ALSA-2025:0426

Source
https://errata.almalinux.org/8/ALSA-2025-0426.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2025:0426.json
JSON Data
https://api.test.osv.dev/v1/vulns/ALSA-2025:0426
Related
Published
2025-01-22T00:00:00Z
Modified
2025-01-23T14:02:42Z
Summary
Moderate: java-21-openjdk security update for AlmaLinux 8.10, 9.4 and 9.5
Details

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

  • JDK: Enhance array handling (CVE-2025-21502)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:8 / java-21-openjdk

Package

Name
java-21-openjdk
Purl
pkg:rpm/almalinux/java-21-openjdk

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:21.0.6.0.7-1.el8

AlmaLinux:8 / java-21-openjdk-demo

Package

Name
java-21-openjdk-demo
Purl
pkg:rpm/almalinux/java-21-openjdk-demo

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:21.0.6.0.7-1.el8

AlmaLinux:8 / java-21-openjdk-demo-fastdebug

Package

Name
java-21-openjdk-demo-fastdebug
Purl
pkg:rpm/almalinux/java-21-openjdk-demo-fastdebug

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:21.0.6.0.7-1.el8

AlmaLinux:8 / java-21-openjdk-demo-slowdebug

Package

Name
java-21-openjdk-demo-slowdebug
Purl
pkg:rpm/almalinux/java-21-openjdk-demo-slowdebug

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:21.0.6.0.7-1.el8

AlmaLinux:8 / java-21-openjdk-devel

Package

Name
java-21-openjdk-devel
Purl
pkg:rpm/almalinux/java-21-openjdk-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:21.0.6.0.7-1.el8

AlmaLinux:8 / java-21-openjdk-devel-fastdebug

Package

Name
java-21-openjdk-devel-fastdebug
Purl
pkg:rpm/almalinux/java-21-openjdk-devel-fastdebug

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:21.0.6.0.7-1.el8

AlmaLinux:8 / java-21-openjdk-devel-slowdebug

Package

Name
java-21-openjdk-devel-slowdebug
Purl
pkg:rpm/almalinux/java-21-openjdk-devel-slowdebug

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:21.0.6.0.7-1.el8

AlmaLinux:8 / java-21-openjdk-fastdebug

Package

Name
java-21-openjdk-fastdebug
Purl
pkg:rpm/almalinux/java-21-openjdk-fastdebug

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:21.0.6.0.7-1.el8

AlmaLinux:8 / java-21-openjdk-headless

Package

Name
java-21-openjdk-headless
Purl
pkg:rpm/almalinux/java-21-openjdk-headless

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:21.0.6.0.7-1.el8

AlmaLinux:8 / java-21-openjdk-headless-fastdebug

Package

Name
java-21-openjdk-headless-fastdebug
Purl
pkg:rpm/almalinux/java-21-openjdk-headless-fastdebug

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:21.0.6.0.7-1.el8

AlmaLinux:8 / java-21-openjdk-headless-slowdebug

Package

Name
java-21-openjdk-headless-slowdebug
Purl
pkg:rpm/almalinux/java-21-openjdk-headless-slowdebug

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:21.0.6.0.7-1.el8

AlmaLinux:8 / java-21-openjdk-javadoc

Package

Name
java-21-openjdk-javadoc
Purl
pkg:rpm/almalinux/java-21-openjdk-javadoc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:21.0.6.0.7-1.el8

AlmaLinux:8 / java-21-openjdk-javadoc-zip

Package

Name
java-21-openjdk-javadoc-zip
Purl
pkg:rpm/almalinux/java-21-openjdk-javadoc-zip

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:21.0.6.0.7-1.el8

AlmaLinux:8 / java-21-openjdk-jmods

Package

Name
java-21-openjdk-jmods
Purl
pkg:rpm/almalinux/java-21-openjdk-jmods

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:21.0.6.0.7-1.el8

AlmaLinux:8 / java-21-openjdk-jmods-fastdebug

Package

Name
java-21-openjdk-jmods-fastdebug
Purl
pkg:rpm/almalinux/java-21-openjdk-jmods-fastdebug

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:21.0.6.0.7-1.el8

AlmaLinux:8 / java-21-openjdk-jmods-slowdebug

Package

Name
java-21-openjdk-jmods-slowdebug
Purl
pkg:rpm/almalinux/java-21-openjdk-jmods-slowdebug

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:21.0.6.0.7-1.el8

AlmaLinux:8 / java-21-openjdk-slowdebug

Package

Name
java-21-openjdk-slowdebug
Purl
pkg:rpm/almalinux/java-21-openjdk-slowdebug

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:21.0.6.0.7-1.el8

AlmaLinux:8 / java-21-openjdk-src

Package

Name
java-21-openjdk-src
Purl
pkg:rpm/almalinux/java-21-openjdk-src

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:21.0.6.0.7-1.el8

AlmaLinux:8 / java-21-openjdk-src-fastdebug

Package

Name
java-21-openjdk-src-fastdebug
Purl
pkg:rpm/almalinux/java-21-openjdk-src-fastdebug

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:21.0.6.0.7-1.el8

AlmaLinux:8 / java-21-openjdk-src-slowdebug

Package

Name
java-21-openjdk-src-slowdebug
Purl
pkg:rpm/almalinux/java-21-openjdk-src-slowdebug

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:21.0.6.0.7-1.el8

AlmaLinux:8 / java-21-openjdk-static-libs

Package

Name
java-21-openjdk-static-libs
Purl
pkg:rpm/almalinux/java-21-openjdk-static-libs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:21.0.6.0.7-1.el8

AlmaLinux:8 / java-21-openjdk-static-libs-fastdebug

Package

Name
java-21-openjdk-static-libs-fastdebug
Purl
pkg:rpm/almalinux/java-21-openjdk-static-libs-fastdebug

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:21.0.6.0.7-1.el8

AlmaLinux:8 / java-21-openjdk-static-libs-slowdebug

Package

Name
java-21-openjdk-static-libs-slowdebug
Purl
pkg:rpm/almalinux/java-21-openjdk-static-libs-slowdebug

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:21.0.6.0.7-1.el8