Linux · Security advisory · July 28, 2025

ELSA-2025-10862: Security update for 20 packages

ELSA-2025-10862, released July 28, 2025, fixes 4 CVEs across 20 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0523
92nd percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 4 Routine 0

Fixed package versions

ProductReleaseFixed in
java-1.8.0-openjdkol 81:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdkol 91:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-accessibilityol 81:1.8.0.462.b08-2.0.1.el8
java-1.8.0-openjdk-accessibilityol 91:1.8.0.462.b08-2.0.1.el8
java-1.8.0-openjdk-accessibility-fastdebugol 81:1.8.0.462.b08-2.0.1.el8
java-1.8.0-openjdk-accessibility-fastdebugol 91:1.8.0.462.b08-2.0.1.el8
java-1.8.0-openjdk-accessibility-slowdebugol 81:1.8.0.462.b08-2.0.1.el8
java-1.8.0-openjdk-accessibility-slowdebugol 91:1.8.0.462.b08-2.0.1.el8
java-1.8.0-openjdk-demool 81:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-demool 91:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-demo-fastdebugol 81:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-demo-fastdebugol 91:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-demo-slowdebugol 81:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-demo-slowdebugol 91:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-develol 81:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-develol 91:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-devel-fastdebugol 81:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-devel-fastdebugol 91:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-devel-slowdebugol 81:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-devel-slowdebugol 91:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-fastdebugol 81:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-fastdebugol 91:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-headlessol 81:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-headlessol 91:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-headless-fastdebugol 81:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-headless-fastdebugol 91:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-headless-slowdebugol 81:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-headless-slowdebugol 91:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-javadocol 81:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-javadocol 91:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-javadoc-zipol 81:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-javadoc-zipol 91:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-slowdebugol 81:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-slowdebugol 91:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-srcol 81:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-srcol 91:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-src-fastdebugol 81:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-src-fastdebugol 91:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-src-slowdebugol 81:1.8.0.462.b08-3.0.1.el9
java-1.8.0-openjdk-src-slowdebugol 91:1.8.0.462.b08-3.0.1.el9

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-30761 openjdk-11-demo: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Editionproduct of Oracle Java SE (component: Scripting) 8.1 0.0523 None reported
High CVE-2025-30749 Java(TM) SE Development Kit 21 and 1 other: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product… 8.6 0.0127 None reported
High CVE-2025-50106 Java(TM) SE Development Kit 21 and 1 other: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product… 8.6 0.0075 None reported
High CVE-2025-30754 Java(TM) SE Development Kit 21 and 1 other: Improper Access Control 8.6 0.0048 None reported
Showing 1 to 4 of 4 1