Version 8u172 is abcent on official site, need up to 8u181
8u172 is in the archives, but that requires going through even more webpages and creating an account with Oracle. Newest seems to be 8u181.
Maybe the security team should have a look?
The release 8u181 "also contains fixes for security vulnerabilities described in the Oracle Critical Patch Update."
*** This bug has been marked as a duplicate of bug 661456 ***