Summary
[1:17.0.18.0.8-1.0.1]
- Add Oracle vendor bug URL [Orabug: 34340155]
[1:17.0.18.0.8-1]
- Update to jdk-17.0.18+8 (GA)
- Add to .gitignore openjdk-17.0.18+8.tar.xz
- Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
- Set buildver to 8
- Set is_ga to 1
- Update sources to openjdk-17.0.18+8.tar.xz
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
[1:17.0.18.0.7-0.1.ea]
- Update to jdk-17.0.18+7 (EA)
- Add to .gitignore openjdk-17.0.18+7-ea.tar.xz
- Set updatever to 18
- Set buildver to 7
- Set is_ga to 0
- Update sources to openjdk-17.0.18+7-ea.tar.xz
- Set bundled libpng version to 1.6.51
- Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
Fixed packages 23
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | java-17-openjdk | 1:17.0.18.0.8-1.0.1.el9 |
| Oracle Linux · 8 | java-17-openjdk-demo | 1:17.0.18.0.8-1.0.1.el9 |
| Oracle Linux · 8 | java-17-openjdk-demo-fastdebug | 1:17.0.18.0.8-1.0.1.el9 |
| Oracle Linux · 8 | java-17-openjdk-demo-slowdebug | 1:17.0.18.0.8-1.0.1.el9 |
| Oracle Linux · 8 | java-17-openjdk-devel | 1:17.0.18.0.8-1.0.1.el9 |
| Oracle Linux · 8 | java-17-openjdk-devel-fastdebug | 1:17.0.18.0.8-1.0.1.el9 |
| Oracle Linux · 8 | java-17-openjdk-devel-slowdebug | 1:17.0.18.0.8-1.0.1.el9 |
| Oracle Linux · 8 | java-17-openjdk-fastdebug | 1:17.0.18.0.8-1.0.1.el9 |
| Oracle Linux · 8 | java-17-openjdk-headless | 1:17.0.18.0.8-1.0.1.el9 |
| Oracle Linux · 8 | java-17-openjdk-headless-fastdebug | 1:17.0.18.0.8-1.0.1.el9 |
| Oracle Linux · 8 | java-17-openjdk-headless-slowdebug | 1:17.0.18.0.8-1.0.1.el9 |
| Oracle Linux · 8 | java-17-openjdk-javadoc | 1:17.0.18.0.8-1.0.1.el9 |
| Oracle Linux · 8 | java-17-openjdk-javadoc-zip | 1:17.0.18.0.8-1.0.1.el9 |
| Oracle Linux · 8 | java-17-openjdk-jmods | 1:17.0.18.0.8-1.0.1.el9 |
| Oracle Linux · 8 | java-17-openjdk-jmods-fastdebug | 1:17.0.18.0.8-1.0.1.el9 |
| Oracle Linux · 8 | java-17-openjdk-jmods-slowdebug | 1:17.0.18.0.8-1.0.1.el9 |
| Oracle Linux · 8 | java-17-openjdk-slowdebug | 1:17.0.18.0.8-1.0.1.el9 |
| Oracle Linux · 8 | java-17-openjdk-src | 1:17.0.18.0.8-1.0.1.el9 |
| Oracle Linux · 8 | java-17-openjdk-src-fastdebug | 1:17.0.18.0.8-1.0.1.el9 |
| Oracle Linux · 8 | java-17-openjdk-src-slowdebug | 1:17.0.18.0.8-1.0.1.el9 |
| Oracle Linux · 8 | java-17-openjdk-static-libs | 1:17.0.18.0.8-1.0.1.el9 |
| Oracle Linux · 8 | java-17-openjdk-static-libs-fastdebug | 1:17.0.18.0.8-1.0.1.el9 |
| Oracle Linux · 8 | java-17-openjdk-static-libs-slowdebug | 1:17.0.18.0.8-1.0.1.el9 |
Vulnerabilities 5
-
High 7.5
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
-
High 7.1CVE-2025-64720 Public exploit
LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read vulnerability exists in png_image_read_composite when proces…
-
High 7.1CVE-2025-65018 Public exploit
LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API functio…
-
Medium 6.1
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
-
Medium 4.8
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…