USN-7252-1

Details

It was discovered that the Hotspot component of OpenJDK 11 did not properly handle API access under certain circumstances. An unauthenticated attacker could possibly use this issue to access unauthorized resources and expose sensitive information.

Affected Packages

openjdk-lts

Ubuntu 20.04 LTS

Fixed in:

11.0.26+4-1ubuntu1~20.04

openjdk-lts

Ubuntu 22.04 LTS

Fixed in:

11.0.26+4-1ubuntu1~22.04

openjdk-lts

Ubuntu 24.04 LTS

Fixed in:

11.0.26+4-1ubuntu1~24.04

openjdk-lts

Ubuntu Pro 18.04 LTS

Fixed in:

11.0.26+4-1ubuntu1~18.04

References

REPORT

https://ubuntu.com/security/CVE-2025-21502

ADVISORY

https://ubuntu.com/security/notices/USN-7252-1