Skip to content
OpenAdvisories
High ALSA-2025:10867 4 CVEs

Important: java-17-openjdk security update

Published Jul 15, 2025 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* JDK: Better Glyph drawing (CVE-2025-30749)
* JDK: Enhance TLS protocol support (CVE-2025-30754)
* JDK: Improve HTTP client header handling (CVE-2025-50059)
* JDK: Better Glyph drawing redux (CVE-2025-50106)

Bug Fix(es):

* In AlmaLinuxand AlmaLinux systems, the default graphical display system is Wayland. The use of Wayland in these systems causes a failure in the traditional X11 method that java.awt.Robot uses to take a screen capture, producing a blank image. With this update, the RPM now recommends installing the PipeWire package, which the JDK can use to take screen captures in Wayland systems (AlmaLinux-102668, AlmaLinux-102669, AlmaLinux-102670, AlmaLinux-102672)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 46

ReleasePackageFixed in
AlmaLinux · 8 java-17-openjdk 1:17.0.16.0.8-2.el8
AlmaLinux · 8 java-17-openjdk-demo 1:17.0.16.0.8-2.el8
AlmaLinux · 8 java-17-openjdk-demo-fastdebug 1:17.0.16.0.8-2.el8
AlmaLinux · 8 java-17-openjdk-demo-slowdebug 1:17.0.16.0.8-2.el8
AlmaLinux · 8 java-17-openjdk-devel 1:17.0.16.0.8-2.el8
AlmaLinux · 8 java-17-openjdk-devel-fastdebug 1:17.0.16.0.8-2.el8
AlmaLinux · 8 java-17-openjdk-devel-slowdebug 1:17.0.16.0.8-2.el8
AlmaLinux · 8 java-17-openjdk-fastdebug 1:17.0.16.0.8-2.el8
AlmaLinux · 8 java-17-openjdk-headless 1:17.0.16.0.8-2.el8
AlmaLinux · 8 java-17-openjdk-headless-fastdebug 1:17.0.16.0.8-2.el8
AlmaLinux · 8 java-17-openjdk-headless-slowdebug 1:17.0.16.0.8-2.el8
AlmaLinux · 8 java-17-openjdk-javadoc 1:17.0.16.0.8-2.el8
AlmaLinux · 8 java-17-openjdk-javadoc-zip 1:17.0.16.0.8-2.el8
AlmaLinux · 8 java-17-openjdk-jmods 1:17.0.16.0.8-2.el8
AlmaLinux · 8 java-17-openjdk-jmods-fastdebug 1:17.0.16.0.8-2.el8
AlmaLinux · 8 java-17-openjdk-jmods-slowdebug 1:17.0.16.0.8-2.el8
AlmaLinux · 8 java-17-openjdk-slowdebug 1:17.0.16.0.8-2.el8
AlmaLinux · 8 java-17-openjdk-src 1:17.0.16.0.8-2.el8
AlmaLinux · 8 java-17-openjdk-src-fastdebug 1:17.0.16.0.8-2.el8
AlmaLinux · 8 java-17-openjdk-src-slowdebug 1:17.0.16.0.8-2.el8
AlmaLinux · 8 java-17-openjdk-static-libs 1:17.0.16.0.8-2.el8
AlmaLinux · 8 java-17-openjdk-static-libs-fastdebug 1:17.0.16.0.8-2.el8
AlmaLinux · 8 java-17-openjdk-static-libs-slowdebug 1:17.0.16.0.8-2.el8
AlmaLinux · 9 java-17-openjdk 1:17.0.16.0.8-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-demo 1:17.0.16.0.8-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-demo-fastdebug 1:17.0.16.0.8-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-demo-slowdebug 1:17.0.16.0.8-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-devel 1:17.0.16.0.8-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-devel-fastdebug 1:17.0.16.0.8-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-devel-slowdebug 1:17.0.16.0.8-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-fastdebug 1:17.0.16.0.8-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-headless 1:17.0.16.0.8-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-headless-fastdebug 1:17.0.16.0.8-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-headless-slowdebug 1:17.0.16.0.8-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-javadoc 1:17.0.16.0.8-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-javadoc-zip 1:17.0.16.0.8-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-jmods 1:17.0.16.0.8-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-jmods-fastdebug 1:17.0.16.0.8-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-jmods-slowdebug 1:17.0.16.0.8-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-slowdebug 1:17.0.16.0.8-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-src 1:17.0.16.0.8-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-src-fastdebug 1:17.0.16.0.8-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-src-slowdebug 1:17.0.16.0.8-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-static-libs 1:17.0.16.0.8-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-static-libs-fastdebug 1:17.0.16.0.8-2.el9.alma.1
AlmaLinux · 9 java-17-openjdk-static-libs-slowdebug 1:17.0.16.0.8-2.el9.alma.1

Vulnerabilities 4

References

  • report
    https://access.redhat.com/security/cve/CVE-2025-30749
  • report
    https://access.redhat.com/security/cve/CVE-2025-30754
  • report
    https://access.redhat.com/security/cve/CVE-2025-50059
  • report
    https://access.redhat.com/security/cve/CVE-2025-50106
  • advisory
    https://errata.almalinux.org/8/ALSA-2025-10867.html
  • advisory
    https://errata.almalinux.org/9/ALSA-2025-10867.html