VDB
ALSA-2025%3A3845
ALSA-2025%3A3845
PUBLISHED
Record from OSV · Published April 16, 2025
Moderate: java-1.8.0-openjdk security update
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| java-1.8.0-openjdk-fastdebug | AlmaLinux:8 | 1.8.0.452, 1:1.8.0.452.b09-2.el8 |
| java-1.8.0-openjdk-src-fastdebug | AlmaLinux:9 | 1.8.0.452, 1:1.8.0.452.b09-2.el9 |
| java-1.8.0-openjdk-src-fastdebug | AlmaLinux:8 | 1.8.0.452, 1:1.8.0.452.b09-2.el8 |
| java-1.8.0-openjdk-devel | AlmaLinux:8 | 1.8.0.452, 1:1.8.0.452.b09-2.el8 |
| java-1.8.0-openjdk-headless-slowdebug | AlmaLinux:8 | 1.8.0.452, 1:1.8.0.452.b09-2.el8 |
| java-1.8.0-openjdk-headless-fastdebug | AlmaLinux:9 | 1.8.0.452, 1:1.8.0.452.b09-2.el9 |
| java-1.8.0-openjdk-demo | AlmaLinux:8 | 1.8.0.452, 1:1.8.0.452.b09-2.el8 |
| java-1.8.0-openjdk-devel-fastdebug | AlmaLinux:8 | 1.8.0.452, 1:1.8.0.452.b09-2.el8 |
| java-1.8.0-openjdk-javadoc-zip | AlmaLinux:8 | 1.8.0.452, 1:1.8.0.452.b09-2.el8 |
| java-1.8.0-openjdk | AlmaLinux:9 | 1.8.0.452, 1:1.8.0.452.b09-2.el9 |
| java-1.8.0-openjdk-headless-slowdebug | AlmaLinux:9 | 1.8.0.452, 1:1.8.0.452.b09-2.el9 |
| java-1.8.0-openjdk-accessibility-slowdebug | AlmaLinux:8 | 1.8.0.452, 1:1.8.0.452.b09-2.el8 |
25 more packages have a fixed version. See every fix in Lookup.
Affected products
| Vendor | Product | Versions |
|---|---|---|
| AlmaLinux:8 | java-1.8.0-openjdk-fastdebug | 0 |
| AlmaLinux:8 | java-1.8.0-openjdk-src-fastdebug | 0 |
| AlmaLinux:8 | java-1.8.0-openjdk-devel | 0 |
| AlmaLinux:9 | java-1.8.0-openjdk-headless-fastdebug | 0 |
| AlmaLinux:8 | java-1.8.0-openjdk-devel-fastdebug | 0 |
| AlmaLinux:8 | java-1.8.0-openjdk-javadoc-zip | 0 |
| AlmaLinux:9 | java-1.8.0-openjdk-headless-slowdebug | 0 |
| AlmaLinux:8 | java-1.8.0-openjdk-accessibility-slowdebug | 0 |
| AlmaLinux:8 | java-1.8.0-openjdk-headless | 0 |
| AlmaLinux:9 | java-1.8.0-openjdk-devel-fastdebug | 0 |
| AlmaLinux:9 | java-1.8.0-openjdk-src-fastdebug | 0 |
| AlmaLinux:8 | java-1.8.0-openjdk-accessibility-fastdebug | 0 |
| AlmaLinux:9 | java-1.8.0-openjdk-demo | 0 |
| AlmaLinux:8 | java-1.8.0-openjdk-javadoc | 0 |
| AlmaLinux:8 | java-1.8.0-openjdk-demo-slowdebug | 0 |
| AlmaLinux:8 | java-1.8.0-openjdk-devel-slowdebug | 0 |
| AlmaLinux:9 | java-1.8.0-openjdk-devel-slowdebug | 0 |
| AlmaLinux:9 | java-1.8.0-openjdk-javadoc-zip | 0 |
| AlmaLinux:8 | java-1.8.0-openjdk-slowdebug | 0 |
| AlmaLinux:8 | java-1.8.0-openjdk-demo-fastdebug | 0 |
…and 17 more
Timeline
- Apr 16, 2025 CVE Published
- Apr 22, 2025 CVE Updated
- Mar 6, 2026 Distribution Patch (3 in total, the first dated here)
- Apr 26, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln ALSA-2025%3A3845
vulnetix vdb fixes ALSA-2025%3A3845
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/ALSA-2025%253A3845/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://access.redhat.com/errata/RHSA-2025:3845 advisory
- https://access.redhat.com/security/cve/CVE-2025-21587 report
- https://access.redhat.com/security/cve/CVE-2025-30691 report
- https://access.redhat.com/security/cve/CVE-2025-30698 report
- https://errata.almalinux.org/8/ALSA-2025-3845.html advisory
- https://errata.almalinux.org/9/ALSA-2025-3845.html advisory