Advisories » MGASA-2025-0233

Updated java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk & java-latest-openjdk packages fix security vulnerabilities

Publication date: 16 Sep 2025
Modification date: 16 Sep 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-30749 , CVE-2025-30754 , CVE-2025-30761 , CVE-2025-50059 , CVE-2025-50106

Description

Better Glyph drawing. (CVE-2025-30749)
Enhance TLS protocol support. (CVE-2025-30754)
Improve scripting supports. (CVE-2025-30761)
Improve HTTP client header handling. (CVE-2025-50059)
Better Glyph drawing redux. (CVE-2025-50106)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=34487
• https://www.oracle.com/security-alerts/cpujul2025.html#AppendixJAVA
• https://access.redhat.com/errata/RHSA-2025:10862
• https://access.redhat.com/errata/RHSA-2025:10865
• https://access.redhat.com/errata/RHSA-2025:10867
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30749
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30754
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30761
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50059
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50106

SRPMS

9/core

• java-1.8.0-openjdk-1.8.0.462.b08-1.mga9
• java-11-openjdk-11.0.28.0.6-1.mga9
• java-17-openjdk-17.0.16.0.8-1.mga9
• java-latest-openjdk-24.0.2.0.12-1.rolling.1.mga9