RHBA-2026:6267 - Bug Fix Advisory

Topic

The FIPS update of OpenJDK 25 for portable Linux builds is now available.

Description

The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit.

This release of the Red Hat build of OpenJDK 25 (25.0.2) for portable Linux fixes an issue discovered with the new FIPS implementation in OpenJDK 25:

• To effectively provide FIPS support, the Red Hat OpenJDK FIPS implementation needs to restrict the operations that security providers can perform. The new implementation of this filtering in OpenJDK 25 proved to be too restrictive and prevented the use of any third-party providers. With this update, we revert to the previous approach of allowing unrestricted third-party providers and trusting the end user to provide due diligence that these do not break FIPS compliance. (OPENJDK-4570)

It also updates the bundled versions of libpng and HarfBuzz to their latest versions (1.6.55 & 12.3.2) respectively.

Note that crypto policy and FIPS support is not enabled by default on portable Linux builds, because it depends on support provided by Red Hat Enterprise Linux. This functionality is enabled in the RPMs that are provided in Red Hat Enterprise Linux, which use this same portable build.

For further information, refer to the release notes linked to in the References section.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• OpenJDK Java (for Middleware) 1 x86_64

Fixes

CVEs

(none)

References

• https://docs.redhat.com/en/documentation/red_hat_build_of_openjdk/25/html/release_notes_for_red_hat_build_of_openjdk_25.0.1/index