Skip to content
OpenAdvisories
Medium ELSA-2025-0422 1 CVE

Moderate: java-17-openjdk security update for RHEL 8.6, 8.8, 8.10, 9.4 and 9.5 (Oracle Linux 8)

Published Jan 23, 2025 · Updated Jan 23, 2025

Summary

[1:17.0.14.0.7-3.0.1]
- Add Oracle vendor bug URL [Orabug: 34340155]

[1:17.0.14.0.7-3]
- Set rpmrelease to 3
- Revert 'Require tzdata-java 2024b at runtime and for build'

[1:17.0.14.0.7-2]
- Do not pass nil to _jvmdir macro in cjc logic
- Related: RHEL-73867

[1:17.0.14.0.7-2]
- Adapt to newest cjc to fix issue with rpm 4.17
- Disable copy-jdk-configs for Flatpak builds
- Remove cjc backward compatibility, to fix when both rpm 4.16 and 4.17 are in transaction
- Resolves: rhbz#1953923
- Resolves: RHEL-73867

[1:17.0.14.0.7-2]
- Update to jdk-17.0.14+7 (GA)
- Add to .gitignore openjdk-17.0.14+7.tar.xz
- Set buildver to 7
- Set is_ga to 1
- Update sources to openjdk-17.0.14+7.tar.xz
- Require tzdata-java 2024b at runtime and for build
- Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
- Resolves: RHEL-73545
- ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **

[1:17.0.14.0.1-0.2.ea]
- Limit Java only tests to one architecture using jdk_test_arch
- OPENJDK-3185

[1:17.0.14.0.1-0.2.ea]
- Update to jdk-17.0.14+1 (EA)
- Add to .gitignore openjdk-17.0.14+1-ea.tar.xz
- Set updatever to 14
- Set buildver to 1
- Set rpmrelease to 2
- Set is_ga to 0
- Update sources to openjdk-17.0.14+1-ea.tar.xz
- Double percent signs consistently throughout comments
- Set bundled giflib provide version to 5.2.2
- Set bundled libpng provide version to 1.6.43
- Warn about bundled provide version bumps and backouts in openjdk_news.sh
- Remove 0001-8332174-Remove-2-unpaired-RLO-Unicode-characters-in-.patch file
- Revert: Use component in EPEL and Fedora bug URLs

Fixed packages 23

ReleasePackageFixed in
Oracle Linux · 8 java-17-openjdk 1:17.0.14.0.7-3.0.1.el8
Oracle Linux · 8 java-17-openjdk-demo 1:17.0.14.0.7-3.0.1.el8
Oracle Linux · 8 java-17-openjdk-demo-fastdebug 1:17.0.14.0.7-3.0.1.el8
Oracle Linux · 8 java-17-openjdk-demo-slowdebug 1:17.0.14.0.7-3.0.1.el8
Oracle Linux · 8 java-17-openjdk-devel 1:17.0.14.0.7-3.0.1.el8
Oracle Linux · 8 java-17-openjdk-devel-fastdebug 1:17.0.14.0.7-3.0.1.el8
Oracle Linux · 8 java-17-openjdk-devel-slowdebug 1:17.0.14.0.7-3.0.1.el8
Oracle Linux · 8 java-17-openjdk-fastdebug 1:17.0.14.0.7-3.0.1.el8
Oracle Linux · 8 java-17-openjdk-headless 1:17.0.14.0.7-3.0.1.el8
Oracle Linux · 8 java-17-openjdk-headless-fastdebug 1:17.0.14.0.7-3.0.1.el8
Oracle Linux · 8 java-17-openjdk-headless-slowdebug 1:17.0.14.0.7-3.0.1.el8
Oracle Linux · 8 java-17-openjdk-javadoc 1:17.0.14.0.7-3.0.1.el8
Oracle Linux · 8 java-17-openjdk-javadoc-zip 1:17.0.14.0.7-3.0.1.el8
Oracle Linux · 8 java-17-openjdk-jmods 1:17.0.14.0.7-3.0.1.el8
Oracle Linux · 8 java-17-openjdk-jmods-fastdebug 1:17.0.14.0.7-3.0.1.el8
Oracle Linux · 8 java-17-openjdk-jmods-slowdebug 1:17.0.14.0.7-3.0.1.el8
Oracle Linux · 8 java-17-openjdk-slowdebug 1:17.0.14.0.7-3.0.1.el8
Oracle Linux · 8 java-17-openjdk-src 1:17.0.14.0.7-3.0.1.el8
Oracle Linux · 8 java-17-openjdk-src-fastdebug 1:17.0.14.0.7-3.0.1.el8
Oracle Linux · 8 java-17-openjdk-src-slowdebug 1:17.0.14.0.7-3.0.1.el8
Oracle Linux · 8 java-17-openjdk-static-libs 1:17.0.14.0.7-3.0.1.el8
Oracle Linux · 8 java-17-openjdk-static-libs-fastdebug 1:17.0.14.0.7-3.0.1.el8
Oracle Linux · 8 java-17-openjdk-static-libs-slowdebug 1:17.0.14.0.7-3.0.1.el8

Vulnerabilities 1