Summary
The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.
Security Fix(es):
* JDK: Better TLS connection support (CVE-2025-21587)
* JDK: Improve compiler transformations (CVE-2025-30691)
* JDK: Enhance Buffered Image handling (CVE-2025-30698)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 46
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | java-17-openjdk | 1:17.0.15.0.6-2.el8 |
| AlmaLinux · 8 | java-17-openjdk-demo | 1:17.0.15.0.6-2.el8 |
| AlmaLinux · 8 | java-17-openjdk-demo-fastdebug | 1:17.0.15.0.6-2.el8 |
| AlmaLinux · 8 | java-17-openjdk-demo-slowdebug | 1:17.0.15.0.6-2.el8 |
| AlmaLinux · 8 | java-17-openjdk-devel | 1:17.0.15.0.6-2.el8 |
| AlmaLinux · 8 | java-17-openjdk-devel-fastdebug | 1:17.0.15.0.6-2.el8 |
| AlmaLinux · 8 | java-17-openjdk-devel-slowdebug | 1:17.0.15.0.6-2.el8 |
| AlmaLinux · 8 | java-17-openjdk-fastdebug | 1:17.0.15.0.6-2.el8 |
| AlmaLinux · 8 | java-17-openjdk-headless | 1:17.0.15.0.6-2.el8 |
| AlmaLinux · 8 | java-17-openjdk-headless-fastdebug | 1:17.0.15.0.6-2.el8 |
| AlmaLinux · 8 | java-17-openjdk-headless-slowdebug | 1:17.0.15.0.6-2.el8 |
| AlmaLinux · 8 | java-17-openjdk-javadoc | 1:17.0.15.0.6-2.el8 |
| AlmaLinux · 8 | java-17-openjdk-javadoc-zip | 1:17.0.15.0.6-2.el8 |
| AlmaLinux · 8 | java-17-openjdk-jmods | 1:17.0.15.0.6-2.el8 |
| AlmaLinux · 8 | java-17-openjdk-jmods-fastdebug | 1:17.0.15.0.6-2.el8 |
| AlmaLinux · 8 | java-17-openjdk-jmods-slowdebug | 1:17.0.15.0.6-2.el8 |
| AlmaLinux · 8 | java-17-openjdk-slowdebug | 1:17.0.15.0.6-2.el8 |
| AlmaLinux · 8 | java-17-openjdk-src | 1:17.0.15.0.6-2.el8 |
| AlmaLinux · 8 | java-17-openjdk-src-fastdebug | 1:17.0.15.0.6-2.el8 |
| AlmaLinux · 8 | java-17-openjdk-src-slowdebug | 1:17.0.15.0.6-2.el8 |
| AlmaLinux · 8 | java-17-openjdk-static-libs | 1:17.0.15.0.6-2.el8 |
| AlmaLinux · 8 | java-17-openjdk-static-libs-fastdebug | 1:17.0.15.0.6-2.el8 |
| AlmaLinux · 8 | java-17-openjdk-static-libs-slowdebug | 1:17.0.15.0.6-2.el8 |
| AlmaLinux · 9 | java-17-openjdk | 1:17.0.15.0.6-2.el9.alma.1 |
| AlmaLinux · 9 | java-17-openjdk-demo | 1:17.0.15.0.6-2.el9.alma.1 |
| AlmaLinux · 9 | java-17-openjdk-demo-fastdebug | 1:17.0.15.0.6-2.el9.alma.1 |
| AlmaLinux · 9 | java-17-openjdk-demo-slowdebug | 1:17.0.15.0.6-2.el9.alma.1 |
| AlmaLinux · 9 | java-17-openjdk-devel | 1:17.0.15.0.6-2.el9.alma.1 |
| AlmaLinux · 9 | java-17-openjdk-devel-fastdebug | 1:17.0.15.0.6-2.el9.alma.1 |
| AlmaLinux · 9 | java-17-openjdk-devel-slowdebug | 1:17.0.15.0.6-2.el9.alma.1 |
| AlmaLinux · 9 | java-17-openjdk-fastdebug | 1:17.0.15.0.6-2.el9.alma.1 |
| AlmaLinux · 9 | java-17-openjdk-headless | 1:17.0.15.0.6-2.el9.alma.1 |
| AlmaLinux · 9 | java-17-openjdk-headless-fastdebug | 1:17.0.15.0.6-2.el9.alma.1 |
| AlmaLinux · 9 | java-17-openjdk-headless-slowdebug | 1:17.0.15.0.6-2.el9.alma.1 |
| AlmaLinux · 9 | java-17-openjdk-javadoc | 1:17.0.15.0.6-2.el9.alma.1 |
| AlmaLinux · 9 | java-17-openjdk-javadoc-zip | 1:17.0.15.0.6-2.el9.alma.1 |
| AlmaLinux · 9 | java-17-openjdk-jmods | 1:17.0.15.0.6-2.el9.alma.1 |
| AlmaLinux · 9 | java-17-openjdk-jmods-fastdebug | 1:17.0.15.0.6-2.el9.alma.1 |
| AlmaLinux · 9 | java-17-openjdk-jmods-slowdebug | 1:17.0.15.0.6-2.el9.alma.1 |
| AlmaLinux · 9 | java-17-openjdk-slowdebug | 1:17.0.15.0.6-2.el9.alma.1 |
| AlmaLinux · 9 | java-17-openjdk-src | 1:17.0.15.0.6-2.el9.alma.1 |
| AlmaLinux · 9 | java-17-openjdk-src-fastdebug | 1:17.0.15.0.6-2.el9.alma.1 |
| AlmaLinux · 9 | java-17-openjdk-src-slowdebug | 1:17.0.15.0.6-2.el9.alma.1 |
| AlmaLinux · 9 | java-17-openjdk-static-libs | 1:17.0.15.0.6-2.el9.alma.1 |
| AlmaLinux · 9 | java-17-openjdk-static-libs-fastdebug | 1:17.0.15.0.6-2.el9.alma.1 |
| AlmaLinux · 9 | java-17-openjdk-static-libs-slowdebug | 1:17.0.15.0.6-2.el9.alma.1 |
Vulnerabilities 3
-
High 7.4
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
-
Medium 5.6
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
-
Medium 4.8
Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 21.0.6,…
References
-
report
https://access.redhat.com/security/cve/CVE-2025-21587
-
report
https://access.redhat.com/security/cve/CVE-2025-30691
-
report
https://access.redhat.com/security/cve/CVE-2025-30698
-
advisory
https://errata.almalinux.org/8/ALSA-2025-3852.html
-
advisory
https://errata.almalinux.org/9/ALSA-2025-3852.html