elsa-2025-0422
oracle_linux[1:17.0.14.0.7-3.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:17.0.14.0.7-3] - Set rpmrelease to 3 - Revert 'Require tzdata-java 2024b at runtime and for build' [1:17.0.14.0.7-2] - Do not pass nil to _jvmdir macro in cjc logic - Related: RHEL-73867 [1:17.0.14.0.7-2] - Adapt to newest cjc to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Remove cjc backward compatibility, to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: rhbz#1953923 - Resolves: RHEL-73867 [1:17.0.14.0.7-2] - Update to jdk-17.0.14+7 (GA) - Add to .gitignore openjdk-17.0.14+7.tar.xz - Set buildver to 7 - Set is_ga to 1 - Update sources to openjdk-17.0.14+7.tar.xz - Require tzdata-java 2024b at runtime and for build - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Resolves: RHEL-73545 - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. ** [1:17.0.14.0.1-0.2.ea] - Limit Java only tests to one architecture using jdk_test_arch - OPENJDK-3185 [1:17.0.14.0.1-0.2.ea] - Update to jdk-17.0.14+1 (EA) - Add to .gitignore openjdk-17.0.14+1-ea.tar.xz - Set updatever to 14 - Set buildver to 1 - Set rpmrelease to 2 - Set is_ga to 0 - Update sources to openjdk-17.0.14+1-ea.tar.xz - Double percent signs consistently throughout comments - Set bundled giflib provide version to 5.2.2 - Set bundled libpng provide version to 1.6.43 - Warn about bundled provide version bumps and backouts in openjdk_news.sh - Remove 0001-8332174-Remove-2-unpaired-RLO-Unicode-characters-in-.patch file - Revert: Use component in EPEL and Fedora bug URLs
- Published
- unknown
- Last Modified
- unknown
CVSS details not available.
No product information available.
No references available.
No linked vulnerabilities found.
{
"cves": [
"CVE-2025-21502"
],
"cvss": 0.0,
"database_specific": {
"severity": "MODERATE"
},
"description": "[1:17.0.14.0.7-3.0.1]\n- Add Oracle vendor bug URL [Orabug: 34340155]\n\n[1:17.0.14.0.7-3]\n- Set rpmrelease to 3\n- Revert 'Require tzdata-java 2024b at runtime and for build'\n\n[1:17.0.14.0.7-2]\n- Do not pass nil to _jvmdir macro in cjc logic\n- Related: RHEL-73867\n\n[1:17.0.14.0.7-2]\n- Adapt to newest cjc to fix issue with rpm 4.17\n- Disable copy-jdk-configs for Flatpak builds\n- Remove cjc backward compatibility, to fix when both rpm 4.16 and 4.17 are in transaction\n- Resolves: rhbz#1953923\n- Resolves: RHEL-73867\n\n[1:17.0.14.0.7-2]\n- Update to jdk-17.0.14+7 (GA)\n- Add to .gitignore openjdk-17.0.14+7.tar.xz\n- Set buildver to 7\n- Set is_ga to 1\n- Update sources to openjdk-17.0.14+7.tar.xz\n- Require tzdata-java 2024b at runtime and for build\n- Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8\n- Resolves: RHEL-73545\n- ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **\n\n[1:17.0.14.0.1-0.2.ea]\n- Limit Java only tests to one architecture using jdk_test_arch\n- OPENJDK-3185\n\n[1:17.0.14.0.1-0.2.ea]\n- Update to jdk-17.0.14+1 (EA)\n- Add to .gitignore openjdk-17.0.14+1-ea.tar.xz\n- Set updatever to 14\n- Set buildver to 1\n- Set rpmrelease to 2\n- Set is_ga to 0\n- Update sources to openjdk-17.0.14+1-ea.tar.xz\n- Double percent signs consistently throughout comments\n- Set bundled giflib provide version to 5.2.2\n- Set bundled libpng provide version to 1.6.43\n- Warn about bundled provide version bumps and backouts in openjdk_news.sh\n- Remove 0001-8332174-Remove-2-unpaired-RLO-Unicode-characters-in-.patch file\n- Revert: Use component in EPEL and Fedora bug URLs",
"id": "ELSA-2025-0422",
"ovalId": "oval:com.oracle.elsa:def:20250422",
"source": "oracle_linux",
"title": "ELSA-2025-0422: java-17-openjdk security update for RHEL 8.6, 8.8, 8.10, 9.4 and 9.5 (MODERATE)",
"url": "https://linux.oracle.com/errata/ELSA-2025-0422.html"
}