:1.8.0.504.b01-1.1.el8 Fix: upgrade to 1:1.8.0.504.b01-1.1.el8
|
| AlmaLinux:8 | almalinux | java-1.8.0-openjdk-headless-slowdebug |
< 1:1.8.0.504.b01-1.1.el8 Fix: upgrade to 1:1.8.0.504.b01-1.1.el8
|
| AlmaLinux:8 | almalinux | java-1.8.0-openjdk-javadoc |
< 1:1.8.0.504.b01-1.1.el8 Fix: upgrade to 1:1.8.0.504.b01-1.1.el8
|
| AlmaLinux:8 | almalinux | java-1.8.0-openjdk-javadoc-zip |
< 1:1.8.0.504.b01-1.1.el8 Fix: upgrade to 1:1.8.0.504.b01-1.1.el8
|
| AlmaLinux:8 | almalinux | java-1.8.0-openjdk-slowdebug |
< 1:1.8.0.504.b01-1.1.el8 Fix: upgrade to 1:1.8.0.504.b01-1.1.el8
|
| AlmaLinux:8 | almalinux | java-1.8.0-openjdk-src |
< 1:1.8.0.504.b01-1.1.el8 Fix: upgrade to 1:1.8.0.504.b01-1.1.el8
|
| AlmaLinux:8 | almalinux | java-1.8.0-openjdk-src-fastdebug |
< 1:1.8.0.504.b01-1.1.el8 Fix: upgrade to 1:1.8.0.504.b01-1.1.el8
|
| AlmaLinux:8 | almalinux | java-1.8.0-openjdk-src-slowdebug |
< 1:1.8.0.504.b01-1.1.el8 Fix: upgrade to 1:1.8.0.504.b01-1.1.el8
|
| AlmaLinux:9 | almalinux | java-1.8.0-openjdk |
< 1:1.8.0.504.b01-1.2.el9.alma.1 Fix: upgrade to 1:1.8.0.504.b01-1.2.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-1.8.0-openjdk-demo |
< 1:1.8.0.504.b01-1.2.el9.alma.1 Fix: upgrade to 1:1.8.0.504.b01-1.2.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-1.8.0-openjdk-demo-fastdebug |
< 1:1.8.0.504.b01-1.2.el9.alma.1 Fix: upgrade to 1:1.8.0.504.b01-1.2.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-1.8.0-openjdk-demo-slowdebug |
< 1:1.8.0.504.b01-1.2.el9.alma.1 Fix: upgrade to 1:1.8.0.504.b01-1.2.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-1.8.0-openjdk-devel |
< 1:1.8.0.504.b01-1.2.el9.alma.1 Fix: upgrade to 1:1.8.0.504.b01-1.2.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-1.8.0-openjdk-devel-fastdebug |
< 1:1.8.0.504.b01-1.2.el9.alma.1 Fix: upgrade to 1:1.8.0.504.b01-1.2.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-1.8.0-openjdk-devel-slowdebug |
< 1:1.8.0.504.b01-1.2.el9.alma.1 Fix: upgrade to 1:1.8.0.504.b01-1.2.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-1.8.0-openjdk-fastdebug |
< 1:1.8.0.504.b01-1.2.el9.alma.1 Fix: upgrade to 1:1.8.0.504.b01-1.2.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-1.8.0-openjdk-headless |
< 1:1.8.0.504.b01-1.2.el9.alma.1 Fix: upgrade to 1:1.8.0.504.b01-1.2.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-1.8.0-openjdk-headless-fastdebug |
< 1:1.8.0.504.b01-1.2.el9.alma.1 Fix: upgrade to 1:1.8.0.504.b01-1.2.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-1.8.0-openjdk-headless-slowdebug |
< 1:1.8.0.504.b01-1.2.el9.alma.1 Fix: upgrade to 1:1.8.0.504.b01-1.2.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-1.8.0-openjdk-javadoc |
< 1:1.8.0.504.b01-1.2.el9.alma.1 Fix: upgrade to 1:1.8.0.504.b01-1.2.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-1.8.0-openjdk-javadoc-zip |
< 1:1.8.0.504.b01-1.2.el9.alma.1 Fix: upgrade to 1:1.8.0.504.b01-1.2.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-1.8.0-openjdk-slowdebug |
< 1:1.8.0.504.b01-1.2.el9.alma.1 Fix: upgrade to 1:1.8.0.504.b01-1.2.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-1.8.0-openjdk-src |
< 1:1.8.0.504.b01-1.2.el9.alma.1 Fix: upgrade to 1:1.8.0.504.b01-1.2.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-1.8.0-openjdk-src-fastdebug |
< 1:1.8.0.504.b01-1.2.el9.alma.1 Fix: upgrade to 1:1.8.0.504.b01-1.2.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-1.8.0-openjdk-src-slowdebug |
< 1:1.8.0.504.b01-1.2.el9.alma.1 Fix: upgrade to 1:1.8.0.504.b01-1.2.el9.alma.1
|
Original advisory text
Moderate: java-1.8.0-openjdk security update
The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.
Security Fix(es):
* JDK: Improve Resource Resolving (CVE-2026-60589)
* JDK: Enhance HTTP Connections (CVE-2026-61308)
* JDK: Enhance TLS server (CVE-2026-70907)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* JDK: Improve Resource Resolving (CVE-2026-60589)
* JDK: Enhance HTTP Connections (CVE-2026-61308)
* JDK: Enhance TLS server (CVE-2026-70907)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://access.redhat.com/errata/RHSA-2026:55775 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-60589 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-61308 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-70907 Third Party Advisory
- https://bugzilla.redhat.com/2513035 Third Party Advisory
- https://bugzilla.redhat.com/2513037 Third Party Advisory
- https://bugzilla.redhat.com/2513038 Third Party Advisory
- https://errata.almalinux.org/8/ALSA-2026-55775.html Vendor Advisory
- https://errata.almalinux.org/9/ALSA-2026-55775.html Vendor Advisory
Timeline
Published19 Aug 2026
Updated29 Oct 2026
First seen29 Oct 2026
Sources
ALSA-2026:55775 · OSV
Track software like this
Free during beta