Red Hat Security Advisory

RHSA-2025:10867

java-17-openjdk security update

Released 2025-07-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.4) java-17-openjdk-demo-fastdebug-1:17.0.16.0.8-2.el9, java-17-openjdk-demo-slowdebug-1:17.0.16.0.8-2.el9, java-17-openjdk-devel-fastdebug-1:17.0.16.0.8-2.el9 +11
Red Hat Enterprise Linux AppStream (v. 8) java-17-openjdk-1:17.0.16.0.8-2.el8, java-17-openjdk-demo-1:17.0.16.0.8-2.el8, java-17-openjdk-devel-1:17.0.16.0.8-2.el8 +6
Red Hat Enterprise Linux AppStream (v. 9) java-17-openjdk-1:17.0.16.0.8-2.el9, java-17-openjdk-demo-1:17.0.16.0.8-2.el9, java-17-openjdk-devel-1:17.0.16.0.8-2.el9 +6
Red Hat Enterprise Linux AppStream AUS (v.8.4) java-17-openjdk-1:17.0.16.0.8-1.el8_4, java-17-openjdk-demo-1:17.0.16.0.8-1.el8_4, java-17-openjdk-devel-1:17.0.16.0.8-1.el8_4 +6
Red Hat Enterprise Linux AppStream AUS (v.8.6) java-17-openjdk-1:17.0.16.0.8-1.el8_6, java-17-openjdk-demo-1:17.0.16.0.8-1.el8_6, java-17-openjdk-devel-1:17.0.16.0.8-1.el8_6 +6
Red Hat Enterprise Linux AppStream E4S (v.8.6) java-17-openjdk-1:17.0.16.0.8-1.el8_6, java-17-openjdk-demo-1:17.0.16.0.8-1.el8_6, java-17-openjdk-devel-1:17.0.16.0.8-1.el8_6 +6
Red Hat Enterprise Linux AppStream E4S (v.8.8) java-17-openjdk-1:17.0.16.0.8-2.el8, java-17-openjdk-demo-1:17.0.16.0.8-2.el8, java-17-openjdk-devel-1:17.0.16.0.8-2.el8 +6
Red Hat Enterprise Linux AppStream E4S (v.9.0) java-17-openjdk-1:17.0.16.0.8-1.el9_0, java-17-openjdk-demo-1:17.0.16.0.8-1.el9_0, java-17-openjdk-devel-1:17.0.16.0.8-1.el9_0 +6
Red Hat Enterprise Linux AppStream E4S (v.9.2) java-17-openjdk-1:17.0.16.0.8-2.el9, java-17-openjdk-demo-1:17.0.16.0.8-2.el9, java-17-openjdk-devel-1:17.0.16.0.8-2.el9 +6
Red Hat Enterprise Linux AppStream EUS (v.9.4) java-17-openjdk-1:17.0.16.0.8-2.el9, java-17-openjdk-demo-1:17.0.16.0.8-2.el9, java-17-openjdk-devel-1:17.0.16.0.8-2.el9 +6
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) java-17-openjdk-1:17.0.16.0.8-1.el8_4, java-17-openjdk-demo-1:17.0.16.0.8-1.el8_4, java-17-openjdk-demo-fastdebug-1:17.0.16.0.8-1.el8_4 +20
Red Hat Enterprise Linux AppStream TUS (v.8.6) java-17-openjdk-1:17.0.16.0.8-1.el8_6, java-17-openjdk-demo-1:17.0.16.0.8-1.el8_6, java-17-openjdk-devel-1:17.0.16.0.8-1.el8_6 +6
Red Hat Enterprise Linux AppStream TUS (v.8.8) java-17-openjdk-1:17.0.16.0.8-2.el8, java-17-openjdk-demo-1:17.0.16.0.8-2.el8, java-17-openjdk-devel-1:17.0.16.0.8-2.el8 +6
Red Hat Enterprise Linux CRB (v. 8) java-17-openjdk-demo-fastdebug-1:17.0.16.0.8-2.el8, java-17-openjdk-demo-slowdebug-1:17.0.16.0.8-2.el8, java-17-openjdk-devel-fastdebug-1:17.0.16.0.8-2.el8 +11
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) java-17-openjdk-demo-fastdebug-1:17.0.16.0.8-2.el9, java-17-openjdk-demo-slowdebug-1:17.0.16.0.8-2.el9, java-17-openjdk-devel-fastdebug-1:17.0.16.0.8-2.el9 +11

Fixes 4 records

TI-2025-31972 CVE-2025-50059 · GHSA-wpm9-mhxc-7hwj

Improper access control in Oracle Java SE

MEDIUM 44

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00615 Published 2025-07-15 Partial fix CWE-284

TI-2025-22020 CVE-2025-30749 · GHSA-3v8g-f9px-h942

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise…

MEDIUM 40

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0127 Published 2025-07-15 Partial fix

TI-2025-32019 CVE-2025-50106 · GHSA-328q-mjp3-hwmg

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise…

LOW 39

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00751 Published 2025-07-15 Partial fix

TI-2025-22025 CVE-2025-30754 · GHSA-9rrx-gj5v-f29x

Improper access control in Oracle Java SE

LOW 23

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00475 Published 2025-07-15 Partial fix CWE-284