Oracle Errata System Oracle Linux 5.11 2026-04-23T16:02:27 Oracle Linux 9 Oracle Linux 10 [1:25.0.3.0.9-1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:25.0.3.0.9-1] - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Bump tzdata version to 2026a following JDK-8379035 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169620 - Resolves: RHEL-157091 - Resolves: RHEL-161217 - Resolves: RHEL-161333 - Resolves: RHEL-169613 IMPORTANT Copyright 2026 Oracle, Inc. CVE-2026-22007 CVE-2026-22008 CVE-2026-22013 CVE-2026-22016 CVE-2026-22018 CVE-2026-22021 CVE-2026-23865 CVE-2026-26740 CVE-2026-33416 CVE-2026-33636 CVE-2026-34268 CVE-2026-34282 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:10::appstream cpe:/a:oracle:linux:9::codeready_builder cpe:/a:oracle:linux:10::codeready_builder