ELSA-2025-21485

ELSA-2025-21485 - java-25-openjdk security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2025-12-03

Description

[1:25.0.1.0.8-2.0.1]
- Add Oracle vendor bug URL [Orabug: 34340155]

[1:25.0.1.0.8-2]
- Remove superfluous backslashes that cause two alternative commands to be combined
- Related: RHEL-120553

[1:25.0.1.0.8-1]
- Update to jdk-25.0.1+8 (GA)
- Update release notes with features of JDK 25
- Mention finalisation JEP for features finalised in JDK 22, 23 & 24
- Drop fakefeaturever now we have reached OpenJDK 25
- Update release notes to 25.0.1+8
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-120553

[1:24.0.2.0.12-1]
- Update to jdk-24.0.2+12 (GA)
- Update release notes with features of JDK 24
- alt-java man page installation is now handled by the OpenJDK build
- Adjust TestTranslations.java with updated German translations from CLDR 46 (JDK-8333582) (Mountain->Mountains)
- Run javap with the disassembled code (-c) option now required for -l by JDK-8345145
- Sync the copy of the portable specfile with the latest update
- Remove default.policy and java.policy following JDK-8338411: 'Permanently Disable the Security Manager'
- Make man page handling dependent on pandoc being available during the portable build
- Handle new CDS archive variants (*_coh*) added by Compact Object Headers (JDK-8305895)
- Add missing man page alternatives for jdeprscan, jfr, jhsdb, jimage, jlink & jmod and fix alphabetical ordering
- Support jnativescan added by JDK-8317611: 'Add a tool like jdeprscan to find usage of restricted methods'
- Add recent native libraries to _privatelibs (libjsvml.so, libsimdsort.so, libsyslookup.so)
- Support libsleef on AArch64 & RISC-V added by JDK-8329816, JDK-8320500 (RISC-V) & JDK-8312425 (AArch64)
- Related: RHEL-120553

[1:23.0.2.0.7-1]
- Update to jdk-23.0.2+7 (GA)
- Update release notes with features of JDK 23
- Sync the copy of the portable specfile with the latest update
- Remove lible.so handling following its removal in JDK-8327476: 'Upgrade JLine to 3.26.1'
- Install jaxp-strict.properties.template added by JDK-8330542: 'Template for Creating Strict JAXP Configuration File'
- Related: RHEL-120553

Related CVEs

CVE-2025-53057

CVE-2025-53066

CVE-2025-61748

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	java-25-openjdk-25.0.1.0.8-2.0.1.el10.src.rpm	ba49ddc092c0cf0086bd76d6459b5efee6c1a720549a2e59da9ed43f2941498d	-	ol10_aarch64_appstream
	java-25-openjdk-25.0.1.0.8-2.0.1.el10.src.rpm	ba49ddc092c0cf0086bd76d6459b5efee6c1a720549a2e59da9ed43f2941498d	-	ol10_aarch64_codeready_builder
	java-25-openjdk-25.0.1.0.8-2.0.1.el10.aarch64.rpm	c9d173d042fb90249888201f0e35d120b79ed2c3b4d6ccf80224c6ff5dbb1f87	-	ol10_aarch64_appstream
	java-25-openjdk-demo-25.0.1.0.8-2.0.1.el10.aarch64.rpm	b51a9bec52a7e0210883a98f7a3f7ecdd7ba71bbcd2f61b011a7c06d218cb42d	-	ol10_aarch64_appstream
	java-25-openjdk-demo-fastdebug-25.0.1.0.8-2.0.1.el10.aarch64.rpm	74d75aee68b3036a3c68e322de22897554bc73a013752ee8a966ffad9d131d37	-	ol10_aarch64_codeready_builder
	java-25-openjdk-demo-slowdebug-25.0.1.0.8-2.0.1.el10.aarch64.rpm	5f10ef282fa9da6cde2fdc3e484416cd9c35201be4ce2798e4c0025232307be8	-	ol10_aarch64_codeready_builder
	java-25-openjdk-devel-25.0.1.0.8-2.0.1.el10.aarch64.rpm	20fe0ebb6e1e8f70305296dbdb0b7be87526f4e34fb46a359e2eeed0913855d3	-	ol10_aarch64_appstream
	java-25-openjdk-devel-fastdebug-25.0.1.0.8-2.0.1.el10.aarch64.rpm	c17c94c4c125515aa3cdccb8b7c33b79f2dd5db874aeb78e1265e6ed710c38b4	-	ol10_aarch64_codeready_builder
	java-25-openjdk-devel-slowdebug-25.0.1.0.8-2.0.1.el10.aarch64.rpm	230fb95c5f7e638b7320138eac476d5f044f3639f66ab262ce21cd3920608c4b	-	ol10_aarch64_codeready_builder
	java-25-openjdk-fastdebug-25.0.1.0.8-2.0.1.el10.aarch64.rpm	b0d495dcb2d71fbdc9984c43494ecf39bdba9c9dd8f88efa32d58b7375394f6a	-	ol10_aarch64_codeready_builder
	java-25-openjdk-headless-25.0.1.0.8-2.0.1.el10.aarch64.rpm	3f9cdb780e1f5407c7470806fb04d024c998215d1a88dc1ba8dbe4ef8db43994	-	ol10_aarch64_appstream
	java-25-openjdk-headless-fastdebug-25.0.1.0.8-2.0.1.el10.aarch64.rpm	5035b2f9d9b52e8e8998cc7fe150d4b0ce173b25dd512583f5fc3e6df8985ef2	-	ol10_aarch64_codeready_builder
	java-25-openjdk-headless-slowdebug-25.0.1.0.8-2.0.1.el10.aarch64.rpm	303f75371da748019be971df498f92bed0ef616abf8bbb165acceeaa117e1450	-	ol10_aarch64_codeready_builder
	java-25-openjdk-javadoc-25.0.1.0.8-2.0.1.el10.aarch64.rpm	1a826b4c1c63936e0b8948abfd56f45d83286f827d52c7cf4b3c829e0fcca2c2	-	ol10_aarch64_appstream
	java-25-openjdk-javadoc-zip-25.0.1.0.8-2.0.1.el10.aarch64.rpm	3093743b72f731ce16a2b9fde5a39a8b63aeb9f71553e156cf423fe8a5f7723b	-	ol10_aarch64_appstream
	java-25-openjdk-jmods-25.0.1.0.8-2.0.1.el10.aarch64.rpm	92d55cc509fd43d7e36c7c50cb49d113cb90cd2b16414579d15a0c0d44084a9e	-	ol10_aarch64_appstream
	java-25-openjdk-jmods-fastdebug-25.0.1.0.8-2.0.1.el10.aarch64.rpm	8de3de753f0fc987edfbd94660d74baa7646d7ab0eaae8f35450f6929f43aa41	-	ol10_aarch64_codeready_builder
	java-25-openjdk-jmods-slowdebug-25.0.1.0.8-2.0.1.el10.aarch64.rpm	a660087eb5d76d2d475c84696e36d487cade9aa5ec324793a7483920ff8984f7	-	ol10_aarch64_codeready_builder
	java-25-openjdk-slowdebug-25.0.1.0.8-2.0.1.el10.aarch64.rpm	97dd30385f95f2073d04ae74d386d3a6c4100e2d84f4ce5101b62f2633cb7155	-	ol10_aarch64_codeready_builder
	java-25-openjdk-src-25.0.1.0.8-2.0.1.el10.aarch64.rpm	fe140ef5fe1c7739a6070359f45705e1c6edd8c47c317a0c34f26cc92d1d99a0	-	ol10_aarch64_appstream
	java-25-openjdk-src-fastdebug-25.0.1.0.8-2.0.1.el10.aarch64.rpm	9201d8d341910f45e7e7af44dcedddb94e91737fe820a56008e6777cd2bf0fd2	-	ol10_aarch64_codeready_builder
	java-25-openjdk-src-slowdebug-25.0.1.0.8-2.0.1.el10.aarch64.rpm	f6ede2a02181ffd9f2694a6bbb620d1dcc953046d98a92ef187310af250e644f	-	ol10_aarch64_codeready_builder
	java-25-openjdk-static-libs-25.0.1.0.8-2.0.1.el10.aarch64.rpm	b7b744c9bbb90119eb916a73197848d5f5b6ee0273a71137948a47b2caf0428a	-	ol10_aarch64_appstream
	java-25-openjdk-static-libs-fastdebug-25.0.1.0.8-2.0.1.el10.aarch64.rpm	b2e0f8a3a6d209e890f8da48e0cad825108019c7f0a8e2dc00b23149b7c4c0dc	-	ol10_aarch64_codeready_builder
	java-25-openjdk-static-libs-slowdebug-25.0.1.0.8-2.0.1.el10.aarch64.rpm	a12127804254ebce74f7c41194d80cd49f8a8e83b345bb4c5b1858be06eac39b	-	ol10_aarch64_codeready_builder
Oracle Linux 10 (x86_64)	java-25-openjdk-25.0.1.0.8-2.0.1.el10.src.rpm	ba49ddc092c0cf0086bd76d6459b5efee6c1a720549a2e59da9ed43f2941498d	-	ol10_x86_64_appstream
	java-25-openjdk-25.0.1.0.8-2.0.1.el10.src.rpm	ba49ddc092c0cf0086bd76d6459b5efee6c1a720549a2e59da9ed43f2941498d	-	ol10_x86_64_codeready_builder
	java-25-openjdk-25.0.1.0.8-2.0.1.el10.x86_64.rpm	e49888149d11fd7b5b29ecb8d82bbb886f5bc7974382c1e006b9eb1440f49b55	-	ol10_x86_64_appstream
	java-25-openjdk-demo-25.0.1.0.8-2.0.1.el10.x86_64.rpm	9698d2ff63b1815d209ba0aff291f6ad7e2e7be1b30c188275f906b75ce6fcb8	-	ol10_x86_64_appstream
	java-25-openjdk-demo-fastdebug-25.0.1.0.8-2.0.1.el10.x86_64.rpm	5e28d118a6b7e8a290cc5558b75a589197c06d3bc353a7cfc830150c415812a6	-	ol10_x86_64_codeready_builder
	java-25-openjdk-demo-slowdebug-25.0.1.0.8-2.0.1.el10.x86_64.rpm	c8c325c281d78303b8dee6f029e69cc03a33d3e136917beb8bb415ea7e5e8157	-	ol10_x86_64_codeready_builder
	java-25-openjdk-devel-25.0.1.0.8-2.0.1.el10.x86_64.rpm	75a3acc8db41f8bf0e6a0d6597a93cd94d6a317dfc61bc6819696fa67c6dbef5	-	ol10_x86_64_appstream
	java-25-openjdk-devel-fastdebug-25.0.1.0.8-2.0.1.el10.x86_64.rpm	75fa6e7e7a7cece1d030d3a83ffbf78e47ce8087493194bc94a1fcea4ea5acd7	-	ol10_x86_64_codeready_builder
	java-25-openjdk-devel-slowdebug-25.0.1.0.8-2.0.1.el10.x86_64.rpm	afad1d40557f41c5c9ecceede27e820ef17df1b9ef61749b14b5ee3a34b00369	-	ol10_x86_64_codeready_builder
	java-25-openjdk-fastdebug-25.0.1.0.8-2.0.1.el10.x86_64.rpm	b507b89ab6a4b4ea49b667f7063a4eba59aadf3c28337e106add8dcd7c445ce8	-	ol10_x86_64_codeready_builder
	java-25-openjdk-headless-25.0.1.0.8-2.0.1.el10.x86_64.rpm	578da7f1927d61dba0f1acb719d366939e6b704447c156f36e58978cf8afd608	-	ol10_x86_64_appstream
	java-25-openjdk-headless-fastdebug-25.0.1.0.8-2.0.1.el10.x86_64.rpm	fa139c797761fb56758d9ca8c163a4f8997839b8c67f6b3c2cca5b520cd2e5be	-	ol10_x86_64_codeready_builder
	java-25-openjdk-headless-slowdebug-25.0.1.0.8-2.0.1.el10.x86_64.rpm	c9b1386b3fd8814b963c0879c37b8f1a00104a163452ce99a89dff8ca95a587b	-	ol10_x86_64_codeready_builder
	java-25-openjdk-javadoc-25.0.1.0.8-2.0.1.el10.x86_64.rpm	2bf3a0fa0e365f3e34e437608ed3d57b3f791a821be39d747cf0c48ad034cb5b	-	ol10_x86_64_appstream
	java-25-openjdk-javadoc-zip-25.0.1.0.8-2.0.1.el10.x86_64.rpm	c9bddb1dfc6b5aa1c170132c3c6096aef06fb687ac2aebd28965fba1b848f3ba	-	ol10_x86_64_appstream
	java-25-openjdk-jmods-25.0.1.0.8-2.0.1.el10.x86_64.rpm	77e49dc1ec0d13e7c755f7b376fe7f48949525f390d085f68ad2d3fe641e7f0a	-	ol10_x86_64_appstream
	java-25-openjdk-jmods-fastdebug-25.0.1.0.8-2.0.1.el10.x86_64.rpm	eaf6ece42d1876fefa37d8546c1f3e5112f7d2a50d39992ac3ad2fec8f166475	-	ol10_x86_64_codeready_builder
	java-25-openjdk-jmods-slowdebug-25.0.1.0.8-2.0.1.el10.x86_64.rpm	2a7205661eb25e31469f57f1d2d99f6d57474773673d48f78fafa506f1df8dcd	-	ol10_x86_64_codeready_builder
	java-25-openjdk-slowdebug-25.0.1.0.8-2.0.1.el10.x86_64.rpm	16767ec3217c2bde04bc73751015038cfdd6f8f58262eac7a1ee5a3baa76c60a	-	ol10_x86_64_codeready_builder
	java-25-openjdk-src-25.0.1.0.8-2.0.1.el10.x86_64.rpm	9adcf686fb4f78c029280c105ccdd7b9616370f5753a68eb9eedfecd66b5aa60	-	ol10_x86_64_appstream
	java-25-openjdk-src-fastdebug-25.0.1.0.8-2.0.1.el10.x86_64.rpm	fb29c5168efc14ee82c90c0789d38b6b8082d4057cd4e316cfb255e4dc533591	-	ol10_x86_64_codeready_builder
	java-25-openjdk-src-slowdebug-25.0.1.0.8-2.0.1.el10.x86_64.rpm	27499ad7e50e26aed164de2f3e3e6651685b3128a0e7a9d4faf9cbdbd2f5dd0b	-	ol10_x86_64_codeready_builder
	java-25-openjdk-static-libs-25.0.1.0.8-2.0.1.el10.x86_64.rpm	3a9784dfa4d6c5a4bb9bdd6fc2d8741574f2951d59c79d9e3f8704366e2debe2	-	ol10_x86_64_appstream
	java-25-openjdk-static-libs-fastdebug-25.0.1.0.8-2.0.1.el10.x86_64.rpm	e5c787cab3dbb4a2c020cf8545b5128afc9de3c5330d90831d33110d39ea25c1	-	ol10_x86_64_codeready_builder
	java-25-openjdk-static-libs-slowdebug-25.0.1.0.8-2.0.1.el10.x86_64.rpm	91ffc231c7e9a7e4846f44549c6b379718e9b804a71c28bc1d47ce6c8c677da3	-	ol10_x86_64_codeready_builder

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team