Moderate Security Update for java-21-openjdk: Enhancements and Fixes
Summary
ALSA-2025:3855: Moderate: java-21-openjdk security update. Affects java-21-openjdk versions < 1:21.0.7.0.6-1.el8. Fixed in 1:21.0.7.0.6-1.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The java-21-openjdk package provides the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. It is widely used for developing and running Java applications, offering features such as improved performance, security, and support for modern Java standards. However, recent vulnerabilities have been identified that could impact the security and functionality of applications relying on this package.
Vulnerability Detail
The vulnerabilities identified in java-21-openjdk include better TLS connection support (CVE-2025-21587), improvements in compiler transformations (CVE-2025-30691), and enhancements in Buffered Image handling (CVE-2025-30698). These vulnerabilities could potentially allow unauthorized access, data leakage, or application crashes, posing significant risks to applications using this package.
How To Fix
Minimum fixed version
1:21.0.7.0.6-1.el8
This is the first release that contains the fix.
sudo dnf update java-21-openjdkTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate patching is not feasible, consider implementing network-level security measures such as firewalls or VPNs to limit exposure to potential attacks while you plan for an update.
Conclusion
The java-21-openjdk package has been identified with several vulnerabilities that could impact Java applications. It is crucial to update to the latest patched version to ensure security and functionality. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for java-21-openjdk →
FAQ
The vulnerabilities can lead to unauthorized access, data leakage, and application crashes, affecting the overall security and functionality of Java applications.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
Run the command 'sudo dnf update java-21-openjdk' in your terminal to update to the patched version 1:21.0.7.0.6-1.el8.
Implementing network-level security measures such as firewalls or VPNs can help mitigate risks until the package is updated.
Vulert monitors and alerts in real-time for open-source vulnerabilities in your software using just a manifest file like package-lock.json, helping you maintain security.
Related vulnerabilities
Recent vulnerabilities recorded for java-21-openjdk.
