Skip to content
OpenAdvisories
Medium ALSA-2025:18821 2 CVEs

Moderate: java-17-openjdk security update

Published Oct 22, 2025 · Updated Oct 29, 2026

Summary

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* JDK: Enhance Path Factories (CVE-2025-53066)
* JDK: Enhance Certificate Handling (CVE-2025-53057)

Bug Fix(es):

* Since the 8.8 release of AlmaLinuxand the 9.2 release of AlmaLinux OpenJDK 17 has used a single build repackaged for each major AlmaLinux release. With this release, this same build is now also used by the following older releases: 8.4, 8.6 and 9.0 (AlmaLinux-118788, AlmaLinux-118789, AlmaLinux-118792)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 46

ReleasePackageFixed in
AlmaLinux · 8 java-17-openjdk 1:17.0.17.0.10-1.el8
AlmaLinux · 8 java-17-openjdk-demo 1:17.0.17.0.10-1.el8
AlmaLinux · 8 java-17-openjdk-demo-fastdebug 1:17.0.17.0.10-1.el8
AlmaLinux · 8 java-17-openjdk-demo-slowdebug 1:17.0.17.0.10-1.el8
AlmaLinux · 8 java-17-openjdk-devel 1:17.0.17.0.10-1.el8
AlmaLinux · 8 java-17-openjdk-devel-fastdebug 1:17.0.17.0.10-1.el8
AlmaLinux · 8 java-17-openjdk-devel-slowdebug 1:17.0.17.0.10-1.el8
AlmaLinux · 8 java-17-openjdk-fastdebug 1:17.0.17.0.10-1.el8
AlmaLinux · 8 java-17-openjdk-headless 1:17.0.17.0.10-1.el8
AlmaLinux · 8 java-17-openjdk-headless-fastdebug 1:17.0.17.0.10-1.el8
AlmaLinux · 8 java-17-openjdk-headless-slowdebug 1:17.0.17.0.10-1.el8
AlmaLinux · 8 java-17-openjdk-javadoc 1:17.0.17.0.10-1.el8
AlmaLinux · 8 java-17-openjdk-javadoc-zip 1:17.0.17.0.10-1.el8
AlmaLinux · 8 java-17-openjdk-jmods 1:17.0.17.0.10-1.el8
AlmaLinux · 8 java-17-openjdk-jmods-fastdebug 1:17.0.17.0.10-1.el8
AlmaLinux · 8 java-17-openjdk-jmods-slowdebug 1:17.0.17.0.10-1.el8
AlmaLinux · 8 java-17-openjdk-slowdebug 1:17.0.17.0.10-1.el8
AlmaLinux · 8 java-17-openjdk-src 1:17.0.17.0.10-1.el8
AlmaLinux · 8 java-17-openjdk-src-fastdebug 1:17.0.17.0.10-1.el8
AlmaLinux · 8 java-17-openjdk-src-slowdebug 1:17.0.17.0.10-1.el8
AlmaLinux · 8 java-17-openjdk-static-libs 1:17.0.17.0.10-1.el8
AlmaLinux · 8 java-17-openjdk-static-libs-fastdebug 1:17.0.17.0.10-1.el8
AlmaLinux · 8 java-17-openjdk-static-libs-slowdebug 1:17.0.17.0.10-1.el8
AlmaLinux · 9 java-17-openjdk 1:17.0.17.0.10-1.el9.alma.1
AlmaLinux · 9 java-17-openjdk-demo 1:17.0.17.0.10-1.el9.alma.1
AlmaLinux · 9 java-17-openjdk-demo-fastdebug 1:17.0.17.0.10-1.el9.alma.1
AlmaLinux · 9 java-17-openjdk-demo-slowdebug 1:17.0.17.0.10-1.el9.alma.1
AlmaLinux · 9 java-17-openjdk-devel 1:17.0.17.0.10-1.el9.alma.1
AlmaLinux · 9 java-17-openjdk-devel-fastdebug 1:17.0.17.0.10-1.el9.alma.1
AlmaLinux · 9 java-17-openjdk-devel-slowdebug 1:17.0.17.0.10-1.el9.alma.1
AlmaLinux · 9 java-17-openjdk-fastdebug 1:17.0.17.0.10-1.el9.alma.1
AlmaLinux · 9 java-17-openjdk-headless 1:17.0.17.0.10-1.el9.alma.1
AlmaLinux · 9 java-17-openjdk-headless-fastdebug 1:17.0.17.0.10-1.el9.alma.1
AlmaLinux · 9 java-17-openjdk-headless-slowdebug 1:17.0.17.0.10-1.el9.alma.1
AlmaLinux · 9 java-17-openjdk-javadoc 1:17.0.17.0.10-1.el9.alma.1
AlmaLinux · 9 java-17-openjdk-javadoc-zip 1:17.0.17.0.10-1.el9.alma.1
AlmaLinux · 9 java-17-openjdk-jmods 1:17.0.17.0.10-1.el9.alma.1
AlmaLinux · 9 java-17-openjdk-jmods-fastdebug 1:17.0.17.0.10-1.el9.alma.1
AlmaLinux · 9 java-17-openjdk-jmods-slowdebug 1:17.0.17.0.10-1.el9.alma.1
AlmaLinux · 9 java-17-openjdk-slowdebug 1:17.0.17.0.10-1.el9.alma.1
AlmaLinux · 9 java-17-openjdk-src 1:17.0.17.0.10-1.el9.alma.1
AlmaLinux · 9 java-17-openjdk-src-fastdebug 1:17.0.17.0.10-1.el9.alma.1
AlmaLinux · 9 java-17-openjdk-src-slowdebug 1:17.0.17.0.10-1.el9.alma.1
AlmaLinux · 9 java-17-openjdk-static-libs 1:17.0.17.0.10-1.el9.alma.1
AlmaLinux · 9 java-17-openjdk-static-libs-fastdebug 1:17.0.17.0.10-1.el9.alma.1
AlmaLinux · 9 java-17-openjdk-static-libs-slowdebug 1:17.0.17.0.10-1.el9.alma.1

Vulnerabilities 2

References

  • report
    https://access.redhat.com/security/cve/CVE-2025-53057
  • report
    https://access.redhat.com/security/cve/CVE-2025-53066
  • advisory
    https://errata.almalinux.org/8/ALSA-2025-18821.html
  • advisory
    https://errata.almalinux.org/9/ALSA-2025-18821.html