Summary
The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit.
Security Fix(es):
* JDK: Improve Resource Resolving (CVE-2026-60589)
* JDK: Enhance HTTP Connections (CVE-2026-61308)
* JDK: Improve font loading (CVE-2026-70906)
* JDK: Enhance TLS server (CVE-2026-70907)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 52
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 10 | java-25-openjdk | 1:25.0.4.1.1-1.1.el10.alma.1 |
| AlmaLinux · 10 | java-25-openjdk-crypto-adapter | 1:25.0.4.1.1-1.1.el10.alma.1 |
| AlmaLinux · 10 | java-25-openjdk-crypto-adapter-fastdebug | 1:25.0.4.1.1-1.1.el10.alma.1 |
| AlmaLinux · 10 | java-25-openjdk-crypto-adapter-slowdebug | 1:25.0.4.1.1-1.1.el10.alma.1 |
| AlmaLinux · 10 | java-25-openjdk-demo | 1:25.0.4.1.1-1.1.el10.alma.1 |
| AlmaLinux · 10 | java-25-openjdk-demo-fastdebug | 1:25.0.4.1.1-1.1.el10.alma.1 |
| AlmaLinux · 10 | java-25-openjdk-demo-slowdebug | 1:25.0.4.1.1-1.1.el10.alma.1 |
| AlmaLinux · 10 | java-25-openjdk-devel | 1:25.0.4.1.1-1.1.el10.alma.1 |
| AlmaLinux · 10 | java-25-openjdk-devel-fastdebug | 1:25.0.4.1.1-1.1.el10.alma.1 |
| AlmaLinux · 10 | java-25-openjdk-devel-slowdebug | 1:25.0.4.1.1-1.1.el10.alma.1 |
| AlmaLinux · 10 | java-25-openjdk-fastdebug | 1:25.0.4.1.1-1.1.el10.alma.1 |
| AlmaLinux · 10 | java-25-openjdk-headless | 1:25.0.4.1.1-1.1.el10.alma.1 |
| AlmaLinux · 10 | java-25-openjdk-headless-fastdebug | 1:25.0.4.1.1-1.1.el10.alma.1 |
| AlmaLinux · 10 | java-25-openjdk-headless-slowdebug | 1:25.0.4.1.1-1.1.el10.alma.1 |
| AlmaLinux · 10 | java-25-openjdk-javadoc | 1:25.0.4.1.1-1.1.el10.alma.1 |
| AlmaLinux · 10 | java-25-openjdk-javadoc-zip | 1:25.0.4.1.1-1.1.el10.alma.1 |
| AlmaLinux · 10 | java-25-openjdk-jmods | 1:25.0.4.1.1-1.1.el10.alma.1 |
| AlmaLinux · 10 | java-25-openjdk-jmods-fastdebug | 1:25.0.4.1.1-1.1.el10.alma.1 |
| AlmaLinux · 10 | java-25-openjdk-jmods-slowdebug | 1:25.0.4.1.1-1.1.el10.alma.1 |
| AlmaLinux · 10 | java-25-openjdk-slowdebug | 1:25.0.4.1.1-1.1.el10.alma.1 |
| AlmaLinux · 10 | java-25-openjdk-src | 1:25.0.4.1.1-1.1.el10.alma.1 |
| AlmaLinux · 10 | java-25-openjdk-src-fastdebug | 1:25.0.4.1.1-1.1.el10.alma.1 |
| AlmaLinux · 10 | java-25-openjdk-src-slowdebug | 1:25.0.4.1.1-1.1.el10.alma.1 |
| AlmaLinux · 10 | java-25-openjdk-static-libs | 1:25.0.4.1.1-1.1.el10.alma.1 |
| AlmaLinux · 10 | java-25-openjdk-static-libs-fastdebug | 1:25.0.4.1.1-1.1.el10.alma.1 |
| AlmaLinux · 10 | java-25-openjdk-static-libs-slowdebug | 1:25.0.4.1.1-1.1.el10.alma.1 |
| AlmaLinux · 9 | java-25-openjdk | 1:25.0.4.1.1-1.1.el9.alma.1 |
| AlmaLinux · 9 | java-25-openjdk-crypto-adapter | 1:25.0.4.1.1-1.1.el9.alma.1 |
| AlmaLinux · 9 | java-25-openjdk-crypto-adapter-fastdebug | 1:25.0.4.1.1-1.1.el9.alma.1 |
| AlmaLinux · 9 | java-25-openjdk-crypto-adapter-slowdebug | 1:25.0.4.1.1-1.1.el9.alma.1 |
| AlmaLinux · 9 | java-25-openjdk-demo | 1:25.0.4.1.1-1.1.el9.alma.1 |
| AlmaLinux · 9 | java-25-openjdk-demo-fastdebug | 1:25.0.4.1.1-1.1.el9.alma.1 |
| AlmaLinux · 9 | java-25-openjdk-demo-slowdebug | 1:25.0.4.1.1-1.1.el9.alma.1 |
| AlmaLinux · 9 | java-25-openjdk-devel | 1:25.0.4.1.1-1.1.el9.alma.1 |
| AlmaLinux · 9 | java-25-openjdk-devel-fastdebug | 1:25.0.4.1.1-1.1.el9.alma.1 |
| AlmaLinux · 9 | java-25-openjdk-devel-slowdebug | 1:25.0.4.1.1-1.1.el9.alma.1 |
| AlmaLinux · 9 | java-25-openjdk-fastdebug | 1:25.0.4.1.1-1.1.el9.alma.1 |
| AlmaLinux · 9 | java-25-openjdk-headless | 1:25.0.4.1.1-1.1.el9.alma.1 |
| AlmaLinux · 9 | java-25-openjdk-headless-fastdebug | 1:25.0.4.1.1-1.1.el9.alma.1 |
| AlmaLinux · 9 | java-25-openjdk-headless-slowdebug | 1:25.0.4.1.1-1.1.el9.alma.1 |
| AlmaLinux · 9 | java-25-openjdk-javadoc | 1:25.0.4.1.1-1.1.el9.alma.1 |
| AlmaLinux · 9 | java-25-openjdk-javadoc-zip | 1:25.0.4.1.1-1.1.el9.alma.1 |
| AlmaLinux · 9 | java-25-openjdk-jmods | 1:25.0.4.1.1-1.1.el9.alma.1 |
| AlmaLinux · 9 | java-25-openjdk-jmods-fastdebug | 1:25.0.4.1.1-1.1.el9.alma.1 |
| AlmaLinux · 9 | java-25-openjdk-jmods-slowdebug | 1:25.0.4.1.1-1.1.el9.alma.1 |
| AlmaLinux · 9 | java-25-openjdk-slowdebug | 1:25.0.4.1.1-1.1.el9.alma.1 |
| AlmaLinux · 9 | java-25-openjdk-src | 1:25.0.4.1.1-1.1.el9.alma.1 |
| AlmaLinux · 9 | java-25-openjdk-src-fastdebug | 1:25.0.4.1.1-1.1.el9.alma.1 |
| AlmaLinux · 9 | java-25-openjdk-src-slowdebug | 1:25.0.4.1.1-1.1.el9.alma.1 |
| AlmaLinux · 9 | java-25-openjdk-static-libs | 1:25.0.4.1.1-1.1.el9.alma.1 |
| AlmaLinux · 9 | java-25-openjdk-static-libs-fastdebug | 1:25.0.4.1.1-1.1.el9.alma.1 |
| AlmaLinux · 9 | java-25-openjdk-static-libs-slowdebug | 1:25.0.4.1.1-1.1.el9.alma.1 |
Vulnerabilities 4
-
High 7.5
Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 25.0.4 and 26…
-
Medium 6.8
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
-
Medium 5.3
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
-
Low 3.7
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
References
-
report
https://access.redhat.com/security/cve/CVE-2026-60589
-
report
https://access.redhat.com/security/cve/CVE-2026-61308
-
report
https://access.redhat.com/security/cve/CVE-2026-70906
-
report
https://access.redhat.com/security/cve/CVE-2026-70907
-
advisory
https://errata.almalinux.org/10/ALSA-2026-55798.html
-
advisory
https://errata.almalinux.org/9/ALSA-2026-55798.html