ELSA-2026-42899

ULN >
Oracle Linux Errata repository >
ELSA-2026-42899

ELSA-2026-42899 - java-25-openjdk security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-07-24

Description

[25.0.4.0.7-1.1.0.1]
- Add Oracle vendor bug URL [Orabug: 34340155]

[1:25.0.4.0.7-1.0]
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296

[1:25.0.3.0.9-3.1]
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test 'x'' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test 'x'' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993

Related CVEs

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label

Oracle Linux 10 (aarch64)	java-25-openjdk-25.0.4.0.7-1.1.0.1.el10_2.src.rpm	c676a3ca5a6d3b544ef45f73c6aa14f978f352a240235431e76a05a1285fffba	-	ol10_aarch64_appstream
	java-25-openjdk-25.0.4.0.7-1.1.0.1.el10_2.src.rpm	c676a3ca5a6d3b544ef45f73c6aa14f978f352a240235431e76a05a1285fffba	-	ol10_aarch64_codeready_builder
	java-25-openjdk-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm	6497c9cb1f33b732bfb4874434e2d8a073a042b47a0cd449a33ba0673c39b1db	-	ol10_aarch64_appstream
	java-25-openjdk-crypto-adapter-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm	a14cd0fcc20099aa21b405f898b831d061d20fa3c8c8e8ff76078497dce78c37	-	ol10_aarch64_appstream
	java-25-openjdk-crypto-adapter-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm	1fcb91d2d81d357e377db9b985582ff86370774b792d09b99e24453a8706b3c0	-	ol10_aarch64_codeready_builder
	java-25-openjdk-crypto-adapter-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm	b170efefbd3f030c4066bf222ee609086699aa2b5b0ec8f5ba34d08b6489918c	-	ol10_aarch64_codeready_builder
	java-25-openjdk-demo-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm	07ea88c44168f20cb9b75ce0c3174857dbf296c56a24a53bf31f01fe6459190e	-	ol10_aarch64_appstream
	java-25-openjdk-demo-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm	61e55d78fe71578becb68d110d60efcdd7f4c65ea25bb4489663da8b832caa37	-	ol10_aarch64_codeready_builder
	java-25-openjdk-demo-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm	7793ec1656b41918d5dd372584f33b7ca43d2aec57c2105960468c54b7a9dd7c	-	ol10_aarch64_codeready_builder
	java-25-openjdk-devel-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm	eb350b338c17a426b2b6eb3190b6dd5289fbd96a297665208da3ec23f909ce2c	-	ol10_aarch64_appstream
	java-25-openjdk-devel-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm	ad225f66e6ec3bc471ee2a510c5296c7140abf4921c13438030b7bbda2594229	-	ol10_aarch64_codeready_builder
	java-25-openjdk-devel-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm	ab55e21b1d43aafc62fff17f951424d5ef4de207c466ac1d9a5d5883c0fea818	-	ol10_aarch64_codeready_builder
	java-25-openjdk-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm	f659e67ee9b47a984c616128c8472617beceaad6fbe7e3fd56455f910a6fe394	-	ol10_aarch64_codeready_builder
	java-25-openjdk-headless-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm	9e479c87b6b1c510225b45fba6e36bdb5365c10b729c46c037975a6efbe916c5	-	ol10_aarch64_appstream
	java-25-openjdk-headless-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm	e51eee61929fe80b1a029500955a228041f8749b6aec743bc0ff536b78754552	-	ol10_aarch64_codeready_builder
	java-25-openjdk-headless-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm	ba903376bbc8b40d271f6c25ce48edaf151b32d1489f16184ea019e2920cb824	-	ol10_aarch64_codeready_builder
	java-25-openjdk-javadoc-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm	469d62f3ff6c9425fcea340f8fdc2557dd77df155a6f773a8872551c4848db34	-	ol10_aarch64_appstream
	java-25-openjdk-javadoc-zip-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm	39f2bd84d55273a558de46396f2fdc486dc8f93318bb3db47fe13f00dad9669a	-	ol10_aarch64_appstream
	java-25-openjdk-jmods-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm	92a4342168941bace550f2b79e6da6f8ec6a85cb3f9f2d7bb24f19bbd4b751c4	-	ol10_aarch64_appstream
	java-25-openjdk-jmods-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm	705237d570e2c61a3f4b41f3f60c5ae806866176bb647d42a84106cacace7aed	-	ol10_aarch64_codeready_builder
	java-25-openjdk-jmods-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm	0f32e8c60f7a8d50be879614121430f3e91b52f16b4a76aaba47de549b4c1dc1	-	ol10_aarch64_codeready_builder
	java-25-openjdk-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm	1b4b1bcbbd404b513ffab397c667defec20d29d288671f4d2bbd086521852872	-	ol10_aarch64_codeready_builder
	java-25-openjdk-src-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm	19af32755cf4b3bb2562f72a4cd3836e8800940008d6accc2954eece9c2f888f	-	ol10_aarch64_appstream
	java-25-openjdk-src-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm	8936af2a852b609ac68c22d6e3301db002656d008fc09c4bb43c9a2f11573e73	-	ol10_aarch64_codeready_builder
	java-25-openjdk-src-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm	e002d5818142bc946110dacc5c58e66cadddc4dc3876ee4a896dc747f43bb0bd	-	ol10_aarch64_codeready_builder
	java-25-openjdk-static-libs-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm	bb6261aaccc4547fe8943e83383777a0087c6cc02fc44d2b48da8f66155b184b	-	ol10_aarch64_appstream
	java-25-openjdk-static-libs-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm	b9e5c343d05d0085b7b1e29b134d83298a7ae7eeab29f48f2916c1ceb6e8ac4e	-	ol10_aarch64_codeready_builder
	java-25-openjdk-static-libs-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm	3a9d8f2fc10a124b13448bbcff27d988674755a150e2d3c349da79f82a5ff247	-	ol10_aarch64_codeready_builder

Oracle Linux 10 (x86_64)	java-25-openjdk-25.0.4.0.7-1.1.0.1.el10_2.src.rpm	c676a3ca5a6d3b544ef45f73c6aa14f978f352a240235431e76a05a1285fffba	-	ol10_x86_64_appstream
	java-25-openjdk-25.0.4.0.7-1.1.0.1.el10_2.src.rpm	c676a3ca5a6d3b544ef45f73c6aa14f978f352a240235431e76a05a1285fffba	-	ol10_x86_64_codeready_builder
	java-25-openjdk-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm	f2a61bd7a1e8d07ec343f3b32d3d03a92e7773182f70b6202de043109f37fd52	-	ol10_x86_64_appstream
	java-25-openjdk-crypto-adapter-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm	e7e652163e649483313c936f5840dd044d4f8281f97f13ef963ff70407312108	-	ol10_x86_64_appstream
	java-25-openjdk-crypto-adapter-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm	9327a23ca4bff792bed2ccef6de4947eedd03b7cf8af47b7532e67e9a7ec9934	-	ol10_x86_64_codeready_builder
	java-25-openjdk-crypto-adapter-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm	8d6be4dd71551f914b1d71c2688d5d990de87596b18fbeb34e4c3bea679faf84	-	ol10_x86_64_codeready_builder
	java-25-openjdk-demo-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm	a08e7e5d598f6f2dfc11a75aee6e4c49c9b44deed7ad63ff25a7fee3279400d6	-	ol10_x86_64_appstream
	java-25-openjdk-demo-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm	f48a36ed97b1ff2a82052ed7f1347f826ce27061fc45af1be83a14ef6d8ac1ad	-	ol10_x86_64_codeready_builder
	java-25-openjdk-demo-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm	dc6ade845532df15267d0a7f12a541e96ac8e636dc63517fd8e76489d5797ae3	-	ol10_x86_64_codeready_builder
	java-25-openjdk-devel-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm	0cc5e7fa0acd0b72f24753ea704d000899f069b3f9f90b26e488decdfaeac4b7	-	ol10_x86_64_appstream
	java-25-openjdk-devel-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm	b06d41d9dee2679eeb6d392288b2e407dc9d58b552bcef25542a14fcf5daa0b3	-	ol10_x86_64_codeready_builder
	java-25-openjdk-devel-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm	63ede87a710c1fdbeac4226bdccdb1dd28aa878cea8a23ab54799ae8cf0f0609	-	ol10_x86_64_codeready_builder
	java-25-openjdk-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm	aef1ad4362aa7c85d1e6e444fe915d255bb195bd4a22a9acb5a1a6eac821e7bf	-	ol10_x86_64_codeready_builder
	java-25-openjdk-headless-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm	c9621fd8be3c1ee99467982f57d8ef218d74df9d2e223ddd5ad22f91834a39d4	-	ol10_x86_64_appstream
	java-25-openjdk-headless-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm	3af68296df258382ed9c9b4a6c5d5e5611a1e6bc64599f709f3d715d7611a47d	-	ol10_x86_64_codeready_builder
	java-25-openjdk-headless-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm	36f77d81f38f792f448151eb4b8f12dd07e1734bd88eb13440ac64348fb6cb92	-	ol10_x86_64_codeready_builder
	java-25-openjdk-javadoc-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm	18d61327e9a2b4bfc80b611dfec439c366ffffbd119101a794bbe9723d510fac	-	ol10_x86_64_appstream
	java-25-openjdk-javadoc-zip-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm	97c2f6938b2d923a6aca6fc5fa40725393485081e2662c679cb5c4096517641d	-	ol10_x86_64_appstream
	java-25-openjdk-jmods-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm	2ba9fb1e5a5bdaca83656493ce275c185a4021a6adc3ca93a7fac0d9810b293c	-	ol10_x86_64_appstream
	java-25-openjdk-jmods-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm	eddcf6d86a565d5a43a22fa53c918237035d5dc895850ace3379d671eb316e6f	-	ol10_x86_64_codeready_builder
	java-25-openjdk-jmods-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm	27be27430a0aa5ef7e4dbd40c6e55f7a50eacf58bc0eef2b12e84ab7266da5eb	-	ol10_x86_64_codeready_builder
	java-25-openjdk-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm	9ab60d87e46408ab0d026331aa6522a9dc6e7ec12f64f0bbefc946c2dc05f38f	-	ol10_x86_64_codeready_builder
	java-25-openjdk-src-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm	dea3f779d29cc69762df047bcfc1dd71e9349739d437af9e9fb0835030c0cfb9	-	ol10_x86_64_appstream
	java-25-openjdk-src-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm	f145e7364de0dae3aba1b17e3d91728f825c2c55205481c484667d1761fd006f	-	ol10_x86_64_codeready_builder
	java-25-openjdk-src-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm	fb39cf4af9c163033ff9ee69b12a096007b34e9930a181c8a5905e113c6b3c6c	-	ol10_x86_64_codeready_builder
	java-25-openjdk-static-libs-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm	7baaf895a4f7b1fb38ce71648fef747bcc414da72adb8e3f6dc09b59e1ff2c02	-	ol10_x86_64_appstream
	java-25-openjdk-static-libs-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm	964b755091d4b85c28de63c7c9bdb189cf3cf003ecd77efcec6b06050dfb7797	-	ol10_x86_64_codeready_builder
	java-25-openjdk-static-libs-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm	d790e86d74a3cab162b1ff1af2d1b69d884ce023cf415558344de5bf55b3f52e	-	ol10_x86_64_codeready_builder

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

Technical information

Oracle Linux Support

Connect

Contact Us

Global contacts
Oracle 1-800-633-0691