diff --git a/info.yml b/info.yml
index 0c14a09..869c4c3 100644
--- a/info.yml
+++ b/info.yml
@@ -1,7 +1,7 @@
 name: openjdk-25
 description: OpenJDK Java 25
-version: 25.0.1+8
-revision: 3
+version: 25.0.3+9
+revision: 1
 url: https://openjdk.org/
 license: GPL2-only WITH Classpath-exception-2.0
 maintainers:
@@ -47,4 +47,4 @@ downloads:
   - url: https://github.com/openjdk/jdk${BPM_PKG_VERSION%%.*}u/archive/jdk-${BPM_PKG_VERSION}.tar.gz
     extract_to: ${BPM_SOURCE}
     extract_strip_components: 1
-    checksum: d530e3d08ebda8ddb13431e3b54eaaef2329704d4e096cbf815353fcb8646a83
+    checksum: 33991482d2e08eaa865212239db7815ad627f2449a836e4a4362301fc1893e12
diff --git a/recipe.sh b/recipe.sh
index 0b80299..e43f769 100644
--- a/recipe.sh
+++ b/recipe.sh
@@ -11,6 +11,9 @@ build() {
 
   bash configure --enable-unlimited-crypto                       \
                  --disable-warnings-as-errors                    \
+                 --with-extra-cflags="$CFLAGS"                   \
+                 --with-extra-cxxflags="$CXXFLAGS"               \
+                 --with-extra-ldflags="$LDFLAGS"                 \
                  --with-stdc++lib=dynamic                        \
                  --with-giflib=system                            \
                  --with-harfbuzz=system                          \
@@ -34,7 +37,7 @@ package() {
   chown -R root:root "$BPM_OUTPUT"/usr/lib/java/openjdk-${BPM_PKG_VERSION%%.*}
 
   # Symlink cacerts
-  ln -sf /etc/pki/tls/java/cacerts "$BPM_OUTPUT"/usr/lib/java/openjdk-${BPM_PKG_VERSION%%.*}/lib/security/cacerts
+  ln -sf /etc/ssl/certs/java/cacerts "$BPM_OUTPUT"/usr/lib/java/openjdk-${BPM_PKG_VERSION%%.*}/lib/security/cacerts
 
   # Install icons
   for size in 16 24 32 48; do