Skip to content
OpenAdvisories
Medium RLSA-2025:21485 3 CVEs

Moderate: java-25-openjdk security update

Published Nov 25, 2025 · Updated Nov 25, 2025

Ecosystem: Rocky Linux

Summary

The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit.

Security Fix(es):

* JDK: Enhance Path Factories (CVE-2025-53066)

* JDK: Enhance Certificate Handling (CVE-2025-53057)

* JDK: Enhance String Handling (CVE-2025-61748)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Note that the OpenJDK 25 package does not yet include FIPS support. This is expected to be reinstated in a future update.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 10 java-25-openjdk 1:25.0.1.0.8-2.el10

Vulnerabilities 3

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2403063
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2403064
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2403082