High RHSA-2025:3844 3 CVEs

Red Hat Security Advisory: java-1.8.0-openjdk security update

Published Apr 17, 2025 · Updated Oct 16, 2026

Ecosystem: Red Hat

Fixed packages 9

Release	Package	Fixed in
Red Hat · RHEL 7 ELS rhel_els:7	java-1.8.0-openjdk	1:1.8.0.452.b09-1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-1.8.0-openjdk-accessibility	1:1.8.0.452.b09-1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-1.8.0-openjdk-debuginfo	1:1.8.0.452.b09-1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-1.8.0-openjdk-demo	1:1.8.0.452.b09-1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-1.8.0-openjdk-devel	1:1.8.0.452.b09-1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-1.8.0-openjdk-headless	1:1.8.0.452.b09-1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-1.8.0-openjdk-javadoc	1:1.8.0.452.b09-1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-1.8.0-openjdk-javadoc-zip	1:1.8.0.452.b09-1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-1.8.0-openjdk-src	1:1.8.0.452.b09-1.el7_9

Vulnerabilities 3

High 7.4

CVE-2025-21587

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi

Apr 15, 2025
Medium 5.6

CVE-2025-30698

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi

Apr 15, 2025
Medium 4.8

CVE-2025-30691

Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 21.0.6,…

Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 15, 2025

References

article
https://access.redhat.com/security/updates/classification/#moderate
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3844.json
report
https://access.redhat.com/security/cve/CVE-2025-21587
report
https://bugzilla.redhat.com/show_bug.cgi?id=2359695
advisory
https://www.cve.org/CVERecord?id=CVE-2025-21587
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-21587
article
https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixJAVA
report
https://access.redhat.com/security/cve/CVE-2025-30691
report
https://bugzilla.redhat.com/show_bug.cgi?id=2359694
advisory
https://www.cve.org/CVERecord?id=CVE-2025-30691
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-30691
report
https://access.redhat.com/security/cve/CVE-2025-30698
report
https://bugzilla.redhat.com/show_bug.cgi?id=2359693
advisory
https://www.cve.org/CVERecord?id=CVE-2025-30698
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-30698