RHSA-2025:0421: Moderate: java-17-openjdk security update for RHEL 8.4

Published Jan 22, 2025
·
Updated

Moderate: java-17-openjdk security update for RHEL 8.4

Other sources

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.Security Fix(es): JDK: Enhance array handling (CVE-2025-21502) Bug Fix(es): The Red Hat OpenJDK packages rely on the copy-jdk-configs package to transfer configuration files to a new updated JDK. The version of this package in RHEL 8.4 has been outdated for some time and contains bugs that have been fixed in later RHEL versions. With this update, both copy-jdk-configs and the JDK have been updated to use the latest version of copy-jdk-configs, which has been used for some years on later RHEL versions (RHEL-73870). For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat

Affected Software

40 affected componentsFixes available
redhat/java<17-openjdk-17.0.14.0.7-1.el8_4
17-openjdk-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-17.0.14.0.7-1.el8_4
17-openjdk-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-debuginfo-17.0.14.0.7-1.el8_4
17-openjdk-debuginfo-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-debugsource-17.0.14.0.7-1.el8_4
17-openjdk-debugsource-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-demo-17.0.14.0.7-1.el8_4
17-openjdk-demo-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-devel-17.0.14.0.7-1.el8_4
17-openjdk-devel-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-devel-debuginfo-17.0.14.0.7-1.el8_4
17-openjdk-devel-debuginfo-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-devel-fastdebug-debuginfo-17.0.14.0.7-1.el8_4
17-openjdk-devel-fastdebug-debuginfo-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-devel-slowdebug-debuginfo-17.0.14.0.7-1.el8_4
17-openjdk-devel-slowdebug-debuginfo-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-fastdebug-debuginfo-17.0.14.0.7-1.el8_4
17-openjdk-fastdebug-debuginfo-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-headless-17.0.14.0.7-1.el8_4
17-openjdk-headless-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-headless-debuginfo-17.0.14.0.7-1.el8_4
17-openjdk-headless-debuginfo-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-headless-fastdebug-debuginfo-17.0.14.0.7-1.el8_4
17-openjdk-headless-fastdebug-debuginfo-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-headless-slowdebug-debuginfo-17.0.14.0.7-1.el8_4
17-openjdk-headless-slowdebug-debuginfo-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-javadoc-17.0.14.0.7-1.el8_4
17-openjdk-javadoc-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-javadoc-zip-17.0.14.0.7-1.el8_4
17-openjdk-javadoc-zip-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-jmods-17.0.14.0.7-1.el8_4
17-openjdk-jmods-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-slowdebug-debuginfo-17.0.14.0.7-1.el8_4
17-openjdk-slowdebug-debuginfo-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-src-17.0.14.0.7-1.el8_4
17-openjdk-src-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-static-libs-17.0.14.0.7-1.el8_4
17-openjdk-static-libs-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-17.0.14.0.7-1.el8_4
17-openjdk-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-debuginfo-17.0.14.0.7-1.el8_4
17-openjdk-debuginfo-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-debugsource-17.0.14.0.7-1.el8_4
17-openjdk-debugsource-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-demo-17.0.14.0.7-1.el8_4
17-openjdk-demo-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-devel-17.0.14.0.7-1.el8_4
17-openjdk-devel-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-devel-debuginfo-17.0.14.0.7-1.el8_4
17-openjdk-devel-debuginfo-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-devel-slowdebug-debuginfo-17.0.14.0.7-1.el8_4
17-openjdk-devel-slowdebug-debuginfo-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-headless-17.0.14.0.7-1.el8_4
17-openjdk-headless-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-headless-debuginfo-17.0.14.0.7-1.el8_4
17-openjdk-headless-debuginfo-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-headless-slowdebug-debuginfo-17.0.14.0.7-1.el8_4
17-openjdk-headless-slowdebug-debuginfo-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-javadoc-17.0.14.0.7-1.el8_4
17-openjdk-javadoc-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-javadoc-zip-17.0.14.0.7-1.el8_4
17-openjdk-javadoc-zip-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-jmods-17.0.14.0.7-1.el8_4
17-openjdk-jmods-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-slowdebug-debuginfo-17.0.14.0.7-1.el8_4
17-openjdk-slowdebug-debuginfo-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-src-17.0.14.0.7-1.el8_4
17-openjdk-src-17.0.14.0.7-1.el8_4
redhat/java<17-openjdk-static-libs-17.0.14.0.7-1.el8_4
17-openjdk-static-libs-17.0.14.0.7-1.el8_4
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server - TUS
Red Hat Red Hat Enterprise Linux Server - AUS
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions

Remediation

Event History

Jan 22, 2025
Advisory Published
via Red Hat·12:00 AM
Advisory Published
via Red Hat·08:37 AM

Frequently Asked Questions

1

What security fixes are included in RHSA-2025:0421?

RHSA-2025:0421 includes a security fix for CVE-2025-21502, which enhances array handling in OpenJDK 17.

2

Who is affected by the RHSA-2025:0421 vulnerability?

The RHSA-2025:0421 vulnerability affects users of the java-17-openjdk packages on Red Hat Enterprise Linux 8.4.

3

How do I fix RHSA-2025:0421?

To resolve the RHSA-2025:0421 vulnerability, update your java-17-openjdk packages to the latest version provided by Red Hat.

4

What is the severity of RHSA-2025:0421?

The severity of RHSA-2025:0421 is classified as moderate, indicating potential risk that should be addressed.

5

What versions of OpenJDK are impacted by RHSA-2025:0421?

The impacted versions are any prior to 17-openjdk-17.0.14.0.7-1.el8_4 on Red Hat Enterprise Linux 8.4.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203