{"cves":["CVE-2025-21502"],"cvss":0.0,"database_specific":{"severity":"MODERATE"},"description":"[1:17.0.14.0.7-3.0.1]\n- Add Oracle vendor bug URL [Orabug: 34340155]\n\n[1:17.0.14.0.7-3]\n- Set rpmrelease to 3\n- Revert 'Require tzdata-java 2024b at runtime and for build'\n\n[1:17.0.14.0.7-2]\n- Do not pass nil to _jvmdir macro in cjc logic\n- Related: RHEL-73867\n\n[1:17.0.14.0.7-2]\n- Adapt to newest cjc to fix issue with rpm 4.17\n- Disable copy-jdk-configs for Flatpak builds\n- Remove cjc backward compatibility, to fix when both rpm 4.16 and 4.17 are in transaction\n- Resolves: rhbz#1953923\n- Resolves: RHEL-73867\n\n[1:17.0.14.0.7-2]\n- Update to jdk-17.0.14+7 (GA)\n- Add to .gitignore openjdk-17.0.14+7.tar.xz\n- Set buildver to 7\n- Set is_ga to 1\n- Update sources to openjdk-17.0.14+7.tar.xz\n- Require tzdata-java 2024b at runtime and for build\n- Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8\n- Resolves: RHEL-73545\n- ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **\n\n[1:17.0.14.0.1-0.2.ea]\n- Limit Java only tests to one architecture using jdk_test_arch\n- OPENJDK-3185\n\n[1:17.0.14.0.1-0.2.ea]\n- Update to jdk-17.0.14+1 (EA)\n- Add to .gitignore openjdk-17.0.14+1-ea.tar.xz\n- Set updatever to 14\n- Set buildver to 1\n- Set rpmrelease to 2\n- Set is_ga to 0\n- Update sources to openjdk-17.0.14+1-ea.tar.xz\n- Double percent signs consistently throughout comments\n- Set bundled giflib provide version to 5.2.2\n- Set bundled libpng provide version to 1.6.43\n- Warn about bundled provide version bumps and backouts in openjdk_news.sh\n- Remove 0001-8332174-Remove-2-unpaired-RLO-Unicode-characters-in-.patch file\n- Revert: Use component in EPEL and Fedora bug URLs","id":"ELSA-2025-0422","ovalId":"oval:com.oracle.elsa:def:20250422","source":"oracle_linux","title":"ELSA-2025-0422:  java-17-openjdk security update for RHEL 8.6, 8.8, 8.10, 9.4 and 9.5 (MODERATE)","url":"https://linux.oracle.com/errata/ELSA-2025-0422.html"}