Red Hat Security AdvisoryRHSA-2025:3845
java-1.8.0-openjdk security update
Released 2025-04-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 9) java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-2.el9, java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-2.el9, java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-2.el9 +7
- Red Hat CodeReady Linux Builder EUS (v.8.8) java-1.8.0-openjdk-accessibility-fastdebug-1:1.8.0.452.b09-2.el8, java-1.8.0-openjdk-accessibility-slowdebug-1:1.8.0.452.b09-2.el8, java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-2.el8 +9
- Red Hat CodeReady Linux Builder EUS (v.9.2) java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-2.el9, java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-2.el9, java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-2.el9 +7
- Red Hat CodeReady Linux Builder EUS (v.9.4) java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-2.el9, java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-2.el9, java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-2.el9 +7
- Red Hat Enterprise Linux AppStream (v. 8) java-1.8.0-openjdk-1:1.8.0.452.b09-2.el8, java-1.8.0-openjdk-accessibility-1:1.8.0.452.b09-2.el8, java-1.8.0-openjdk-demo-1:1.8.0.452.b09-2.el8 +5
- Red Hat Enterprise Linux AppStream (v. 9) java-1.8.0-openjdk-1:1.8.0.452.b09-2.el9, java-1.8.0-openjdk-demo-1:1.8.0.452.b09-2.el9, java-1.8.0-openjdk-devel-1:1.8.0.452.b09-2.el9 +4
- Red Hat Enterprise Linux AppStream AUS (v. 8.2) java-1.8.0-openjdk-1:1.8.0.452.b09-1.el8_2, java-1.8.0-openjdk-accessibility-1:1.8.0.452.b09-1.el8_2, java-1.8.0-openjdk-demo-1:1.8.0.452.b09-1.el8_2 +5
- Red Hat Enterprise Linux AppStream AUS (v.8.4) java-1.8.0-openjdk-1:1.8.0.452.b09-1.el8_4, java-1.8.0-openjdk-accessibility-1:1.8.0.452.b09-1.el8_4, java-1.8.0-openjdk-demo-1:1.8.0.452.b09-1.el8_4 +5
- Red Hat Enterprise Linux AppStream AUS (v.8.6) java-1.8.0-openjdk-1:1.8.0.452.b09-1.el8_6, java-1.8.0-openjdk-accessibility-1:1.8.0.452.b09-1.el8_6, java-1.8.0-openjdk-demo-1:1.8.0.452.b09-1.el8_6 +5
- Red Hat Enterprise Linux AppStream E4S (v.8.4) java-1.8.0-openjdk-1:1.8.0.452.b09-1.el8_4, java-1.8.0-openjdk-accessibility-1:1.8.0.452.b09-1.el8_4, java-1.8.0-openjdk-demo-1:1.8.0.452.b09-1.el8_4 +5
- Red Hat Enterprise Linux AppStream E4S (v.8.6) java-1.8.0-openjdk-1:1.8.0.452.b09-1.el8_6, java-1.8.0-openjdk-accessibility-1:1.8.0.452.b09-1.el8_6, java-1.8.0-openjdk-demo-1:1.8.0.452.b09-1.el8_6 +5
- Red Hat Enterprise Linux AppStream E4S (v.9.0) java-1.8.0-openjdk-1:1.8.0.452.b09-1.el9_0, java-1.8.0-openjdk-demo-1:1.8.0.452.b09-1.el9_0, java-1.8.0-openjdk-devel-1:1.8.0.452.b09-1.el9_0 +4
- Red Hat Enterprise Linux AppStream EUS (v.8.8) java-1.8.0-openjdk-1:1.8.0.452.b09-2.el8, java-1.8.0-openjdk-accessibility-1:1.8.0.452.b09-2.el8, java-1.8.0-openjdk-demo-1:1.8.0.452.b09-2.el8 +5
- Red Hat Enterprise Linux AppStream EUS (v.9.2) java-1.8.0-openjdk-1:1.8.0.452.b09-2.el9, java-1.8.0-openjdk-demo-1:1.8.0.452.b09-2.el9, java-1.8.0-openjdk-devel-1:1.8.0.452.b09-2.el9 +4
- Red Hat Enterprise Linux AppStream EUS (v.9.4) java-1.8.0-openjdk-1:1.8.0.452.b09-2.el9, java-1.8.0-openjdk-demo-1:1.8.0.452.b09-2.el9, java-1.8.0-openjdk-devel-1:1.8.0.452.b09-2.el9 +4
- Red Hat Enterprise Linux AppStream TUS (v.8.4) java-1.8.0-openjdk-1:1.8.0.452.b09-1.el8_4, java-1.8.0-openjdk-accessibility-1:1.8.0.452.b09-1.el8_4, java-1.8.0-openjdk-demo-1:1.8.0.452.b09-1.el8_4 +5
- Red Hat Enterprise Linux AppStream TUS (v.8.6) java-1.8.0-openjdk-1:1.8.0.452.b09-1.el8_6, java-1.8.0-openjdk-accessibility-1:1.8.0.452.b09-1.el8_6, java-1.8.0-openjdk-demo-1:1.8.0.452.b09-1.el8_6 +5
- Red Hat Enterprise Linux CRB (v. 8) java-1.8.0-openjdk-accessibility-fastdebug-1:1.8.0.452.b09-2.el8, java-1.8.0-openjdk-accessibility-slowdebug-1:1.8.0.452.b09-2.el8, java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-2.el8 +9
Fixes 3 records
Priority LOW 36
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00833 · Published 2025-04-15 · Partial fix CWE-284
Priority LOW 26
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).
CVSS 3.1MEDIUM 5.6· Network · No auth · No interaction · EPSS 0.00627 · Published 2025-04-15 · Partial fix CWE-284
Priority LOW 23
Vulnerability in Oracle Java SE (component: Compiler).
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.00595 · Published 2025-04-15 · Partial fix CWE-284
