Linux · Oracle Linux · Security advisory · August 20, 2026

ELSA-2026-55798: Security update for 26 packages

ELSA-2026-55798, released August 20, 2026, fixes 4 CVEs across 26 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Highest CVSS
7.5
Base score, 0 to 10
Highest EPSS
0.0046
40th percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 4 Routine 0

Fixed package versions

ProductReleaseFixed in
java-25-openjdkol 101:25.0.4.1.1-1.1.0.1.el10
java-25-openjdkol 91:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-crypto-adapterol 101:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-crypto-adapterol 91:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-crypto-adapter-fastdebugol 101:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-crypto-adapter-fastdebugol 91:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-crypto-adapter-slowdebugol 101:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-crypto-adapter-slowdebugol 91:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-demool 101:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-demool 91:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-demo-fastdebugol 101:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-demo-fastdebugol 91:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-demo-slowdebugol 101:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-demo-slowdebugol 91:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-develol 101:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-develol 91:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-devel-fastdebugol 101:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-devel-fastdebugol 91:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-devel-slowdebugol 101:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-devel-slowdebugol 91:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-fastdebugol 101:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-fastdebugol 91:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-headlessol 101:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-headlessol 91:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-headless-fastdebugol 101:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-headless-fastdebugol 91:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-headless-slowdebugol 101:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-headless-slowdebugol 91:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-javadocol 101:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-javadocol 91:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-javadoc-zipol 101:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-javadoc-zipol 91:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-jmodsol 101:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-jmodsol 91:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-jmods-fastdebugol 101:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-jmods-fastdebugol 91:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-jmods-slowdebugol 101:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-jmods-slowdebugol 91:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-slowdebugol 101:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-slowdebugol 91:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-srcol 101:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-srcol 91:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-src-fastdebugol 101:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-src-fastdebugol 91:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-src-slowdebugol 101:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-src-slowdebugol 91:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-static-libsol 101:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-static-libsol 91:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-static-libs-fastdebugol 101:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-static-libs-fastdebugol 91:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-static-libs-slowdebugol 101:25.0.4.1.1-1.1.0.1.el10
java-25-openjdk-static-libs-slowdebugol 91:25.0.4.1.1-1.1.0.1.el10

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2026-70906 java-25-openjdk: The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development...7.5 0.0046 None reported
High CVE-2026-61308 java-17-openjdk: The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Develop...7.5 0.0031 None reported
High CVE-2026-70907 java-17-openjdk: The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Develop...7.5 0.0028 None reported
High CVE-2026-60589 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vect7.5 0.0027 None reported
Showing 1 to 4 of 4 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.