Red Hat Security Advisory: java-1.8.0-openjdk security update
The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * JDK: Enhance Path Factories (CVE-2025-53066) * JDK: Enhance Certificate Handling (CVE-2025-53057) Bug Fix(es): * Since the 8.8 release of Red Hat Enterprise Linux 8 and the 9.2 release of Red Hat Enterprise Linux 9, OpenJDK 8 has used a single build repackaged for each major Red Hat Enterprise Linux release. With this release, this same build is now also used by the following older releases: 8.2, 8.4, 8.6, and 9.0. On Red Hat Enterprise Linux 8.2 systems, this means that OpenJDK's FIPS mode will now be enabled by default when the system is in FIPS mode. To revert to the previous behaviour, use -Dcom.redhat.fips=false (RHEL-118777, RHEL-118778, RHEL-118779, RHEL-118782) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
AI Analysis
Technical Summary
The Red Hat Security Advisory RHSA-2025:18815 provides a security update for java-1.8.0-openjdk packages that supply OpenJDK 8 JRE and JDK. It fixes two vulnerabilities: CVE-2025-53057, which enhances certificate handling, and CVE-2025-53066, which enhances path factories. The update consolidates OpenJDK 8 builds across multiple RHEL 8 and 9 releases, including older versions such as 8.2, 8.4, 8.6, and 9.0. On RHEL 8.2 systems, this causes OpenJDK's FIPS mode to be enabled by default when the system is in FIPS mode; this behavior can be reverted by setting -Dcom.redhat.fips=false. The advisory rates the security impact as moderate and does not provide a CVSS score. No known exploits in the wild have been reported. The update is available for a wide range of RHEL 8 and 9 variants and architectures.
Potential Impact
The vulnerabilities addressed improve security in certificate handling and path factory mechanisms within OpenJDK 8, reducing potential risks related to these components. The update also changes default behavior for FIPS mode on certain RHEL 8.2 systems, which may affect cryptographic operations. The overall security impact is rated moderate by Red Hat. No known active exploitation has been reported.
Mitigation Recommendations
A security update is available from Red Hat for java-1.8.0-openjdk packages across multiple RHEL 8 and 9 versions and architectures. Users should apply this update after ensuring all prior relevant errata are installed. For systems where the new default FIPS mode behavior on RHEL 8.2 is undesired, the previous behavior can be restored by setting the Java option -Dcom.redhat.fips=false. Refer to Red Hat's official advisory RHSA-2025:18815 and the linked article https://access.redhat.com/articles/11258 for detailed update instructions.
Red Hat Security Advisory: java-1.8.0-openjdk security update
Description
The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * JDK: Enhance Path Factories (CVE-2025-53066) * JDK: Enhance Certificate Handling (CVE-2025-53057) Bug Fix(es): * Since the 8.8 release of Red Hat Enterprise Linux 8 and the 9.2 release of Red Hat Enterprise Linux 9, OpenJDK 8 has used a single build repackaged for each major Red Hat Enterprise Linux release. With this release, this same build is now also used by the following older releases: 8.2, 8.4, 8.6, and 9.0. On Red Hat Enterprise Linux 8.2 systems, this means that OpenJDK's FIPS mode will now be enabled by default when the system is in FIPS mode. To revert to the previous behaviour, use -Dcom.redhat.fips=false (RHEL-118777, RHEL-118778, RHEL-118779, RHEL-118782) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected software
pkg:rpm/redhat/java-1.8.0-openjdkRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Red Hat Security Advisory RHSA-2025:18815 provides a security update for java-1.8.0-openjdk packages that supply OpenJDK 8 JRE and JDK. It fixes two vulnerabilities: CVE-2025-53057, which enhances certificate handling, and CVE-2025-53066, which enhances path factories. The update consolidates OpenJDK 8 builds across multiple RHEL 8 and 9 releases, including older versions such as 8.2, 8.4, 8.6, and 9.0. On RHEL 8.2 systems, this causes OpenJDK's FIPS mode to be enabled by default when the system is in FIPS mode; this behavior can be reverted by setting -Dcom.redhat.fips=false. The advisory rates the security impact as moderate and does not provide a CVSS score. No known exploits in the wild have been reported. The update is available for a wide range of RHEL 8 and 9 variants and architectures.
Potential Impact
The vulnerabilities addressed improve security in certificate handling and path factory mechanisms within OpenJDK 8, reducing potential risks related to these components. The update also changes default behavior for FIPS mode on certain RHEL 8.2 systems, which may affect cryptographic operations. The overall security impact is rated moderate by Red Hat. No known active exploitation has been reported.
Mitigation Recommendations
A security update is available from Red Hat for java-1.8.0-openjdk packages across multiple RHEL 8 and 9 versions and architectures. Users should apply this update after ensuring all prior relevant errata are installed. For systems where the new default FIPS mode behavior on RHEL 8.2 is undesired, the previous behavior can be restored by setting the Java option -Dcom.redhat.fips=false. Refer to Red Hat's official advisory RHSA-2025:18815 and the linked article https://access.redhat.com/articles/11258 for detailed update instructions.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:18815
- Cve Count
- 2
- Additional Cves
- ["CVE-2025-53066"]
- Cvss Version
- null
Threat ID: 6a3da1df4853345fc182b417
Added to database: 06/25/2026, 21:47:11 UTC
Last enriched: 06/25/2026, 22:26:53 UTC
Last updated: 07/02/2026, 20:51:17 UTC
Views: 14
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.