Skip to content
OpenAdvisories
High USN-7482-1 3 CVEs

openjdk-17 vulnerabilities

Published May 6, 2025 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

Alicja Kario discovered that the JSSE component of OpenJDK 17 incorrectly
handled RSA padding. An Attacker could possibly use this issue to obtain
sensitive information. (CVE-2025-21587)

It was discovered that the Compiler component of OpenJDK 17 incorrectly
handled compiler transformations. An attacker could possibly use this
issue to cause a denial of service or execute arbitrary code.
(CVE-2025-30691)

It was discovered that the 2D component of OpenJDK 17 did not properly
manage memory under certain circumstances. An attacker could possibly use
this issue to cause a denial of service or execute arbitrary code.
(CVE-2025-30698)

In addition to security fixes, the updated packages contain bug fixes, new
features, and possibly incompatible changes.

Please see the following for more information:
https://openjdk.org/groups/vulnerability/advisories/2025-04-15

Fixed packages 4

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS openjdk-17 17.0.15+6~us1-0ubuntu1~20.04
Ubuntu · 22.04 LTS 22.04:LTS openjdk-17 17.0.15+6~us1-0ubuntu1~22.04
Ubuntu · 24.04 LTS 24.04:LTS openjdk-17 17.0.15+6~us1-0ubuntu1~24.04
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS openjdk-17 17.0.15+6~us1-0ubuntu1~18.04

Vulnerabilities 3

References

  • report
    https://ubuntu.com/security/CVE-2025-21587
  • report
    https://ubuntu.com/security/CVE-2025-30691
  • report
    https://ubuntu.com/security/CVE-2025-30698