DockerState

Home › Language runtimes › eclipse-temurin › 25-jre

eclipse-temurin:25-jre

OpenJDK builds from Eclipse Adoptium, tag 25-jre, built on Ubuntu 26.04. Pushed to Docker Hub 3 days ago.

Medium 44Low 4Starts as root4 platforms

117 MBdownload (compressed)
351 MBunpacked on disk
6filesystem layers
117packages
5,886files
docker pull eclipse-temurin:25-jreeclipse-temurin@sha256:ecdc0adb37bde1a281c4d245a3cd535004b1fc8322d560f5b09463b248c81df0

Size per platform

Compressed download size on Docker Hub for each architecture.

  • ppc64le121 MB
  • amd64117 MB
  • arm64115 MB
  • s390x115 MB

Where the bytes go

Unpacked bytes by directory in the final amd64 filesystem.

  • /opt/java200 MB
  • /usr/lib/x86_64-linux-gnu51 MB
  • /usr/bin43 MB
  • /usr/share/i18n16 MB
  • /usr/sbin5.0 MB
  • /var/lib3.6 MB
  • /usr/lib/locale3.4 MB
  • /usr/share/fonts3.4 MB
  • /usr/share/coreutils2.3 MB
  • /usr/share/doc1.9 MB

Layers

The 6 filesystem layers of the amd64 image, in build order, with each layer's compressed size and the build step that made it.

Full build steps
  1. 42 MBumoci raw add-layer --image /home/buildd/rockcraft-ubuntu-cc003627bc5bab71b42ff0f8e1a41f88/images/ubuntu:rockcraft-base /home/buildd/rockcraft-ubuntu-cc003627bc5bab71b42ff0f8e1a41f88/images/.temp_layer.9587.tar --tag 26.04
  2. 392 Bumoci raw add-layer --image /home/buildd/rockcraft-ubuntu-cc003627bc5bab71b42ff0f8e1a41f88/images/ubuntu:26.04 /home/buildd/rockcraft-ubuntu-cc003627bc5bab71b42ff0f8e1a41f88/images/.temp_layer.control_data.9587.tar
  3. 12 MBRUN /bin/sh -c set -eux; apt-get update; DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends fontconfig ca-certificates p11-kit tzdata locales ; echo "en_US.UTF-8 UTF-8" >> /etc/locale.gen; locale-gen en_US.UTF-8; rm -rf /var/lib/apt/lists/* # buildkit
  4. 63 MBRUN /bin/sh -c set -eux; ARCH="$(dpkg --print-architecture)"; case "${ARCH}" in amd64) ESUM='6fac98f0c8202efc3135a9e9e42aa61963ec42d1c5cbb40caf231e7b14a24ef6'; BINARY_URL='https://github.com/adoptium/temurin25-binaries/releases/download/jdk-25.0.5%2B8/OpenJDK25U-jre_x64_linux_hotspot_25.0.5_8.tar.gz'; ;; arm64) ESUM='963931723891302ebb2687178532c3d793d71e2577cd058061c7efb396140a86'; BINARY_URL='https://github.com/adoptium/temurin25-binaries/releases/download/jdk-25.0.5%2B8/OpenJDK25U-jre_aarch64_linux_hotspot_25.0.5_8.tar.gz';
  5. 32 BRUN /bin/sh -c set -eux; echo "Verifying install ..."; echo "java --version"; java --version; echo "Complete." # buildkit
  6. 2 kBCOPY --chmod=755 entrypoint.sh /__cacert_entrypoint.sh # buildkit

Known vulnerabilities

0Critical0 with a fix
0High0 with a fix
44Medium0 with a fix
4Low0 with a fix
0Unknown0 with a fix

48 findings across 117 packages; 0 have a fixed version upstream, so rebuilding or updating packages clears them. The rest have no fix released yet; distributions often mark these “will not fix” or “deferred” for issues that do not affect the packaged build.

SeverityVulnerabilityAffected packagesFixed in
Medium CVE-2025-66382libexpat: libexpat: Denial of service via crafted file processing libexpat1installed 2.7.4-1ubuntu0.2 no fix yet
Medium CVE-2026-102473dash: dash: Super-polynomial backtracking in pmatch when libc fnmatch is disabled dashinstalled 0.5.12-12ubuntu3 no fix yet
Medium CVE-2026-102474dash: dash: Heap out-of-bounds write in conv_escape via undersized Unicode escape reservation dashinstalled 0.5.12-12ubuntu3 no fix yet
Medium CVE-2026-103111pcre2: pcre2: Out-of-bounds write via crafted regular expression libpcre2-8-0installed 10.46-1build1 no fix yet
Medium CVE-2026-13757p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing libp11-kit0, p11-kit, p11-kit-modulesinstalled 0.26.2-2 no fix yet
Medium CVE-2026-18374glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string libc-bin, libc-gconv-modules-extra, libc6, localesinstalled 2.43-2ubuntu2.4 no fix yet
Medium CVE-2026-18477tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape tarinstalled 1.35+dfsg-4ubuntu0.4 no fix yet
Medium CVE-2026-18508tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite tarinstalled 1.35+dfsg-4ubuntu0.4 no fix yet
Medium CVE-2026-35341rust-coreutils: uutils coreutils mkfifo: Information disclosure via unauthorized file permission modification rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35344The dd utility in uutils coreutils suppresses errors during file trunc ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35345A vulnerability in the tail utility of uutils coreutils allows for the ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35348The sort utility in uutils coreutils is vulnerable to a process panic ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35350The cp utility in uutils coreutils fails to properly handle setuid and ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35351The mv utility in uutils coreutils fails to preserve file ownership du ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35352A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the m ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35354A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the mv ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35357The cp utility in uutils coreutils is vulnerable to an information dis ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35359A Time-of-Check to Time-of-Use (TOCTOU) vulnerability in the cp utilit ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35360The touch utility in uutils coreutils is vulnerable to a Time-of-Check ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35363A vulnerability in the rm utility of uutils coreutils allows the bypas ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35364rust-coreutils: uutils coreutils mv utility: Arbitrary File Overwrite via TOCTOU Race Condition rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35367The nohup utility in uutils coreutils creates its default output file, ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35368rust-coreutils: uutils coreutils: Privilege escalation and arbitrary code execution in chroot utility rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35370The id utility in uutils coreutils miscalculates the groups= section o ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35371The id utility in uutils coreutils exhibits incorrect behavior in its ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35373A logic error in the ln utility of uutils coreutils causes the program ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35374A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the sp ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35377A logic error in the env utility of uutils coreutils causes a failure ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-86145pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions libpcre2-8-0installed 10.46-1build1 no fix yet
Medium CVE-2026-89092glibc: nscd stack overflow leads to degraded DNS resolution libc-bin, libc-gconv-modules-extra, libc6, localesinstalled 2.43-2ubuntu2.4 no fix yet
Medium CVE-2026-89156PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback libpcre2-8-0installed 10.46-1build1 no fix yet
Medium CVE-2026-89157pcre2: PCRE2: Out-of-bounds write via large pattern input libpcre2-8-0installed 10.46-1build1 no fix yet
Medium CVE-2026-89158PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms libpcre2-8-0installed 10.46-1build1 no fix yet
Medium CVE-2026-89160pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching libpcre2-8-0installed 10.46-1build1 no fix yet
Medium CVE-2026-89161pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match libpcre2-8-0installed 10.46-1build1 no fix yet
Medium CVE-2026-89162pcre2: PCRE2: Information disclosure via pcre2_serialize_encode libpcre2-8-0installed 10.46-1build1 no fix yet
Low CVE-2024-56433shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise login.defs, passwdinstalled 1:4.17.4-2ubuntu3 no fix yet
Low CVE-2026-40228systemd: systemd-journald: Unintended output to user terminals via logger command libsystemd0, libudev1installed 259.9-0ubuntu0.1 no fix yet

Packages

Debian packages
106
Go modules
11

Image configuration

Base OS
Ubuntu 26.04
Default user
root (no USER set; the entrypoint may still drop privileges)
Entrypoint
/__cacert_entrypoint.sh
Command
—
Exposed ports
none
Image created
2026-10-29
amd64 digest
sha256:5bc8e1bda53531e3ccf4c0d930e39095b68baeabbc81864fffa68291e14a607e

Other Eclipse Temurin (Java) tags

eclipse-temurin:25-jdk429 MB unpacked · 151 MB downloadM 44L 12 eclipse-temurin:25-jre-alpine227 MB unpacked · 76 MB download✓ 0 known

Platform sizes and layers: Docker Hub API, checked 2026-11-01. Unpacked size, files and SBOM: measured 2026-10-31 from digest sha256:5bc8e1bda535. Vulnerabilities: Trivy re-scan 2026-11-01, database 2026-11-01. Methodology.