Red Hat Security Advisory

RHSA-2025:10873

java-21-openjdk security update

Released 2025-07-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.4) java-21-openjdk-demo-fastdebug-1:21.0.8.0.9-1.el9, java-21-openjdk-demo-slowdebug-1:21.0.8.0.9-1.el9, java-21-openjdk-devel-fastdebug-1:21.0.8.0.9-1.el9 +11
Red Hat Enterprise Linux AppStream (v. 10) java-21-openjdk-1:21.0.8.0.9-1.el10, java-21-openjdk-demo-1:21.0.8.0.9-1.el10, java-21-openjdk-devel-1:21.0.8.0.9-1.el10 +6
Red Hat Enterprise Linux AppStream (v. 8) java-21-openjdk-1:21.0.8.0.9-1.el8, java-21-openjdk-demo-1:21.0.8.0.9-1.el8, java-21-openjdk-devel-1:21.0.8.0.9-1.el8 +6
Red Hat Enterprise Linux AppStream (v. 9) java-21-openjdk-1:21.0.8.0.9-1.el9, java-21-openjdk-demo-1:21.0.8.0.9-1.el9, java-21-openjdk-devel-1:21.0.8.0.9-1.el9 +6
Red Hat Enterprise Linux AppStream EUS (v.9.4) java-21-openjdk-1:21.0.8.0.9-1.el9, java-21-openjdk-demo-1:21.0.8.0.9-1.el9, java-21-openjdk-devel-1:21.0.8.0.9-1.el9 +6
Red Hat Enterprise Linux CRB (v. 8) java-21-openjdk-demo-fastdebug-1:21.0.8.0.9-1.el8, java-21-openjdk-demo-slowdebug-1:21.0.8.0.9-1.el8, java-21-openjdk-devel-fastdebug-1:21.0.8.0.9-1.el8 +11
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) java-21-openjdk-demo-fastdebug-1:21.0.8.0.9-1.el10, java-21-openjdk-demo-slowdebug-1:21.0.8.0.9-1.el10, java-21-openjdk-devel-fastdebug-1:21.0.8.0.9-1.el10 +11
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) java-21-openjdk-demo-fastdebug-1:21.0.8.0.9-1.el9, java-21-openjdk-demo-slowdebug-1:21.0.8.0.9-1.el9, java-21-openjdk-devel-fastdebug-1:21.0.8.0.9-1.el9 +11

TI-2025-31972 CVE-2025-50059 · GHSA-wpm9-mhxc-7hwj

MEDIUM 44

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00615 Published 2025-07-15 Partial fix CWE-284

TI-2025-22020 CVE-2025-30749 · GHSA-3v8g-f9px-h942

MEDIUM 40

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0127 Published 2025-07-15 Partial fix

TI-2025-32019 CVE-2025-50106 · GHSA-328q-mjp3-hwmg

LOW 39

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00751 Published 2025-07-15 Partial fix

TI-2025-22025 CVE-2025-30754 · GHSA-9rrx-gj5v-f29x

LOW 23

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00475 Published 2025-07-15 Partial fix CWE-284