Summary
It was discovered that the Hotspot component of OpenJDK 17 did not properly
handle API access under certain circumstances. An unauthenticated attacker
could possibly use this issue to access unauthorized resources and expose
sensitive information.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | openjdk-17 | 17.0.14+7-1~20.04 |
| Ubuntu · 22.04 LTS 22.04:LTS | openjdk-17 | 17.0.14+7-1~22.04.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | openjdk-17 | 17.0.14+7-1~24.04 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | openjdk-17 | 17.0.14+7-1~18.04 |
Vulnerabilities 1
-
Medium 4.8
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
References
-
report
https://ubuntu.com/security/CVE-2025-21502