Alpine openjdk11 CVE-2025-30761

MEDIUM

N/A vendor:alpine

Information Disclosure

Lifecycle Timeline

Analysis Generated

May 27, 2026 - 22:43 vuln.today

DescriptionCVE.org

Alpine Linux: openjdk11 fixed in 11.0.28_p6-r0

AnalysisAI

OpenJDK 11 on Alpine Linux was patched in package version 11.0.28_p6-r0, addressing one or more unspecified vulnerabilities in the Java runtime. The vulnerability details, including attack vector, impact class, and affected functionality, are not disclosed in available intelligence - only the fix version is confirmed via the Alpine Linux vendor advisory. No public exploit has been identified at time of analysis, and the CVE is not listed in the CISA KEV catalog.

Technical ContextAI

OpenJDK 11 is the open-source implementation of Java SE 11, packaged for Alpine Linux (a musl libc-based, minimal Linux distribution commonly used in container environments). The Alpine package version 11.0.28_p6-r0 encodes the upstream OpenJDK version (11.0.28), a patch-set revision (p6), and the Alpine package revision (r0). Without a CWE identifier or CVSS vector, the root cause class - whether memory corruption, logic error, deserialization flaw, cryptographic weakness, or other - cannot be determined from available data. CVE-2025-30761 likely corresponds to one or more issues addressed in the OpenJDK 11.0.28 release cycle, potentially from Oracle's quarterly Critical Patch Update process, but this linkage is inferred, not confirmed.

Affected ProductsAI

Alpine Linux systems running the openjdk11 package at versions prior to 11.0.28_p6-r0 are affected. The exact upstream OpenJDK 11 version range vulnerable is not specified in available data beyond the implication that anything below 11.0.28 (Alpine packaging p6-r0) requires patching. No CPE string was provided. The fix is confirmed via the Alpine Linux vendor channel. Users on other Linux distributions running OpenJDK 11 should consult their respective distribution advisories, as the underlying vulnerability may affect non-Alpine builds as well.

RemediationAI

The primary remediation is to upgrade the Alpine Linux openjdk11 package to version 11.0.28_p6-r0 or later using the standard Alpine package manager: 'apk update && apk upgrade openjdk11'. This is a vendor-released patch confirmed by the Alpine advisory. For containerized workloads, rebuild container images from an updated Alpine base or openjdk11 layer. No specific workarounds are documented in available data - given the absence of CWE or attack vector information, generic compensating controls (e.g., network segmentation, disabling specific Java features) cannot be responsibly recommended without knowing what component is affected. Organizations running OpenJDK 11 on non-Alpine distributions should check upstream OpenJDK release notes for 11.0.28 and their distribution's security tracker for corresponding CVE coverage.