CVE-2025-50106

EUVD-2025-21474

15.07.2025, 20:15

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in takeover of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
oracle	CNA	8.1 HIGH	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 77%

Affected Products (NVD)

Vendor	Product	Version
oracle	jre	1.8.0
oracle	jre	1.8.0
oracle	jre	11.0.27
oracle	jre	17.0.15
oracle	jre	21.0.7
oracle	jre	24.0.1
oracle	jdk	1.8.0
oracle	jdk	1.8.0
oracle	jdk	11.0.27
oracle	jdk	17.0.15
oracle	jdk	21.0.7
oracle	jdk	24.0.1
oracle	graalvm_for_jdk	17.0.15
oracle	graalvm_for_jdk	21.0.7
oracle	graalvm_for_jdk	24.0.1
oracle	graalvm	21.3.14

𝑥

= Vulnerable software versions

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources.

Vendor	Product	Version	Source
oracle	java_se	11.0.27	CNA
oracle	java_se	17.0.15	CNA
oracle	java_se	21.0.7	CNA
oracle	java_se	24.0.1	CNA
oracle	java_se	21.3.14	CNA

Ubuntu Releases

Ubuntu Product

Codename

openjdk-9

jammy	dne
noble	dne
plucky	dne
questing	dne
resolute	dne
xenial	ignored

openjdk-8

bionic	Fixed 8u462-ga~us1-0ubuntu2~18.04.2 released
focal	Fixed 8u462-ga~us1-0ubuntu2~20.04.2 released
jammy	Fixed 8u462-ga~us1-0ubuntu2~22.04.2 released
noble	Fixed 8u462-ga~us1-0ubuntu2~24.04.2 released
plucky	Fixed 8u462-ga~us1-0ubuntu2~25.04.2 released
questing	Fixed 8u462-ga~us1-0ubuntu1 released
resolute	Fixed 8u462-ga~us1-0ubuntu1 released
xenial	Fixed 8u462-ga~us1-0ubuntu2~16.04.2 released

openjdk-lts

bionic	Fixed 11.0.28+6-1ubuntu1~18.04.1 released
focal	Fixed 11.0.28+6-1ubuntu1~20.04.1 released
jammy	Fixed 11.0.28+6-1ubuntu1~22.04.1 released
noble	Fixed 11.0.28+6-1ubuntu1~24.04.1 released
plucky	Fixed 11.0.28+6-1ubuntu1~25.04.1 released
questing	Fixed 11.0.28+6-1ubuntu1 released
resolute	Fixed 11.0.28+6-1ubuntu1 released

openjdk-13

focal	ignored
jammy	dne
noble	dne
plucky	dne
questing	dne
resolute	dne

openjdk-16

focal	ignored
jammy	dne
noble	dne
plucky	dne
questing	dne
resolute	dne

openjdk-17

bionic	Fixed 17.0.16+8~us1-0ubuntu1~18.04.1 released
focal	Fixed 17.0.16+8~us1-0ubuntu1~20.04.6 released
jammy	Fixed 17.0.16+8~us1-0ubuntu1~22.04.1 released
noble	Fixed 17.0.16+8~us1-0ubuntu1~24.04.1 released
plucky	Fixed 17.0.16+8~us1-0ubuntu1~25.04.1 released
questing	Fixed 17.0.16+8-1 released
resolute	Fixed 17.0.16+8-1 released

openjdk-17-crac

jammy	dne
noble	dne
plucky	Fixed 17.0.16+8-0ubuntu2~25.04 released
questing	Fixed 17.0.16+8-0ubuntu1 released
resolute	Fixed 17.0.16+8-0ubuntu1 released

openjdk-18

jammy	ignored
noble	dne
plucky	dne
questing	dne
resolute	dne

openjdk-19

jammy	dne
noble	dne
plucky	dne
questing	dne
resolute	dne

openjdk-21

focal	Fixed 21.0.8+9~us1-0ubuntu1~20.04.1 released
jammy	Fixed 21.0.8+9~us1-0ubuntu1~22.04.1 released
noble	Fixed 21.0.8+9~us1-0ubuntu1~24.04.1 released
plucky	Fixed 21.0.8+9~us1-0ubuntu1~25.04.1 released
questing	Fixed 21.0.8+9-1 released
resolute	Fixed 21.0.8+9-1 released

openjdk-21-crac

jammy	dne
noble	dne
plucky	Fixed 21.0.8+9-0ubuntu2~25.04 released
questing	Fixed 21.0.8+9-0ubuntu1 released
resolute	Fixed 21.0.8+9-0ubuntu1 released

openjdk-24

jammy	dne
noble	dne
plucky	Fixed 24.0.2+12~us1-0ubuntu1~25.04.1 released
questing	dne
resolute	dne

openjdk-25

jammy	not-affected
noble	not-affected
plucky	ignored
questing	not-affected
resolute	not-affected

openSUSE / SLES Releases

openSUSE Product

Release

java-11-openjdk

suse enterprise sap 15 SP4	11.0.28.0-150000.3.129.2 fixed
suse enterprise sap 15 SP5	11.0.28.0-150000.3.129.2 fixed
suse enterprise sap 15 SP6	11.0.28.0-150000.3.129.2 fixed
suse enterprise sap 15 SP7	11.0.28.0-150000.3.129.2 fixed
suse enterprise server 12 SP5	11.0.28.0-3.90.1 fixed
suse enterprise server 15 SP2	11.0.28.0-150000.3.129.2 fixed
suse enterprise server 15 SP3	11.0.28.0-150000.3.129.2 fixed
suse enterprise server 15 SP4	11.0.28.0-150000.3.129.2 fixed
suse enterprise server 15 SP5	11.0.28.0-150000.3.129.2 fixed
suse enterprise server 15 SP6	11.0.28.0-150000.3.129.2 fixed
suse enterprise server 15 SP7	11.0.28.0-150000.3.129.2 fixed

java-11-openjdk-demo

suse enterprise sap 15 SP4	11.0.28.0-150000.3.129.2 fixed
suse enterprise sap 15 SP5	11.0.28.0-150000.3.129.2 fixed
suse enterprise sap 15 SP6	11.0.28.0-150000.3.129.2 fixed
suse enterprise sap 15 SP7	11.0.28.0-150000.3.129.2 fixed
suse enterprise server 12 SP5	11.0.28.0-3.90.1 fixed
suse enterprise server 15 SP2	11.0.28.0-150000.3.129.2 fixed
suse enterprise server 15 SP3	11.0.28.0-150000.3.129.2 fixed
suse enterprise server 15 SP4	11.0.28.0-150000.3.129.2 fixed
suse enterprise server 15 SP5	11.0.28.0-150000.3.129.2 fixed
suse enterprise server 15 SP6	11.0.28.0-150000.3.129.2 fixed
suse enterprise server 15 SP7	11.0.28.0-150000.3.129.2 fixed

java-11-openjdk-devel

suse enterprise sap 15 SP4	11.0.28.0-150000.3.129.2 fixed
suse enterprise sap 15 SP5	11.0.28.0-150000.3.129.2 fixed
suse enterprise sap 15 SP6	11.0.28.0-150000.3.129.2 fixed
suse enterprise sap 15 SP7	11.0.28.0-150000.3.129.2 fixed
suse enterprise server 12 SP5	11.0.28.0-3.90.1 fixed
suse enterprise server 15 SP2	11.0.28.0-150000.3.129.2 fixed
suse enterprise server 15 SP3	11.0.28.0-150000.3.129.2 fixed
suse enterprise server 15 SP4	11.0.28.0-150000.3.129.2 fixed
suse enterprise server 15 SP5	11.0.28.0-150000.3.129.2 fixed
suse enterprise server 15 SP6	11.0.28.0-150000.3.129.2 fixed
suse enterprise server 15 SP7	11.0.28.0-150000.3.129.2 fixed

java-11-openjdk-headless

suse enterprise sap 15 SP4	11.0.28.0-150000.3.129.2 fixed
suse enterprise sap 15 SP5	11.0.28.0-150000.3.129.2 fixed
suse enterprise sap 15 SP6	11.0.28.0-150000.3.129.2 fixed
suse enterprise sap 15 SP7	11.0.28.0-150000.3.129.2 fixed
suse enterprise server 12 SP5	11.0.28.0-3.90.1 fixed
suse enterprise server 15 SP2	11.0.28.0-150000.3.129.2 fixed
suse enterprise server 15 SP3	11.0.28.0-150000.3.129.2 fixed
suse enterprise server 15 SP4	11.0.28.0-150000.3.129.2 fixed
suse enterprise server 15 SP5	11.0.28.0-150000.3.129.2 fixed
suse enterprise server 15 SP6	11.0.28.0-150000.3.129.2 fixed
suse enterprise server 15 SP7	11.0.28.0-150000.3.129.2 fixed

java-17-openjdk

suse enterprise desktop 15 SP6	17.0.16.0-150400.3.57.1 fixed
suse enterprise sap 15 SP4	17.0.16.0-150400.3.57.1 fixed
suse enterprise sap 15 SP5	17.0.16.0-150400.3.57.1 fixed
suse enterprise sap 15 SP6	17.0.16.0-150400.3.57.1 fixed
suse enterprise sap 15 SP7	17.0.16.0-150400.3.57.1 fixed
suse enterprise server 15 SP4	17.0.16.0-150400.3.57.1 fixed
suse enterprise server 15 SP5	17.0.16.0-150400.3.57.1 fixed
suse enterprise server 15 SP6	17.0.16.0-150400.3.57.1 fixed
suse enterprise server 15 SP7	17.0.16.0-150400.3.57.1 fixed

java-17-openjdk-demo

suse enterprise sap 15 SP4	17.0.16.0-150400.3.57.1 fixed
suse enterprise sap 15 SP5	17.0.16.0-150400.3.57.1 fixed
suse enterprise sap 15 SP6	17.0.16.0-150400.3.57.1 fixed
suse enterprise sap 15 SP7	17.0.16.0-150400.3.57.1 fixed
suse enterprise server 15 SP4	17.0.16.0-150400.3.57.1 fixed
suse enterprise server 15 SP5	17.0.16.0-150400.3.57.1 fixed
suse enterprise server 15 SP6	17.0.16.0-150400.3.57.1 fixed
suse enterprise server 15 SP7	17.0.16.0-150400.3.57.1 fixed

java-17-openjdk-devel

suse enterprise desktop 15 SP6	17.0.16.0-150400.3.57.1 fixed
suse enterprise sap 15 SP4	17.0.16.0-150400.3.57.1 fixed
suse enterprise sap 15 SP5	17.0.16.0-150400.3.57.1 fixed
suse enterprise sap 15 SP6	17.0.16.0-150400.3.57.1 fixed
suse enterprise sap 15 SP7	17.0.16.0-150400.3.57.1 fixed
suse enterprise server 15 SP4	17.0.16.0-150400.3.57.1 fixed
suse enterprise server 15 SP5	17.0.16.0-150400.3.57.1 fixed
suse enterprise server 15 SP6	17.0.16.0-150400.3.57.1 fixed
suse enterprise server 15 SP7	17.0.16.0-150400.3.57.1 fixed

java-17-openjdk-headless

suse enterprise desktop 15 SP6	17.0.16.0-150400.3.57.1 fixed
suse enterprise sap 15 SP4	17.0.16.0-150400.3.57.1 fixed
suse enterprise sap 15 SP5	17.0.16.0-150400.3.57.1 fixed
suse enterprise sap 15 SP6	17.0.16.0-150400.3.57.1 fixed
suse enterprise sap 15 SP7	17.0.16.0-150400.3.57.1 fixed
suse enterprise server 15 SP4	17.0.16.0-150400.3.57.1 fixed
suse enterprise server 15 SP5	17.0.16.0-150400.3.57.1 fixed
suse enterprise server 15 SP6	17.0.16.0-150400.3.57.1 fixed
suse enterprise server 15 SP7	17.0.16.0-150400.3.57.1 fixed

java-1_8_0-openjdk

suse enterprise sap 15 SP4	1.8.0.462-150000.3.109.1 fixed
suse enterprise sap 15 SP5	1.8.0.462-150000.3.109.1 fixed
suse enterprise sap 15 SP6	1.8.0.462-150000.3.109.1 fixed
suse enterprise sap 15 SP7	1.8.0.462-150000.3.109.1 fixed
suse enterprise server 12 SP3	1.8.0.462-27.117.1 fixed
suse enterprise server 12 SP5	1.8.0.462-27.117.1 fixed
suse enterprise server 15 SP2	1.8.0.462-150000.3.109.1 fixed
suse enterprise server 15 SP3	1.8.0.462-150000.3.109.1 fixed
suse enterprise server 15 SP4	1.8.0.462-150000.3.109.1 fixed
suse enterprise server 15 SP5	1.8.0.462-150000.3.109.1 fixed
suse enterprise server 15 SP6	1.8.0.462-150000.3.109.1 fixed
suse enterprise server 15 SP7	1.8.0.462-150000.3.109.1 fixed

java-1_8_0-openjdk-demo

suse enterprise sap 15 SP4	1.8.0.462-150000.3.109.1 fixed
suse enterprise sap 15 SP5	1.8.0.462-150000.3.109.1 fixed
suse enterprise sap 15 SP6	1.8.0.462-150000.3.109.1 fixed
suse enterprise sap 15 SP7	1.8.0.462-150000.3.109.1 fixed
suse enterprise server 12 SP3	1.8.0.462-27.117.1 fixed
suse enterprise server 12 SP5	1.8.0.462-27.117.1 fixed
suse enterprise server 15 SP2	1.8.0.462-150000.3.109.1 fixed
suse enterprise server 15 SP3	1.8.0.462-150000.3.109.1 fixed
suse enterprise server 15 SP4	1.8.0.462-150000.3.109.1 fixed
suse enterprise server 15 SP5	1.8.0.462-150000.3.109.1 fixed
suse enterprise server 15 SP6	1.8.0.462-150000.3.109.1 fixed
suse enterprise server 15 SP7	1.8.0.462-150000.3.109.1 fixed

java-1_8_0-openjdk-devel

suse enterprise sap 15 SP4	1.8.0.462-150000.3.109.1 fixed
suse enterprise sap 15 SP5	1.8.0.462-150000.3.109.1 fixed
suse enterprise sap 15 SP6	1.8.0.462-150000.3.109.1 fixed
suse enterprise sap 15 SP7	1.8.0.462-150000.3.109.1 fixed
suse enterprise server 12 SP3	1.8.0.462-27.117.1 fixed
suse enterprise server 12 SP5	1.8.0.462-27.117.1 fixed
suse enterprise server 15 SP2	1.8.0.462-150000.3.109.1 fixed
suse enterprise server 15 SP3	1.8.0.462-150000.3.109.1 fixed
suse enterprise server 15 SP4	1.8.0.462-150000.3.109.1 fixed
suse enterprise server 15 SP5	1.8.0.462-150000.3.109.1 fixed
suse enterprise server 15 SP6	1.8.0.462-150000.3.109.1 fixed
suse enterprise server 15 SP7	1.8.0.462-150000.3.109.1 fixed

java-1_8_0-openjdk-headless

suse enterprise sap 15 SP4	1.8.0.462-150000.3.109.1 fixed
suse enterprise sap 15 SP5	1.8.0.462-150000.3.109.1 fixed
suse enterprise sap 15 SP6	1.8.0.462-150000.3.109.1 fixed
suse enterprise sap 15 SP7	1.8.0.462-150000.3.109.1 fixed
suse enterprise server 12 SP3	1.8.0.462-27.117.1 fixed
suse enterprise server 12 SP5	1.8.0.462-27.117.1 fixed
suse enterprise server 15 SP2	1.8.0.462-150000.3.109.1 fixed
suse enterprise server 15 SP3	1.8.0.462-150000.3.109.1 fixed
suse enterprise server 15 SP4	1.8.0.462-150000.3.109.1 fixed
suse enterprise server 15 SP5	1.8.0.462-150000.3.109.1 fixed
suse enterprise server 15 SP6	1.8.0.462-150000.3.109.1 fixed
suse enterprise server 15 SP7	1.8.0.462-150000.3.109.1 fixed

java-21-openjdk

suse enterprise desktop 15 SP6	21.0.8.0-150600.3.15.1 fixed
suse enterprise desktop 15 SP7	21.0.8.0-150600.3.15.1 fixed
suse enterprise sap 15 SP6	21.0.8.0-150600.3.15.1 fixed
suse enterprise sap 15 SP7	21.0.8.0-150600.3.15.1 fixed
suse enterprise server 15 SP6	21.0.8.0-150600.3.15.1 fixed
suse enterprise server 15 SP7	21.0.8.0-150600.3.15.1 fixed

java-21-openjdk-demo

suse enterprise desktop 15 SP6	21.0.8.0-150600.3.15.1 fixed
suse enterprise desktop 15 SP7	21.0.8.0-150600.3.15.1 fixed
suse enterprise sap 15 SP6	21.0.8.0-150600.3.15.1 fixed
suse enterprise sap 15 SP7	21.0.8.0-150600.3.15.1 fixed
suse enterprise server 15 SP6	21.0.8.0-150600.3.15.1 fixed
suse enterprise server 15 SP7	21.0.8.0-150600.3.15.1 fixed

java-21-openjdk-devel

suse enterprise desktop 15 SP6	21.0.8.0-150600.3.15.1 fixed
suse enterprise desktop 15 SP7	21.0.8.0-150600.3.15.1 fixed
suse enterprise sap 15 SP6	21.0.8.0-150600.3.15.1 fixed
suse enterprise sap 15 SP7	21.0.8.0-150600.3.15.1 fixed
suse enterprise server 15 SP6	21.0.8.0-150600.3.15.1 fixed
suse enterprise server 15 SP7	21.0.8.0-150600.3.15.1 fixed

java-21-openjdk-headless

suse enterprise desktop 15 SP6	21.0.8.0-150600.3.15.1 fixed
suse enterprise desktop 15 SP7	21.0.8.0-150600.3.15.1 fixed
suse enterprise sap 15 SP6	21.0.8.0-150600.3.15.1 fixed
suse enterprise sap 15 SP7	21.0.8.0-150600.3.15.1 fixed
suse enterprise server 15 SP6	21.0.8.0-150600.3.15.1 fixed
suse enterprise server 15 SP7	21.0.8.0-150600.3.15.1 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

java-1.8.0-ibm

RHEL 8

1:1.8.0.8.50-1.el8_10

fixed

java-1.8.0-ibm-demo

RHEL 8

1:1.8.0.8.50-1.el8_10

fixed

java-1.8.0-ibm-devel

RHEL 8

1:1.8.0.8.50-1.el8_10

fixed

java-1.8.0-ibm-headless

RHEL 8

1:1.8.0.8.50-1.el8_10

fixed

java-1.8.0-ibm-jdbc

RHEL 8

1:1.8.0.8.50-1.el8_10

fixed

java-1.8.0-ibm-plugin

RHEL 8

1:1.8.0.8.50-1.el8_10

fixed

java-1.8.0-ibm-src

RHEL 8

1:1.8.0.8.50-1.el8_10

fixed

java-1.8.0-ibm-webstart

RHEL 8

1:1.8.0.8.50-1.el8_10

fixed

java-1.8.0-openjdk

RHEL 8	1:1.8.0.462.b08-2.el8 fixed
RHEL 8.2 AUS	1:1.8.0.462.b08-1.el8_2 fixed
RHEL 8.4 AUS	1:1.8.0.462.b08-1.el8_4 fixed
RHEL 8.6 AUS	1:1.8.0.462.b08-1.el8_6 fixed
RHEL 8.6 E4S	1:1.8.0.462.b08-1.el8_6 fixed
RHEL 8.6 TUS	1:1.8.0.462.b08-1.el8_6 fixed
RHEL 9	1:1.8.0.462.b08-3.el9 fixed

java-1.8.0-openjdk-accessibility

RHEL 8	1:1.8.0.462.b08-2.el8 fixed
RHEL 8.2 AUS	1:1.8.0.462.b08-1.el8_2 fixed
RHEL 8.4 AUS	1:1.8.0.462.b08-1.el8_4 fixed
RHEL 8.6 AUS	1:1.8.0.462.b08-1.el8_6 fixed
RHEL 8.6 E4S	1:1.8.0.462.b08-1.el8_6 fixed
RHEL 8.6 TUS	1:1.8.0.462.b08-1.el8_6 fixed

java-1.8.0-openjdk-accessibility-fastdebug

RHEL 8

1:1.8.0.462.b08-2.el8

fixed

java-1.8.0-openjdk-accessibility-slowdebug

RHEL 8

1:1.8.0.462.b08-2.el8

fixed

java-1.8.0-openjdk-demo

RHEL 8	1:1.8.0.462.b08-2.el8 fixed
RHEL 8.2 AUS	1:1.8.0.462.b08-1.el8_2 fixed
RHEL 8.4 AUS	1:1.8.0.462.b08-1.el8_4 fixed
RHEL 8.6 AUS	1:1.8.0.462.b08-1.el8_6 fixed
RHEL 8.6 E4S	1:1.8.0.462.b08-1.el8_6 fixed
RHEL 8.6 TUS	1:1.8.0.462.b08-1.el8_6 fixed
RHEL 9	1:1.8.0.462.b08-3.el9 fixed

java-1.8.0-openjdk-demo-fastdebug

RHEL 8	1:1.8.0.462.b08-2.el8 fixed
RHEL 9	1:1.8.0.462.b08-3.el9 fixed

java-1.8.0-openjdk-demo-slowdebug

RHEL 8	1:1.8.0.462.b08-2.el8 fixed
RHEL 9	1:1.8.0.462.b08-3.el9 fixed

java-1.8.0-openjdk-devel

RHEL 8	1:1.8.0.462.b08-2.el8 fixed
RHEL 8.2 AUS	1:1.8.0.462.b08-1.el8_2 fixed
RHEL 8.4 AUS	1:1.8.0.462.b08-1.el8_4 fixed
RHEL 8.6 AUS	1:1.8.0.462.b08-1.el8_6 fixed
RHEL 8.6 E4S	1:1.8.0.462.b08-1.el8_6 fixed
RHEL 8.6 TUS	1:1.8.0.462.b08-1.el8_6 fixed
RHEL 9	1:1.8.0.462.b08-3.el9 fixed

java-1.8.0-openjdk-devel-fastdebug

RHEL 8	1:1.8.0.462.b08-2.el8 fixed
RHEL 9	1:1.8.0.462.b08-3.el9 fixed

java-1.8.0-openjdk-devel-slowdebug

RHEL 8	1:1.8.0.462.b08-2.el8 fixed
RHEL 9	1:1.8.0.462.b08-3.el9 fixed

java-1.8.0-openjdk-fastdebug

RHEL 8	1:1.8.0.462.b08-2.el8 fixed
RHEL 9	1:1.8.0.462.b08-3.el9 fixed

java-1.8.0-openjdk-headless

RHEL 8	1:1.8.0.462.b08-2.el8 fixed
RHEL 8.2 AUS	1:1.8.0.462.b08-1.el8_2 fixed
RHEL 8.4 AUS	1:1.8.0.462.b08-1.el8_4 fixed
RHEL 8.6 AUS	1:1.8.0.462.b08-1.el8_6 fixed
RHEL 8.6 E4S	1:1.8.0.462.b08-1.el8_6 fixed
RHEL 8.6 TUS	1:1.8.0.462.b08-1.el8_6 fixed
RHEL 9	1:1.8.0.462.b08-3.el9 fixed

java-1.8.0-openjdk-headless-fastdebug

RHEL 8	1:1.8.0.462.b08-2.el8 fixed
RHEL 9	1:1.8.0.462.b08-3.el9 fixed

java-1.8.0-openjdk-headless-slowdebug

RHEL 8	1:1.8.0.462.b08-2.el8 fixed
RHEL 9	1:1.8.0.462.b08-3.el9 fixed

java-1.8.0-openjdk-javadoc

RHEL 8	1:1.8.0.462.b08-2.el8 fixed
RHEL 8.2 AUS	1:1.8.0.462.b08-1.el8_2 fixed
RHEL 8.4 AUS	1:1.8.0.462.b08-1.el8_4 fixed
RHEL 8.6 AUS	1:1.8.0.462.b08-1.el8_6 fixed
RHEL 8.6 E4S	1:1.8.0.462.b08-1.el8_6 fixed
RHEL 8.6 TUS	1:1.8.0.462.b08-1.el8_6 fixed
RHEL 9	1:1.8.0.462.b08-3.el9 fixed

java-1.8.0-openjdk-javadoc-zip

RHEL 8	1:1.8.0.462.b08-2.el8 fixed
RHEL 8.2 AUS	1:1.8.0.462.b08-1.el8_2 fixed
RHEL 8.4 AUS	1:1.8.0.462.b08-1.el8_4 fixed
RHEL 8.6 AUS	1:1.8.0.462.b08-1.el8_6 fixed
RHEL 8.6 E4S	1:1.8.0.462.b08-1.el8_6 fixed
RHEL 8.6 TUS	1:1.8.0.462.b08-1.el8_6 fixed
RHEL 9	1:1.8.0.462.b08-3.el9 fixed

java-1.8.0-openjdk-slowdebug

RHEL 8	1:1.8.0.462.b08-2.el8 fixed
RHEL 9	1:1.8.0.462.b08-3.el9 fixed

java-1.8.0-openjdk-src

RHEL 8	1:1.8.0.462.b08-2.el8 fixed
RHEL 8.2 AUS	1:1.8.0.462.b08-1.el8_2 fixed
RHEL 8.4 AUS	1:1.8.0.462.b08-1.el8_4 fixed
RHEL 8.6 AUS	1:1.8.0.462.b08-1.el8_6 fixed
RHEL 8.6 E4S	1:1.8.0.462.b08-1.el8_6 fixed
RHEL 8.6 TUS	1:1.8.0.462.b08-1.el8_6 fixed
RHEL 9	1:1.8.0.462.b08-3.el9 fixed

java-1.8.0-openjdk-src-fastdebug

RHEL 8	1:1.8.0.462.b08-2.el8 fixed
RHEL 9	1:1.8.0.462.b08-3.el9 fixed

java-1.8.0-openjdk-src-slowdebug

RHEL 8	1:1.8.0.462.b08-2.el8 fixed
RHEL 9	1:1.8.0.462.b08-3.el9 fixed

java-17-openjdk

RHEL 8	1:17.0.16.0.8-2.el8 fixed
RHEL 8.4 AUS	1:17.0.16.0.8-1.el8_4 fixed
RHEL 8.6 AUS	1:17.0.16.0.8-1.el8_6 fixed
RHEL 8.6 E4S	1:17.0.16.0.8-1.el8_6 fixed
RHEL 8.6 TUS	1:17.0.16.0.8-1.el8_6 fixed
RHEL 9	1:17.0.16.0.8-2.el9 fixed

java-17-openjdk-demo

RHEL 8	1:17.0.16.0.8-2.el8 fixed
RHEL 8.4 AUS	1:17.0.16.0.8-1.el8_4 fixed
RHEL 8.6 AUS	1:17.0.16.0.8-1.el8_6 fixed
RHEL 8.6 E4S	1:17.0.16.0.8-1.el8_6 fixed
RHEL 8.6 TUS	1:17.0.16.0.8-1.el8_6 fixed
RHEL 9	1:17.0.16.0.8-2.el9 fixed

java-17-openjdk-demo-fastdebug

RHEL 8	1:17.0.16.0.8-2.el8 fixed
RHEL 9	1:17.0.16.0.8-2.el9 fixed

java-17-openjdk-demo-slowdebug

RHEL 8	1:17.0.16.0.8-2.el8 fixed
RHEL 9	1:17.0.16.0.8-2.el9 fixed

java-17-openjdk-devel

RHEL 8	1:17.0.16.0.8-2.el8 fixed
RHEL 8.4 AUS	1:17.0.16.0.8-1.el8_4 fixed
RHEL 8.6 AUS	1:17.0.16.0.8-1.el8_6 fixed
RHEL 8.6 E4S	1:17.0.16.0.8-1.el8_6 fixed
RHEL 8.6 TUS	1:17.0.16.0.8-1.el8_6 fixed
RHEL 9	1:17.0.16.0.8-2.el9 fixed

java-17-openjdk-devel-fastdebug

RHEL 8	1:17.0.16.0.8-2.el8 fixed
RHEL 9	1:17.0.16.0.8-2.el9 fixed

java-17-openjdk-devel-slowdebug

RHEL 8	1:17.0.16.0.8-2.el8 fixed
RHEL 9	1:17.0.16.0.8-2.el9 fixed

java-17-openjdk-fastdebug

RHEL 8	1:17.0.16.0.8-2.el8 fixed
RHEL 9	1:17.0.16.0.8-2.el9 fixed

java-17-openjdk-headless

RHEL 8	1:17.0.16.0.8-2.el8 fixed
RHEL 8.4 AUS	1:17.0.16.0.8-1.el8_4 fixed
RHEL 8.6 AUS	1:17.0.16.0.8-1.el8_6 fixed
RHEL 8.6 E4S	1:17.0.16.0.8-1.el8_6 fixed
RHEL 8.6 TUS	1:17.0.16.0.8-1.el8_6 fixed
RHEL 9	1:17.0.16.0.8-2.el9 fixed

java-17-openjdk-headless-fastdebug

RHEL 8	1:17.0.16.0.8-2.el8 fixed
RHEL 9	1:17.0.16.0.8-2.el9 fixed

java-17-openjdk-headless-slowdebug

RHEL 8	1:17.0.16.0.8-2.el8 fixed
RHEL 9	1:17.0.16.0.8-2.el9 fixed

java-17-openjdk-javadoc

RHEL 8	1:17.0.16.0.8-2.el8 fixed
RHEL 8.4 AUS	1:17.0.16.0.8-1.el8_4 fixed
RHEL 8.6 AUS	1:17.0.16.0.8-1.el8_6 fixed
RHEL 8.6 E4S	1:17.0.16.0.8-1.el8_6 fixed
RHEL 8.6 TUS	1:17.0.16.0.8-1.el8_6 fixed
RHEL 9	1:17.0.16.0.8-2.el9 fixed

java-17-openjdk-javadoc-zip

RHEL 8	1:17.0.16.0.8-2.el8 fixed
RHEL 8.4 AUS	1:17.0.16.0.8-1.el8_4 fixed
RHEL 8.6 AUS	1:17.0.16.0.8-1.el8_6 fixed
RHEL 8.6 E4S	1:17.0.16.0.8-1.el8_6 fixed
RHEL 8.6 TUS	1:17.0.16.0.8-1.el8_6 fixed
RHEL 9	1:17.0.16.0.8-2.el9 fixed

java-17-openjdk-jmods

RHEL 8	1:17.0.16.0.8-2.el8 fixed
RHEL 8.4 AUS	1:17.0.16.0.8-1.el8_4 fixed
RHEL 8.6 AUS	1:17.0.16.0.8-1.el8_6 fixed
RHEL 8.6 E4S	1:17.0.16.0.8-1.el8_6 fixed
RHEL 8.6 TUS	1:17.0.16.0.8-1.el8_6 fixed
RHEL 9	1:17.0.16.0.8-2.el9 fixed

java-17-openjdk-jmods-fastdebug

RHEL 8	1:17.0.16.0.8-2.el8 fixed
RHEL 9	1:17.0.16.0.8-2.el9 fixed

java-17-openjdk-jmods-slowdebug

RHEL 8	1:17.0.16.0.8-2.el8 fixed
RHEL 9	1:17.0.16.0.8-2.el9 fixed

java-17-openjdk-slowdebug

RHEL 8	1:17.0.16.0.8-2.el8 fixed
RHEL 9	1:17.0.16.0.8-2.el9 fixed

java-17-openjdk-src

RHEL 8	1:17.0.16.0.8-2.el8 fixed
RHEL 8.4 AUS	1:17.0.16.0.8-1.el8_4 fixed
RHEL 8.6 AUS	1:17.0.16.0.8-1.el8_6 fixed
RHEL 8.6 E4S	1:17.0.16.0.8-1.el8_6 fixed
RHEL 8.6 TUS	1:17.0.16.0.8-1.el8_6 fixed
RHEL 9	1:17.0.16.0.8-2.el9 fixed

java-17-openjdk-src-fastdebug

RHEL 8	1:17.0.16.0.8-2.el8 fixed
RHEL 9	1:17.0.16.0.8-2.el9 fixed

java-17-openjdk-src-slowdebug

RHEL 8	1:17.0.16.0.8-2.el8 fixed
RHEL 9	1:17.0.16.0.8-2.el9 fixed

java-17-openjdk-static-libs

RHEL 8	1:17.0.16.0.8-2.el8 fixed
RHEL 8.4 AUS	1:17.0.16.0.8-1.el8_4 fixed
RHEL 8.6 AUS	1:17.0.16.0.8-1.el8_6 fixed
RHEL 8.6 E4S	1:17.0.16.0.8-1.el8_6 fixed
RHEL 8.6 TUS	1:17.0.16.0.8-1.el8_6 fixed
RHEL 9	1:17.0.16.0.8-2.el9 fixed

java-17-openjdk-static-libs-fastdebug

RHEL 8	1:17.0.16.0.8-2.el8 fixed
RHEL 9	1:17.0.16.0.8-2.el9 fixed

java-17-openjdk-static-libs-slowdebug

RHEL 8	1:17.0.16.0.8-2.el8 fixed
RHEL 9	1:17.0.16.0.8-2.el9 fixed

java-21-openjdk

RHEL 8	1:21.0.8.0.9-1.el8 fixed
RHEL 9	1:21.0.8.0.9-1.el9 fixed

java-21-openjdk-demo

RHEL 8	1:21.0.8.0.9-1.el8 fixed
RHEL 9	1:21.0.8.0.9-1.el9 fixed

java-21-openjdk-demo-fastdebug

RHEL 8	1:21.0.8.0.9-1.el8 fixed
RHEL 9	1:21.0.8.0.9-1.el9 fixed

java-21-openjdk-demo-slowdebug

RHEL 8	1:21.0.8.0.9-1.el8 fixed
RHEL 9	1:21.0.8.0.9-1.el9 fixed

java-21-openjdk-devel

RHEL 8	1:21.0.8.0.9-1.el8 fixed
RHEL 9	1:21.0.8.0.9-1.el9 fixed

java-21-openjdk-devel-fastdebug

RHEL 8	1:21.0.8.0.9-1.el8 fixed
RHEL 9	1:21.0.8.0.9-1.el9 fixed

java-21-openjdk-devel-slowdebug

RHEL 8	1:21.0.8.0.9-1.el8 fixed
RHEL 9	1:21.0.8.0.9-1.el9 fixed

java-21-openjdk-fastdebug

RHEL 8	1:21.0.8.0.9-1.el8 fixed
RHEL 9	1:21.0.8.0.9-1.el9 fixed

java-21-openjdk-headless

RHEL 8	1:21.0.8.0.9-1.el8 fixed
RHEL 9	1:21.0.8.0.9-1.el9 fixed

java-21-openjdk-headless-fastdebug

RHEL 8	1:21.0.8.0.9-1.el8 fixed
RHEL 9	1:21.0.8.0.9-1.el9 fixed

java-21-openjdk-headless-slowdebug

RHEL 8	1:21.0.8.0.9-1.el8 fixed
RHEL 9	1:21.0.8.0.9-1.el9 fixed

java-21-openjdk-javadoc

RHEL 8	1:21.0.8.0.9-1.el8 fixed
RHEL 9	1:21.0.8.0.9-1.el9 fixed

java-21-openjdk-javadoc-zip

RHEL 8	1:21.0.8.0.9-1.el8 fixed
RHEL 9	1:21.0.8.0.9-1.el9 fixed

java-21-openjdk-jmods

RHEL 8	1:21.0.8.0.9-1.el8 fixed
RHEL 9	1:21.0.8.0.9-1.el9 fixed

java-21-openjdk-jmods-fastdebug

RHEL 8	1:21.0.8.0.9-1.el8 fixed
RHEL 9	1:21.0.8.0.9-1.el9 fixed

java-21-openjdk-jmods-slowdebug

RHEL 8	1:21.0.8.0.9-1.el8 fixed
RHEL 9	1:21.0.8.0.9-1.el9 fixed

java-21-openjdk-slowdebug

RHEL 8	1:21.0.8.0.9-1.el8 fixed
RHEL 9	1:21.0.8.0.9-1.el9 fixed

java-21-openjdk-src

RHEL 8	1:21.0.8.0.9-1.el8 fixed
RHEL 9	1:21.0.8.0.9-1.el9 fixed

java-21-openjdk-src-fastdebug

RHEL 8	1:21.0.8.0.9-1.el8 fixed
RHEL 9	1:21.0.8.0.9-1.el9 fixed

java-21-openjdk-src-slowdebug

RHEL 8	1:21.0.8.0.9-1.el8 fixed
RHEL 9	1:21.0.8.0.9-1.el9 fixed

java-21-openjdk-static-libs

RHEL 8	1:21.0.8.0.9-1.el8 fixed
RHEL 9	1:21.0.8.0.9-1.el9 fixed

java-21-openjdk-static-libs-fastdebug

RHEL 8	1:21.0.8.0.9-1.el8 fixed
RHEL 9	1:21.0.8.0.9-1.el9 fixed

java-21-openjdk-static-libs-slowdebug

RHEL 8	1:21.0.8.0.9-1.el8 fixed
RHEL 9	1:21.0.8.0.9-1.el9 fixed

References

https://www.oracle.com/security-alerts/cpujul2025.html

https://lists.debian.org/debian-lts-announce/2025/07/msg00011.html

https://lists.debian.org/debian-lts-announce/2025/08/msg00014.html