This advisory covers security fixes in the OpenJDK 25 packages for Red Hat Enterprise Linux 10, specifically addressing three vulnerabilities: CVE-2025-53066 (path factories enhancement), CVE-2025-53057 (certificate handling enhancement), and CVE-2025-61748 (string handling enhancement). The vulnerabilities are rated as moderate impact by Red Hat Product Security. The advisory does not provide CVSS scores but references the CVE pages for detailed information. The update is distributed as part of Red Hat Enterprise Linux 10 and related CodeReady Linux Builder products. The advisory notes that FIPS support is not yet included in this OpenJDK 25 package but is expected in a future update. No known exploits in the wild are reported. The vendor recommends applying the update after installing all previous relevant errata.

The vulnerabilities addressed affect the OpenJDK 25 Java Runtime Environment and Software Development Kit, potentially impacting applications relying on path factories, certificate handling, and string processing. The security impact is rated moderate by Red Hat. No known exploits in the wild have been reported. The advisory does not specify detailed impact scenarios or CVSS scores.

A security update for java-25-openjdk is available for Red Hat Enterprise Linux 10 and related products. Users should apply this update after ensuring all previously released errata relevant to their system have been installed. Detailed instructions for applying the update are available from Red Hat's official documentation. No additional mitigation steps are indicated by the vendor.