RLSA-2025:10867

Описание

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

• JDK: Better Glyph drawing (CVE-2025-30749)
• JDK: Enhance TLS protocol support (CVE-2025-30754)
• JDK: Improve HTTP client header handling (CVE-2025-50059)
• JDK: Better Glyph drawing redux (CVE-2025-50106)

Bug Fix(es):

• In Rocky Linux 9 and Rocky Linux 10 systems, the default graphical display system is Wayland. The use of Wayland in these systems causes a failure in the traditional X11 method that java.awt.Robot uses to take a screen capture, producing a blank image. With this update, the RPM now recommends installing the PipeWire package, which the JDK can use to take screen captures in Wayland systems (Rocky Linux-102668, Rocky Linux-102669, Rocky Linux-102670, Rocky Linux-102672)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.