Red Hat Security Advisory

RHSA-2025:18824

java-21-openjdk security update

Released 2025-10-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.4) java-21-openjdk-demo-fastdebug-1:21.0.9.0.10-1.el9, java-21-openjdk-demo-slowdebug-1:21.0.9.0.10-1.el9, java-21-openjdk-devel-fastdebug-1:21.0.9.0.10-1.el9 +11
Red Hat Enterprise Linux AppStream (v. 10) java-21-openjdk-1:21.0.9.0.10-1.el10, java-21-openjdk-demo-1:21.0.9.0.10-1.el10, java-21-openjdk-devel-1:21.0.9.0.10-1.el10 +6
Red Hat Enterprise Linux AppStream (v. 8) java-21-openjdk-1:21.0.9.0.10-1.el8, java-21-openjdk-demo-1:21.0.9.0.10-1.el8, java-21-openjdk-devel-1:21.0.9.0.10-1.el8 +6
Red Hat Enterprise Linux AppStream (v. 9) java-21-openjdk-1:21.0.9.0.10-1.el9, java-21-openjdk-demo-1:21.0.9.0.10-1.el9, java-21-openjdk-devel-1:21.0.9.0.10-1.el9 +6
Red Hat Enterprise Linux AppStream EUS (v.9.4) java-21-openjdk-1:21.0.9.0.10-1.el9, java-21-openjdk-demo-1:21.0.9.0.10-1.el9, java-21-openjdk-devel-1:21.0.9.0.10-1.el9 +6
Red Hat Enterprise Linux CRB (v. 8) java-21-openjdk-demo-fastdebug-1:21.0.9.0.10-1.el8, java-21-openjdk-demo-slowdebug-1:21.0.9.0.10-1.el8, java-21-openjdk-devel-fastdebug-1:21.0.9.0.10-1.el8 +11
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) java-21-openjdk-demo-fastdebug-1:21.0.9.0.10-1.el10, java-21-openjdk-demo-slowdebug-1:21.0.9.0.10-1.el10, java-21-openjdk-devel-fastdebug-1:21.0.9.0.10-1.el10 +11
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) java-21-openjdk-demo-fastdebug-1:21.0.9.0.10-1.el9, java-21-openjdk-demo-slowdebug-1:21.0.9.0.10-1.el9, java-21-openjdk-devel-fastdebug-1:21.0.9.0.10-1.el9 +11

Fixes 3 records

TI-2025-33065 CVE-2025-53066 · GHSA-9v5j-pxpg-qprp

Information disclosure in Oracle Java SE

LOW 34

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00694 Published 2025-10-21 Partial fix CWE-200

TI-2025-33056 CVE-2025-53057 · GHSA-5ccw-23gm-2h2f

Improper access control in Oracle Java SE

LOW 27

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00534 Published 2025-10-21 Partial fix CWE-284

TI-2025-38142 CVE-2025-61748 · GHSA-6ch4-24w6-v6jv

Improper access control in Oracle Java SE

LOW 18

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00389 Published 2025-10-21 Fixed CWE-284