Summary
It was discovered that the 2D component of OpenJDK 11 did not properly
manage memory under certain circumstances. An attacker could possibly
use this issue to cause a denial of service or execute arbitrary code.
(CVE-2025-30749, CVE-2025-50106)
VMashroor Hasan Bhuiyan discovered that the JSSE component of OpenJDK 11
did not properly manage TLS 1.3 handshakes under certain circumstances.
An attacker could possibly use this issue to obtain sensitive
information. (CVE-2025-30754)
Martin van Wingerden and Violeta Georgieva of Broadcom discovered
that the Networking component of OpenJDK 11 did not properly
manage network connections under certain circumstances. An attacker
could possibly use this issue to obtain sensitive information.
(CVE-2025-50059)
It was discovered that the Scripting component of OpenJDK 11 did not
properly manage properties under certain circumstances. An attacker
could possibly use this issue to cause a denial of service, execute
arbitrary code or bypass Java sandbox restrictions. (CVE-2025-30761)
In addition to security fixes, the updated packages contain bug fixes,
new features, and possibly incompatible changes.
Please see the following link for more information:
https://openjdk.org/groups/vulnerability/advisories/2025-07-15
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | openjdk-lts | 11.0.28+6-1ubuntu1~22.04.1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | openjdk-lts | 11.0.28+6-1ubuntu1~18.04.1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | openjdk-lts | 11.0.28+6-1ubuntu1~20.04.1 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | openjdk-lts | 11.0.28+6-1ubuntu1~24.04.1 |
Vulnerabilities 5
-
High 8.6
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
-
High 8.1CVE-2025-30749 Public exploit
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
-
High 8.1
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
-
Medium 5.9
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting)…
-
Medium 4.8
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…