Oracle alert ELSA-2026-42899 (java-25-openjdk)
| From: | Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2026-42899 Important: Oracle Linux 10 java-25-openjdk security update | |
| Date: | Sat, 01 Aug 2026 00:17:51 -0700 | |
| Message-ID: | <mailman.331.1785568684.18.el-errata@oss.oracle.com> |
Oracle Linux Security Advisory ELSA-2026-42899 http://linux.oracle.com/errata/ELSA-2026-42899.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: x86_64: java-25-openjdk-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm java-25-openjdk-crypto-adapter-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm java-25-openjdk-crypto-adapter-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm java-25-openjdk-crypto-adapter-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm java-25-openjdk-demo-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm java-25-openjdk-demo-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm java-25-openjdk-demo-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm java-25-openjdk-devel-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm java-25-openjdk-devel-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm java-25-openjdk-devel-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm java-25-openjdk-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm java-25-openjdk-headless-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm java-25-openjdk-headless-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm java-25-openjdk-headless-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm java-25-openjdk-javadoc-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm java-25-openjdk-javadoc-zip-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm java-25-openjdk-jmods-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm java-25-openjdk-jmods-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm java-25-openjdk-jmods-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm java-25-openjdk-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm java-25-openjdk-src-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm java-25-openjdk-src-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm java-25-openjdk-src-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm java-25-openjdk-static-libs-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm java-25-openjdk-static-libs-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm java-25-openjdk-static-libs-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm aarch64: java-25-openjdk-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm java-25-openjdk-crypto-adapter-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm java-25-openjdk-crypto-adapter-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm java-25-openjdk-crypto-adapter-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm java-25-openjdk-demo-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm java-25-openjdk-demo-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm java-25-openjdk-demo-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm java-25-openjdk-devel-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm java-25-openjdk-devel-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm java-25-openjdk-devel-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm java-25-openjdk-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm java-25-openjdk-headless-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm java-25-openjdk-headless-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm java-25-openjdk-headless-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm java-25-openjdk-javadoc-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm java-25-openjdk-javadoc-zip-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm java-25-openjdk-jmods-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm java-25-openjdk-jmods-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm java-25-openjdk-jmods-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm java-25-openjdk-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm java-25-openjdk-src-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm java-25-openjdk-src-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm java-25-openjdk-src-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm java-25-openjdk-static-libs-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm java-25-openjdk-static-libs-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm java-25-openjdk-static-libs-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/java-25-openjdk-... Related CVEs: CVE-2026-60147 CVE-2026-41254 CVE-2026-46917 CVE-2026-46968 CVE-2026-47010 CVE-2026-47021 CVE-2026-47027 CVE-2026-47059 CVE-2026-47063 Description of changes: [25.0.4.0.7-1.1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:25.0.4.0.7-1.0] - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188883 - Resolves: RHEL-212294 - Resolves: RHEL-212296 [1:25.0.3.0.9-3.1] - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155327 - Related: RHEL-155339 - Resolves: RHEL-150977 - Resolves: RHEL-210972 - Resolves: RHEL-210993 _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata