Skip to content
OpenAdvisories
High RLSA-2025:10867 4 CVEs

Important: java-17-openjdk security update

Published Jul 29, 2025 · Updated Jul 29, 2025

Summary

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* JDK: Better Glyph drawing (CVE-2025-30749)
* JDK: Enhance TLS protocol support (CVE-2025-30754)
* JDK: Improve HTTP client header handling (CVE-2025-50059)
* JDK: Better Glyph drawing redux (CVE-2025-50106)

Bug Fix(es):

* In Rocky Linux 9 and Rocky Linux 10 systems, the default graphical display system is Wayland. The use of Wayland in these systems causes a failure in the traditional X11 method that java.awt.Robot uses to take a screen capture, producing a blank image. With this update, the RPM now recommends installing the PipeWire package, which the JDK can use to take screen captures in Wayland systems (Rocky Linux-102668, Rocky Linux-102669, Rocky Linux-102670, Rocky Linux-102672)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 8 java-17-openjdk 1:17.0.16.0.8-2.el8

Vulnerabilities 4

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2376783
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2376784
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2376785
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2379031