Moderate Security Update for java-1.8.0-openjdk: Enhancements to Resource Resolving, HTTP Connections, and TLS Server
Summary
RLSA-2026:55775: Moderate: java-1.8.0-openjdk security update. Affects java-1.8.0-openjdk versions < 1:1.8.0.504.b01-1.1.el8_10. Fixed in 1:1.8.0.504.b01-1.1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The java-1.8.0-openjdk package provides the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. It is widely used for developing and running Java applications, offering a robust platform with extensive libraries and tools. However, vulnerabilities in this package can expose applications to security risks, necessitating timely updates to maintain system integrity.
Vulnerability Detail
The vulnerabilities identified in the java-1.8.0-openjdk package include improvements to resource resolving (CVE-2026-60589), enhancements to HTTP connections (CVE-2026-61308), and upgrades to the TLS server (CVE-2026-70907). These vulnerabilities could allow attackers to exploit weaknesses in resource handling, HTTP communication, and secure connections, potentially leading to unauthorized access or data breaches.
How To Fix
Minimum fixed version
1:1.8.0.504.b01-1.1.el8_10
This is the first release that contains the fix.
sudo dnf update java-1.8.0-openjdkTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, consider restricting access to applications utilizing the vulnerable package until the update can be applied. Additionally, monitor network traffic for any unusual activity that may indicate exploitation attempts.
Conclusion
The java-1.8.0-openjdk package has several vulnerabilities that require immediate attention. By updating to the latest patched version, users can enhance their application's security and mitigate potential risks associated with these vulnerabilities.
See every vulnerability recorded for java-1.8.0-openjdk →
FAQ
The CVSS score of the vulnerability is 6.8, indicating a moderate level of severity.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The vulnerabilities could lead to unauthorized access, data breaches, or exploitation of applications relying on the affected package.
Yes, you should update to version 1:1.8.0.504.b01-1.1.el8_10 or later to mitigate the vulnerabilities.
Vulert monitors and alerts for open-source vulnerabilities in software using just a manifest file like package-lock.json, helping you maintain security without requiring access to the code.
References
Related vulnerabilities
Recent vulnerabilities recorded for java-1.8.0-openjdk.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
