ELSA-2025-18821

Опубликовано: 23 окт. 2025

Источник: oracle-oval

Платформа: Oracle Linux 8

Платформа: Oracle Linux 9

Описание

ELSA-2025-18821: java-17-openjdk security update (MODERATE)

[1:17.0.17.0.10-1.0.1]

Add Oracle vendor bug URL [Orabug: 34340155]

[1:17.0.17.0.10-1]

Update to jdk-17.0.17+10 (GA)
Add to .gitignore openjdk-17.0.17+10.tar.xz
Set buildver to 10
Set rpmrelease to 1, remove 'must start at 2' comment
Set is_ga to 1
Update sources to openjdk-17.0.17+10.tar.xz
Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
Resolves: RHEL-119449
** This tarball is embargoed until 2025-10-21 @ 1pm PT. **

[1:17.0.17.0.7-0.2.ea]

Update to jdk-17.0.17+7 (EA)
Add to .gitignore openjdk-17.0.17+7-ea.tar.xz
Set updatever to 17
Set buildver to 7
Set is_ga to 0
Update sources to openjdk-17.0.17+7-ea.tar.xz
Set bundled harfbuzz version to 11.2.0
Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

java-17-openjdk-demo-fastdebug

17.0.17.0.10-1.0.1.el8

java-17-openjdk-demo-slowdebug

17.0.17.0.10-1.0.1.el8

java-17-openjdk-devel-fastdebug

17.0.17.0.10-1.0.1.el8

java-17-openjdk-devel-slowdebug

17.0.17.0.10-1.0.1.el8

java-17-openjdk-fastdebug

17.0.17.0.10-1.0.1.el8

java-17-openjdk-headless-fastdebug

17.0.17.0.10-1.0.1.el8

java-17-openjdk-headless-slowdebug

17.0.17.0.10-1.0.1.el8

java-17-openjdk-jmods-fastdebug

17.0.17.0.10-1.0.1.el8

java-17-openjdk-jmods-slowdebug

17.0.17.0.10-1.0.1.el8

java-17-openjdk-slowdebug

17.0.17.0.10-1.0.1.el8

java-17-openjdk-src-fastdebug

17.0.17.0.10-1.0.1.el8

java-17-openjdk-src-slowdebug

17.0.17.0.10-1.0.1.el8

java-17-openjdk-static-libs-fastdebug

17.0.17.0.10-1.0.1.el8

java-17-openjdk-static-libs-slowdebug

17.0.17.0.10-1.0.1.el8

java-17-openjdk

17.0.17.0.10-1.0.1.el8

java-17-openjdk-demo

17.0.17.0.10-1.0.1.el8

java-17-openjdk-devel

17.0.17.0.10-1.0.1.el8

java-17-openjdk-headless

17.0.17.0.10-1.0.1.el8

java-17-openjdk-javadoc

17.0.17.0.10-1.0.1.el8

java-17-openjdk-javadoc-zip

17.0.17.0.10-1.0.1.el8

java-17-openjdk-jmods

17.0.17.0.10-1.0.1.el8

java-17-openjdk-src

17.0.17.0.10-1.0.1.el8

java-17-openjdk-static-libs

17.0.17.0.10-1.0.1.el8

Oracle Linux x86_64

java-17-openjdk-demo-fastdebug

17.0.17.0.10-1.0.1.el8

java-17-openjdk-demo-slowdebug

17.0.17.0.10-1.0.1.el8

java-17-openjdk-devel-fastdebug

17.0.17.0.10-1.0.1.el8

java-17-openjdk-devel-slowdebug

17.0.17.0.10-1.0.1.el8

java-17-openjdk-fastdebug

17.0.17.0.10-1.0.1.el8

java-17-openjdk-headless-fastdebug

17.0.17.0.10-1.0.1.el8

java-17-openjdk-headless-slowdebug

17.0.17.0.10-1.0.1.el8

java-17-openjdk-jmods-fastdebug

17.0.17.0.10-1.0.1.el8

java-17-openjdk-jmods-slowdebug

17.0.17.0.10-1.0.1.el8

java-17-openjdk-slowdebug

17.0.17.0.10-1.0.1.el8

java-17-openjdk-src-fastdebug

17.0.17.0.10-1.0.1.el8

java-17-openjdk-src-slowdebug

17.0.17.0.10-1.0.1.el8

java-17-openjdk-static-libs-fastdebug

17.0.17.0.10-1.0.1.el8

java-17-openjdk-static-libs-slowdebug

17.0.17.0.10-1.0.1.el8

java-17-openjdk

17.0.17.0.10-1.0.1.el8

java-17-openjdk-demo

17.0.17.0.10-1.0.1.el8

java-17-openjdk-devel

17.0.17.0.10-1.0.1.el8

java-17-openjdk-headless

17.0.17.0.10-1.0.1.el8

java-17-openjdk-javadoc

17.0.17.0.10-1.0.1.el8

java-17-openjdk-javadoc-zip

17.0.17.0.10-1.0.1.el8

java-17-openjdk-jmods

17.0.17.0.10-1.0.1.el8

java-17-openjdk-src

17.0.17.0.10-1.0.1.el8

java-17-openjdk-static-libs

17.0.17.0.10-1.0.1.el8

Oracle Linux 9

Oracle Linux aarch64

java-17-openjdk-demo-fastdebug

17.0.17.0.10-1.0.1.el9

java-17-openjdk-demo-slowdebug

17.0.17.0.10-1.0.1.el9

java-17-openjdk-devel-fastdebug

17.0.17.0.10-1.0.1.el9

java-17-openjdk-devel-slowdebug

17.0.17.0.10-1.0.1.el9

java-17-openjdk-fastdebug

17.0.17.0.10-1.0.1.el9

java-17-openjdk-headless-fastdebug

17.0.17.0.10-1.0.1.el9

java-17-openjdk-headless-slowdebug

17.0.17.0.10-1.0.1.el9

java-17-openjdk-jmods-fastdebug

17.0.17.0.10-1.0.1.el9

java-17-openjdk-jmods-slowdebug

17.0.17.0.10-1.0.1.el9

java-17-openjdk-slowdebug

17.0.17.0.10-1.0.1.el9

java-17-openjdk-src-fastdebug

17.0.17.0.10-1.0.1.el9

java-17-openjdk-src-slowdebug

17.0.17.0.10-1.0.1.el9

java-17-openjdk-static-libs-fastdebug

17.0.17.0.10-1.0.1.el9

java-17-openjdk-static-libs-slowdebug

17.0.17.0.10-1.0.1.el9

java-17-openjdk

17.0.17.0.10-1.0.1.el9

java-17-openjdk-demo

17.0.17.0.10-1.0.1.el9

java-17-openjdk-devel

17.0.17.0.10-1.0.1.el9

java-17-openjdk-headless

17.0.17.0.10-1.0.1.el9

java-17-openjdk-javadoc

17.0.17.0.10-1.0.1.el9

java-17-openjdk-javadoc-zip

17.0.17.0.10-1.0.1.el9

java-17-openjdk-jmods

17.0.17.0.10-1.0.1.el9

java-17-openjdk-src

17.0.17.0.10-1.0.1.el9

java-17-openjdk-static-libs

17.0.17.0.10-1.0.1.el9

Oracle Linux x86_64

java-17-openjdk

17.0.17.0.10-1.0.1.el9

java-17-openjdk-demo

17.0.17.0.10-1.0.1.el9

java-17-openjdk-devel

17.0.17.0.10-1.0.1.el9

java-17-openjdk-headless

17.0.17.0.10-1.0.1.el9

java-17-openjdk-javadoc

17.0.17.0.10-1.0.1.el9

java-17-openjdk-javadoc-zip

17.0.17.0.10-1.0.1.el9

java-17-openjdk-jmods

17.0.17.0.10-1.0.1.el9

java-17-openjdk-src

17.0.17.0.10-1.0.1.el9

java-17-openjdk-static-libs

17.0.17.0.10-1.0.1.el9

java-17-openjdk-demo-fastdebug

17.0.17.0.10-1.0.1.el9

java-17-openjdk-demo-slowdebug

17.0.17.0.10-1.0.1.el9

java-17-openjdk-devel-fastdebug

17.0.17.0.10-1.0.1.el9

java-17-openjdk-devel-slowdebug

17.0.17.0.10-1.0.1.el9

java-17-openjdk-fastdebug

17.0.17.0.10-1.0.1.el9

java-17-openjdk-headless-fastdebug

17.0.17.0.10-1.0.1.el9

java-17-openjdk-headless-slowdebug

17.0.17.0.10-1.0.1.el9

java-17-openjdk-jmods-fastdebug

17.0.17.0.10-1.0.1.el9

java-17-openjdk-jmods-slowdebug

17.0.17.0.10-1.0.1.el9

java-17-openjdk-slowdebug

17.0.17.0.10-1.0.1.el9

java-17-openjdk-src-fastdebug

17.0.17.0.10-1.0.1.el9

java-17-openjdk-src-slowdebug

17.0.17.0.10-1.0.1.el9

java-17-openjdk-static-libs-fastdebug

17.0.17.0.10-1.0.1.el9

java-17-openjdk-static-libs-slowdebug

17.0.17.0.10-1.0.1.el9

Связанные CVE

CVE-2025-53057

CVE-2025-53066

Ссылки на источники

Связанные уязвимости

SUSE-SU-2025:3835-1

suse-cvrf

10 дней назад

Security update for java-11-openjdk

ELSA-2025-18815

oracle-oval

15 дней назад

ELSA-2025-18815: java-1.8.0-openjdk security update (MODERATE)

SUSE-SU-2025:3859-1

suse-cvrf

9 дней назад

Security update for java-21-openjdk

ELSA-2025-18824

oracle-oval

15 дней назад

ELSA-2025-18824: java-21-openjdk security update (MODERATE)

CVE-2025-53066

CVSS3: 7.5

ubuntu

17 дней назад

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start ap...