[El-errata] ELEA-2025-23419 Oracle Linux 9 java-25-openjdk bug fix and enhancement update

Mon Mar 9 13:54:19 UTC 2026

Oracle Linux Enhancement Advisory ELEA-2025-23419

http://linux.oracle.com/errata/ELEA-2025-23419.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
java-25-openjdk-25.0.1.0.8-2.0.1.el9.x86_64.rpm
java-25-openjdk-crypto-adapter-25.0.1.0.8-2.0.1.el9.x86_64.rpm
java-25-openjdk-crypto-adapter-fastdebug-25.0.1.0.8-2.0.1.el9.x86_64.rpm
java-25-openjdk-crypto-adapter-slowdebug-25.0.1.0.8-2.0.1.el9.x86_64.rpm
java-25-openjdk-demo-25.0.1.0.8-2.0.1.el9.x86_64.rpm
java-25-openjdk-demo-fastdebug-25.0.1.0.8-2.0.1.el9.x86_64.rpm
java-25-openjdk-demo-slowdebug-25.0.1.0.8-2.0.1.el9.x86_64.rpm
java-25-openjdk-devel-25.0.1.0.8-2.0.1.el9.x86_64.rpm
java-25-openjdk-devel-fastdebug-25.0.1.0.8-2.0.1.el9.x86_64.rpm
java-25-openjdk-devel-slowdebug-25.0.1.0.8-2.0.1.el9.x86_64.rpm
java-25-openjdk-fastdebug-25.0.1.0.8-2.0.1.el9.x86_64.rpm
java-25-openjdk-headless-25.0.1.0.8-2.0.1.el9.x86_64.rpm
java-25-openjdk-headless-fastdebug-25.0.1.0.8-2.0.1.el9.x86_64.rpm
java-25-openjdk-headless-slowdebug-25.0.1.0.8-2.0.1.el9.x86_64.rpm
java-25-openjdk-javadoc-25.0.1.0.8-2.0.1.el9.x86_64.rpm
java-25-openjdk-javadoc-zip-25.0.1.0.8-2.0.1.el9.x86_64.rpm
java-25-openjdk-jmods-25.0.1.0.8-2.0.1.el9.x86_64.rpm
java-25-openjdk-jmods-fastdebug-25.0.1.0.8-2.0.1.el9.x86_64.rpm
java-25-openjdk-jmods-slowdebug-25.0.1.0.8-2.0.1.el9.x86_64.rpm
java-25-openjdk-slowdebug-25.0.1.0.8-2.0.1.el9.x86_64.rpm
java-25-openjdk-src-25.0.1.0.8-2.0.1.el9.x86_64.rpm
java-25-openjdk-src-fastdebug-25.0.1.0.8-2.0.1.el9.x86_64.rpm
java-25-openjdk-src-slowdebug-25.0.1.0.8-2.0.1.el9.x86_64.rpm
java-25-openjdk-static-libs-25.0.1.0.8-2.0.1.el9.x86_64.rpm
java-25-openjdk-static-libs-fastdebug-25.0.1.0.8-2.0.1.el9.x86_64.rpm
java-25-openjdk-static-libs-slowdebug-25.0.1.0.8-2.0.1.el9.x86_64.rpm

aarch64:
java-25-openjdk-25.0.1.0.8-2.0.1.el9.aarch64.rpm
java-25-openjdk-crypto-adapter-25.0.1.0.8-2.0.1.el9.aarch64.rpm
java-25-openjdk-crypto-adapter-fastdebug-25.0.1.0.8-2.0.1.el9.aarch64.rpm
java-25-openjdk-crypto-adapter-slowdebug-25.0.1.0.8-2.0.1.el9.aarch64.rpm
java-25-openjdk-demo-25.0.1.0.8-2.0.1.el9.aarch64.rpm
java-25-openjdk-demo-fastdebug-25.0.1.0.8-2.0.1.el9.aarch64.rpm
java-25-openjdk-demo-slowdebug-25.0.1.0.8-2.0.1.el9.aarch64.rpm
java-25-openjdk-devel-25.0.1.0.8-2.0.1.el9.aarch64.rpm
java-25-openjdk-devel-fastdebug-25.0.1.0.8-2.0.1.el9.aarch64.rpm
java-25-openjdk-devel-slowdebug-25.0.1.0.8-2.0.1.el9.aarch64.rpm
java-25-openjdk-fastdebug-25.0.1.0.8-2.0.1.el9.aarch64.rpm
java-25-openjdk-headless-25.0.1.0.8-2.0.1.el9.aarch64.rpm
java-25-openjdk-headless-fastdebug-25.0.1.0.8-2.0.1.el9.aarch64.rpm
java-25-openjdk-headless-slowdebug-25.0.1.0.8-2.0.1.el9.aarch64.rpm
java-25-openjdk-javadoc-25.0.1.0.8-2.0.1.el9.aarch64.rpm
java-25-openjdk-javadoc-zip-25.0.1.0.8-2.0.1.el9.aarch64.rpm
java-25-openjdk-jmods-25.0.1.0.8-2.0.1.el9.aarch64.rpm
java-25-openjdk-jmods-fastdebug-25.0.1.0.8-2.0.1.el9.aarch64.rpm
java-25-openjdk-jmods-slowdebug-25.0.1.0.8-2.0.1.el9.aarch64.rpm
java-25-openjdk-slowdebug-25.0.1.0.8-2.0.1.el9.aarch64.rpm
java-25-openjdk-src-25.0.1.0.8-2.0.1.el9.aarch64.rpm
java-25-openjdk-src-fastdebug-25.0.1.0.8-2.0.1.el9.aarch64.rpm
java-25-openjdk-src-slowdebug-25.0.1.0.8-2.0.1.el9.aarch64.rpm
java-25-openjdk-static-libs-25.0.1.0.8-2.0.1.el9.aarch64.rpm
java-25-openjdk-static-libs-fastdebug-25.0.1.0.8-2.0.1.el9.aarch64.rpm
java-25-openjdk-static-libs-slowdebug-25.0.1.0.8-2.0.1.el9.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/java-25-openjdk-25.0.1.0.8-2.0.1.el9.src.rpm

Description of changes:

[1:25.0.1.0.8-2.0.1]
- Add Oracle vendor bug URL [Orabug: 34340155]

[1:25.0.1.0.8-2]
- Incorporate new FIPS patch for 25u
- Drop static libjvm.a following adjusted build target for portable build
- Remove redundant (and now outdated) build targets, jdkimage and static_libs_image
- Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-133743
- Resolves: RHEL-133737
- Related: RHEL-131898

[1:25.0.1.0.8-2]
- Add java-25-openjdk-crypto-adapter subpackage
- Update library setting in create-redhat-properties-files.bash
- Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties
- Resolves: RHEL-132520
- Resolves: RHEL-132523

[1:25.0.1.0.8-1]
- Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS
- Patch the nssadapter build to recognise LDFLAGS
- Resolves: RHEL-131898

[1:25.0.1.0.8-1]
- Add libnssadapter.so
- Add FIPS crypto-policies configuration
- Remove obsolete security.useSystemPropertiesFile setup
- Update TestSecurityProperties.java test and calling convention
- Resolves: RHEL-128414
- Resolves: RHEL-128412

[1:25.0.1.0.8-1]
- Create java-25-openjdk package based on java-21-openjdk
- Update to jdk-25.0.1+8 (GA)
- Update release notes with features of JDK 22, 23, 24 & 25
- Mention finalisation JEP for features finalised in JDK 22, 23 & 24
- Update release notes to 25.0.1+8
- Update README file for java-25-openjdk
- Make sure this is not the default/system JDK providing 'java', 'jre', 'java-devel' ,etc.
- Remove 21u FIPS patch and disable use until we are ready for the 25 version
- Adjust CLDR expectations in TestTranslations.java after JDK-8317979 started using tzdata values
- Adjust TestTranslations.java to expect the same short name throughout for fr_FR and de_DE (bug?)
- Remove references to libsystemconf.so and nss.fips.cfg from the 21u FIPS patch
- Include static libraries in the vm_variant subdirectory after JDK-8307858 (libjvm.a)
- Flip equals test in TestSecurityProperties.java to handle null values from Security.getProperty
- Introduce crypto_policy_active to designate whether we should expect policy adherence in testing
- Flip crypto_policy_active to false while the crypto policy & FIPS patch is not present
- Handle new libsimdsort.so introduced on x86_64 only by JDK-8309130
- Remove lible.so handling following its removal in JDK-8327476: "Upgrade JLine to 3.26.1"
- Install jaxp-strict.properties.template added by JDK-8330542: "Template for Creating Strict JAXP Configuration File"
- alt-java man page installation is now handled by the OpenJDK build
- Adjust TestTranslations.java with updated German translations from CLDR 46 (JDK-8333582) (Mountain->Mountains)
- Run javap with the disassembled code (-c) option now required for -l by JDK-8345145
- Remove default.policy and java.policy following JDK-8338411: "Permanently Disable the Security Manager"
- Make man page handling dependent on pandoc being available during the portable build
- Handle new CDS archive variants (*_coh*) added by Compact Object Headers (JDK-8305895)
- Add missing man page alternatives for jdeprscan, jfr, jhsdb, jimage, jlink & jmod and fix alphabetical ordering
- Support jnativescan added by JDK-8317611: "Add a tool like jdeprscan to find usage of restricted methods"
- Add recent native libraries to _privatelibs (libjsvml.so, libsimdsort.so, libsyslookup.so)
- Support libsleef on AArch64 & RISC-V added by JDK-8329816, JDK-8320500 (RISC-V) & JDK-8312425 (AArch64)
- Remove superfluous backslashes that cause two alternative commands to be combined
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-126022