[El-errata] ELSA-2026-42899 Important: Oracle Linux 9 java-25-openjdk security update

Wed Aug 5 21:40:21 UTC 2026

Oracle Linux Security Advisory ELSA-2026-42899

http://linux.oracle.com/errata/ELSA-2026-42899.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
java-25-openjdk-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-crypto-adapter-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-crypto-adapter-fastdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-crypto-adapter-slowdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-demo-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-demo-fastdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-demo-slowdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-devel-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-devel-fastdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-devel-slowdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-fastdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-headless-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-headless-fastdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-headless-slowdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-javadoc-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-javadoc-zip-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-jmods-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-jmods-fastdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-jmods-slowdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-slowdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-src-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-src-fastdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-src-slowdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-static-libs-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-static-libs-fastdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-static-libs-slowdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm

aarch64:
java-25-openjdk-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-crypto-adapter-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-crypto-adapter-fastdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-crypto-adapter-slowdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-demo-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-demo-fastdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-demo-slowdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-devel-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-devel-fastdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-devel-slowdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-fastdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-headless-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-headless-fastdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-headless-slowdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-javadoc-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-javadoc-zip-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-jmods-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-jmods-fastdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-jmods-slowdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-slowdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-src-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-src-fastdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-src-slowdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-static-libs-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-static-libs-fastdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-static-libs-slowdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/java-25-openjdk-25.0.4.0.7-1.1.0.1.el9.src.rpm

Related CVEs:

CVE-2026-????
CVE-2026-41254
CVE-2026-46917
CVE-2026-46968
CVE-2026-47010
CVE-2026-47021
CVE-2026-47027
CVE-2026-47059
CVE-2026-47063

Description of changes:

[25.0.4.0.7-1.1.0.1]
- Add Oracle vendor bug URL [Orabug: 34340155]

[1:25.0.4.0.7-1.0]
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188880
- Resolves: RHEL-212293
- Resolves: RHEL-212297

[1:25.0.3.0.9-3.2]
- Add family option with name argument to alternatives install lines (OPENJDK-4854)
- Resolves: RHEL-211053

[1:25.0.3.0.9-3.1]
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155330
- Related: RHEL-156040
- Resolves: RHEL-149785
- Resolves: RHEL-211047
- Resolves: RHEL-211051