Medium ELSA-2025-3844 3 CVEs

Moderate: java-1.8.0-openjdk security update (Oracle Linux 7)

Published May 12, 2025 · Updated May 12, 2025

Ecosystem: Oracle Linux

Summary

[1:1.8.0.442.b06-1.0.3]
- Fixed CVE-2025-21587, CVE-2025-30691 and CVE-2025-30698 [Orabug: 37840723]

Fixed packages 8

Release	Package	Fixed in
Oracle Linux · 7	java-1.8.0-openjdk	1:1.8.0.442.b06-1.0.3.el7_9
Oracle Linux · 7	java-1.8.0-openjdk-accessibility	1:1.8.0.442.b06-1.0.3.el7_9
Oracle Linux · 7	java-1.8.0-openjdk-demo	1:1.8.0.442.b06-1.0.3.el7_9
Oracle Linux · 7	java-1.8.0-openjdk-devel	1:1.8.0.442.b06-1.0.3.el7_9
Oracle Linux · 7	java-1.8.0-openjdk-headless	1:1.8.0.442.b06-1.0.3.el7_9
Oracle Linux · 7	java-1.8.0-openjdk-javadoc	1:1.8.0.442.b06-1.0.3.el7_9
Oracle Linux · 7	java-1.8.0-openjdk-javadoc-zip	1:1.8.0.442.b06-1.0.3.el7_9
Oracle Linux · 7	java-1.8.0-openjdk-src	1:1.8.0.442.b06-1.0.3.el7_9

Vulnerabilities 3

High 7.4

CVE-2025-21587

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi

Apr 15, 2025
Medium 5.6

CVE-2025-30698

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi

Apr 15, 2025
Medium 4.8

CVE-2025-30691

Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 21.0.6,…

Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 15, 2025