Red Hat Security Advisory

RHSA-2025:10865

java-11-openjdk ELS security update

Released 2025-07-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenJDK 11 ELS for RHEL 7 java-11-openjdk-1:11.0.28.0.6-1.el7_9, java-11-openjdk-debug-1:11.0.28.0.6-1.el7_9, java-11-openjdk-demo-1:11.0.28.0.6-1.el7_9 +15
Red Hat OpenJDK 11 ELS for RHEL 8 java-11-openjdk-1:11.0.28.0.6-1.el8, java-11-openjdk-demo-1:11.0.28.0.6-1.el8, java-11-openjdk-demo-fastdebug-1:11.0.28.0.6-1.el8 +20
Red Hat OpenJDK 11 ELS for RHEL 9 java-11-openjdk-1:11.0.28.0.6-1.el9, java-11-openjdk-demo-1:11.0.28.0.6-1.el9, java-11-openjdk-demo-fastdebug-1:11.0.28.0.6-1.el9 +20

TI-2025-31972 CVE-2025-50059 · GHSA-wpm9-mhxc-7hwj

MEDIUM 44

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00615 Published 2025-07-15 Partial fix CWE-284

TI-2025-22020 CVE-2025-30749 · GHSA-3v8g-f9px-h942

MEDIUM 40

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0127 Published 2025-07-15 Partial fix

TI-2025-32019 CVE-2025-50106 · GHSA-328q-mjp3-hwmg

LOW 39

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00751 Published 2025-07-15 Partial fix

TI-2025-22031 CVE-2025-30761 · GHSA-4qjg-x4v4-w4j9

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0523 Published 2025-07-15 Partial fix CWE-502

TI-2025-22025 CVE-2025-30754 · GHSA-9rrx-gj5v-f29x

LOW 23

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00475 Published 2025-07-15 Partial fix CWE-284