USN-7253-1

Details

It was discovered that the Hotspot component of OpenJDK 17 did not properly handle API access under certain circumstances. An unauthenticated attacker could possibly use this issue to access unauthorized resources and expose sensitive information.

Affected Packages

openjdk-17

Ubuntu 20.04 LTS

Fixed in:

17.0.14+7-1~20.04

openjdk-17

Ubuntu 22.04 LTS

Fixed in:

17.0.14+7-1~22.04.1

openjdk-17

Ubuntu 24.04 LTS

Fixed in:

17.0.14+7-1~24.04

openjdk-17

Ubuntu Pro 18.04 LTS

Fixed in:

17.0.14+7-1~18.04

References

REPORT

https://ubuntu.com/security/CVE-2025-21502

ADVISORY

https://ubuntu.com/security/notices/USN-7253-1