Skip to content
OpenAdvisories
Medium ALSA-2025:0422 1 CVE

Moderate: java-17-openjdk security update for AlmaLinux 8.6, 8.8, 8.10, 9.4 and 9.5

Published Jan 22, 2025 · Updated Oct 29, 2026

Summary

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* JDK: Enhance array handling (CVE-2025-21502)

Bug Fix(es):

* The AlmaLinux OpenJDK packages rely on the copy-jdk-configs package to transfer configuration files to a new updated JDK. With this update, the JDK has been updated to use the latest version of copy-jdk-configs, which has been used for some years on later AlmaLinux versions (AlmaLinux-73867, AlmaLinux-73871, AlmaLinux-73872).

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 46

ReleasePackageFixed in
AlmaLinux · 8 java-17-openjdk 1:17.0.14.0.7-3.el8
AlmaLinux · 8 java-17-openjdk-demo 1:17.0.14.0.7-3.el8
AlmaLinux · 8 java-17-openjdk-demo-fastdebug 1:17.0.14.0.7-3.el8
AlmaLinux · 8 java-17-openjdk-demo-slowdebug 1:17.0.14.0.7-3.el8
AlmaLinux · 8 java-17-openjdk-devel 1:17.0.14.0.7-3.el8
AlmaLinux · 8 java-17-openjdk-devel-fastdebug 1:17.0.14.0.7-3.el8
AlmaLinux · 8 java-17-openjdk-devel-slowdebug 1:17.0.14.0.7-3.el8
AlmaLinux · 8 java-17-openjdk-fastdebug 1:17.0.14.0.7-3.el8
AlmaLinux · 8 java-17-openjdk-headless 1:17.0.14.0.7-3.el8
AlmaLinux · 8 java-17-openjdk-headless-fastdebug 1:17.0.14.0.7-3.el8
AlmaLinux · 8 java-17-openjdk-headless-slowdebug 1:17.0.14.0.7-3.el8
AlmaLinux · 8 java-17-openjdk-javadoc 1:17.0.14.0.7-3.el8
AlmaLinux · 8 java-17-openjdk-javadoc-zip 1:17.0.14.0.7-3.el8
AlmaLinux · 8 java-17-openjdk-jmods 1:17.0.14.0.7-3.el8
AlmaLinux · 8 java-17-openjdk-jmods-fastdebug 1:17.0.14.0.7-3.el8
AlmaLinux · 8 java-17-openjdk-jmods-slowdebug 1:17.0.14.0.7-3.el8
AlmaLinux · 8 java-17-openjdk-slowdebug 1:17.0.14.0.7-3.el8
AlmaLinux · 8 java-17-openjdk-src 1:17.0.14.0.7-3.el8
AlmaLinux · 8 java-17-openjdk-src-fastdebug 1:17.0.14.0.7-3.el8
AlmaLinux · 8 java-17-openjdk-src-slowdebug 1:17.0.14.0.7-3.el8
AlmaLinux · 8 java-17-openjdk-static-libs 1:17.0.14.0.7-3.el8
AlmaLinux · 8 java-17-openjdk-static-libs-fastdebug 1:17.0.14.0.7-3.el8
AlmaLinux · 8 java-17-openjdk-static-libs-slowdebug 1:17.0.14.0.7-3.el8
AlmaLinux · 9 java-17-openjdk 1:17.0.14.0.7-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-demo 1:17.0.14.0.7-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-demo-fastdebug 1:17.0.14.0.7-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-demo-slowdebug 1:17.0.14.0.7-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-devel 1:17.0.14.0.7-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-devel-fastdebug 1:17.0.14.0.7-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-devel-slowdebug 1:17.0.14.0.7-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-fastdebug 1:17.0.14.0.7-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-headless 1:17.0.14.0.7-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-headless-fastdebug 1:17.0.14.0.7-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-headless-slowdebug 1:17.0.14.0.7-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-javadoc 1:17.0.14.0.7-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-javadoc-zip 1:17.0.14.0.7-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-jmods 1:17.0.14.0.7-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-jmods-fastdebug 1:17.0.14.0.7-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-jmods-slowdebug 1:17.0.14.0.7-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-slowdebug 1:17.0.14.0.7-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-src 1:17.0.14.0.7-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-src-fastdebug 1:17.0.14.0.7-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-src-slowdebug 1:17.0.14.0.7-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-static-libs 1:17.0.14.0.7-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-static-libs-fastdebug 1:17.0.14.0.7-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-static-libs-slowdebug 1:17.0.14.0.7-2.el9.alma.1

Vulnerabilities 1

References

  • report
    https://access.redhat.com/security/cve/CVE-2025-21502
  • advisory
    https://errata.almalinux.org/8/ALSA-2025-0422.html
  • advisory
    https://errata.almalinux.org/9/ALSA-2025-0422.html