Red Hat Security Advisory

RHSA-2025:3848

java-11-openjdk ELS security update

Released 2025-04-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenJDK 11 ELS for RHEL 7 java-11-openjdk-1:11.0.27.0.6-1.el7_9, java-11-openjdk-debug-1:11.0.27.0.6-1.el7_9, java-11-openjdk-demo-1:11.0.27.0.6-1.el7_9 +15
Red Hat OpenJDK 11 ELS for RHEL 8 java-11-openjdk-1:11.0.27.0.6-1.el8, java-11-openjdk-demo-1:11.0.27.0.6-1.el8, java-11-openjdk-demo-fastdebug-1:11.0.27.0.6-1.el8 +20
Red Hat OpenJDK 11 ELS for RHEL 9 java-11-openjdk-1:11.0.27.0.6-1.el9, java-11-openjdk-demo-1:11.0.27.0.6-1.el9, java-11-openjdk-demo-fastdebug-1:11.0.27.0.6-1.el9 +20

TI-2025-15547 CVE-2025-21587 · GHSA-7f6c-8chx-2vm5

LOW 36

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00833 Published 2025-04-15 Partial fix CWE-284

TI-2025-21971 CVE-2025-30698 · GHSA-3fvx-r9r8-xq97

LOW 26

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).

CVSS 3.1MEDIUM 5.6 Network No auth No interaction EPSS 0.00627 Published 2025-04-15 Partial fix CWE-284

TI-2025-21964 CVE-2025-30691 · GHSA-qh4r-w9x4-6fq2

LOW 23

Vulnerability in Oracle Java SE (component: Compiler).

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00595 Published 2025-04-15 Partial fix CWE-284