Summary
It was discovered that the Hotspot component of OpenJDK 23 did not properly
handle API access under certain circumstances. An unauthenticated attacker
could possibly use this issue to access unauthorized resources and expose
sensitive information.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 24.10 | openjdk-23 | 23.0.2+7-1ubuntu1~24.10 |
References
-
report
https://ubuntu.com/security/CVE-2025-21502