elsa-2026-42887

oracle_linux
Description

[1:17.0.20.0.8-1.1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:17.0.20.0.8-1.1] - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Add .0 to prelease [1:17.0.20.0.8-1.1] - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla [1:17.0.20.0.8-1.1] - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 [1:17.0.20.0.8-1.1] - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) [1:17.0.20.0.8-1] - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188876

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": [
    "CVE-2026-41254",
    "CVE-2026-46917",
    "CVE-2026-46968",
    "CVE-2026-47010",
    "CVE-2026-47021",
    "CVE-2026-47027",
    "CVE-2026-47059",
    "CVE-2026-47063",
    "CVE-2026-60147"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[1:17.0.20.0.8-1.1.0.1]\n- Add Oracle vendor bug URL [Orabug: 34340155]\n\n[1:17.0.20.0.8-1.1]\n- Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8\n- Add .0 to prelease\n\n[1:17.0.20.0.8-1.1]\n- Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla\n\n[1:17.0.20.0.8-1.1]\n- Set tzdata requires and build requires to 2026b\n- Set fipsver to 821eb26f706\n- Delete comments about patch macro syntax\n- Set bundled freetype version to 2.14.3\n- Set bundled giflib version to 6.1.3\n- Set bundled harfbuzz version to 14.2.0\n- Set bundled lcms2 version to 2.19.1\n- Set bundled libpng version to 1.6.58\n\n[1:17.0.20.0.8-1.1]\n- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876)\n\n[1:17.0.20.0.8-1]\n- Update to jdk-17.0.20+8 (GA)\n- Add to .gitignore openjdk-17.0.20+8.tar.xz\n- Set updatever to 20\n- Set buildver to 8\n- Update sources to openjdk-17.0.20+8.tar.xz\n- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **\n- Resolves: RHEL-188876",
  "id": "ELSA-2026-42887",
  "ovalId": "oval:com.oracle.elsa:def:202642887",
  "source": "oracle_linux",
  "title": "ELSA-2026-42887:  java-17-openjdk security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-42887.html"
}
View JSON API Download JSON