{"cves":["CVE-2026-22007","CVE-2026-22013","CVE-2026-22016","CVE-2026-22018","CVE-2026-22021","CVE-2026-23865","CVE-2026-34268","CVE-2026-34282"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[1:17.0.19.0.10-1.0.1]\n- Add Oracle vendor bug URL [Orabug: 34340155]\n\n[1:17.0.19.0.10-1]\n- Update to jdk-17.0.19+10 (GA)\n- Add to .gitignore openjdk-17.0.19+10.tar.xz\n- Set updatever to 19\n- Set buildver to 10\n- Set rpmrelease to 1\n- Update sources to openjdk-17.0.19+10.tar.xz\n- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **\n- Set tzdata requires and build requires to 2026a\n- Set bundled freetype library version to 2.14.2\n- Set bundled giflib library version to 6.1.2\n- Set bundled harfbuzz library version to 12.3.2\n- Set bundled libpng library version to 1.6.57\n- Set bundled zlib library version to 1.3.2\n- Set fipsver to e1780dd5d39\n- Set fipsver to 62c0f885e30\n- Sync NEWS from openjdk-portable-rhel-8\n- Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8\n- Resolves: RHEL-133224\n- Resolves: RHEL-146657\n- Resolves: RHEL-148336\n- Resolves: RHEL-148850\n- Resolves: RHEL-161226\n- Resolves: RHEL-161342\n- Resolves: RHEL-157099\n- Resolves: RHEL-157153\n- Resolves: RHEL-157160","id":"ELSA-2026-9686","ovalId":"oval:com.oracle.elsa:def:20269686","source":"oracle_linux","title":"ELSA-2026-9686:  java-17-openjdk security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2026-9686.html"}