[El-errata] ELBA-2026-6009 Oracle Linux 9 java-25-openjdk bug fix and enhancement update

[Errata Announcements for Oracle Linux]

Oracle Linux Bug Fix Advisory ELBA-2026-6009

http://linux.oracle.com/errata/ELBA-2026-6009.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
java-25-openjdk-25.0.2.0.10-3.0.1.el9.x86_64.rpm
java-25-openjdk-crypto-adapter-25.0.2.0.10-3.0.1.el9.x86_64.rpm
java-25-openjdk-crypto-adapter-fastdebug-25.0.2.0.10-3.0.1.el9.x86_64.rpm
java-25-openjdk-crypto-adapter-slowdebug-25.0.2.0.10-3.0.1.el9.x86_64.rpm
java-25-openjdk-demo-25.0.2.0.10-3.0.1.el9.x86_64.rpm
java-25-openjdk-demo-fastdebug-25.0.2.0.10-3.0.1.el9.x86_64.rpm
java-25-openjdk-demo-slowdebug-25.0.2.0.10-3.0.1.el9.x86_64.rpm
java-25-openjdk-devel-25.0.2.0.10-3.0.1.el9.x86_64.rpm
java-25-openjdk-devel-fastdebug-25.0.2.0.10-3.0.1.el9.x86_64.rpm
java-25-openjdk-devel-slowdebug-25.0.2.0.10-3.0.1.el9.x86_64.rpm
java-25-openjdk-fastdebug-25.0.2.0.10-3.0.1.el9.x86_64.rpm
java-25-openjdk-headless-25.0.2.0.10-3.0.1.el9.x86_64.rpm
java-25-openjdk-headless-fastdebug-25.0.2.0.10-3.0.1.el9.x86_64.rpm
java-25-openjdk-headless-slowdebug-25.0.2.0.10-3.0.1.el9.x86_64.rpm
java-25-openjdk-javadoc-25.0.2.0.10-3.0.1.el9.x86_64.rpm
java-25-openjdk-javadoc-zip-25.0.2.0.10-3.0.1.el9.x86_64.rpm
java-25-openjdk-jmods-25.0.2.0.10-3.0.1.el9.x86_64.rpm
java-25-openjdk-jmods-fastdebug-25.0.2.0.10-3.0.1.el9.x86_64.rpm
java-25-openjdk-jmods-slowdebug-25.0.2.0.10-3.0.1.el9.x86_64.rpm
java-25-openjdk-slowdebug-25.0.2.0.10-3.0.1.el9.x86_64.rpm
java-25-openjdk-src-25.0.2.0.10-3.0.1.el9.x86_64.rpm
java-25-openjdk-src-fastdebug-25.0.2.0.10-3.0.1.el9.x86_64.rpm
java-25-openjdk-src-slowdebug-25.0.2.0.10-3.0.1.el9.x86_64.rpm
java-25-openjdk-static-libs-25.0.2.0.10-3.0.1.el9.x86_64.rpm
java-25-openjdk-static-libs-fastdebug-25.0.2.0.10-3.0.1.el9.x86_64.rpm
java-25-openjdk-static-libs-slowdebug-25.0.2.0.10-3.0.1.el9.x86_64.rpm

aarch64:
java-25-openjdk-25.0.2.0.10-3.0.1.el9.aarch64.rpm
java-25-openjdk-crypto-adapter-25.0.2.0.10-3.0.1.el9.aarch64.rpm
java-25-openjdk-crypto-adapter-fastdebug-25.0.2.0.10-3.0.1.el9.aarch64.rpm
java-25-openjdk-crypto-adapter-slowdebug-25.0.2.0.10-3.0.1.el9.aarch64.rpm
java-25-openjdk-demo-25.0.2.0.10-3.0.1.el9.aarch64.rpm
java-25-openjdk-demo-fastdebug-25.0.2.0.10-3.0.1.el9.aarch64.rpm
java-25-openjdk-demo-slowdebug-25.0.2.0.10-3.0.1.el9.aarch64.rpm
java-25-openjdk-devel-25.0.2.0.10-3.0.1.el9.aarch64.rpm
java-25-openjdk-devel-fastdebug-25.0.2.0.10-3.0.1.el9.aarch64.rpm
java-25-openjdk-devel-slowdebug-25.0.2.0.10-3.0.1.el9.aarch64.rpm
java-25-openjdk-fastdebug-25.0.2.0.10-3.0.1.el9.aarch64.rpm
java-25-openjdk-headless-25.0.2.0.10-3.0.1.el9.aarch64.rpm
java-25-openjdk-headless-fastdebug-25.0.2.0.10-3.0.1.el9.aarch64.rpm
java-25-openjdk-headless-slowdebug-25.0.2.0.10-3.0.1.el9.aarch64.rpm
java-25-openjdk-javadoc-25.0.2.0.10-3.0.1.el9.aarch64.rpm
java-25-openjdk-javadoc-zip-25.0.2.0.10-3.0.1.el9.aarch64.rpm
java-25-openjdk-jmods-25.0.2.0.10-3.0.1.el9.aarch64.rpm
java-25-openjdk-jmods-fastdebug-25.0.2.0.10-3.0.1.el9.aarch64.rpm
java-25-openjdk-jmods-slowdebug-25.0.2.0.10-3.0.1.el9.aarch64.rpm
java-25-openjdk-slowdebug-25.0.2.0.10-3.0.1.el9.aarch64.rpm
java-25-openjdk-src-25.0.2.0.10-3.0.1.el9.aarch64.rpm
java-25-openjdk-src-fastdebug-25.0.2.0.10-3.0.1.el9.aarch64.rpm
java-25-openjdk-src-slowdebug-25.0.2.0.10-3.0.1.el9.aarch64.rpm
java-25-openjdk-static-libs-25.0.2.0.10-3.0.1.el9.aarch64.rpm
java-25-openjdk-static-libs-fastdebug-25.0.2.0.10-3.0.1.el9.aarch64.rpm
java-25-openjdk-static-libs-slowdebug-25.0.2.0.10-3.0.1.el9.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/java-25-openjdk-25.0.2.0.10-3.0.1.el9.src.rpm



Description of changes:

[1:25.0.2.0.10-3.0.1]
- Add Oracle vendor bug URL [Orabug: 34340155]

[1:25.0.2.0.10-3]
- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-149786

[1:25.0.2.0.10-3]
- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155001
- Resolves: RHEL-147354
- Resolves: RHEL-148410
- Resolves: RHEL-148997
- Resolves: RHEL-155047
- Resolves: RHEL-155330
- Resolves: RHEL-156036
- Resolves: RHEL-156040

[1:25.0.2.0.10-2]
- Bump rpmrelease for CentOS build
- Related: RHEL-139577
- Related: RHEL-142856
- Related: RHEL-142808

[1:25.0.2.0.10-1]
- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142856

[1:25.0.2.0.10-1]
- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
- Test for java.security's existence in create-redhat-properties-files.bash
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: RHEL-139577
- Resolves: RHEL-143373
- Resolves: RHEL-143368
- Resolves: RHEL-142856
- Resolves: RHEL-142808