Alerts This Week
Warning Icon 1 1,111
Alerts This Week
Warning Icon 1 1,111

Ubuntu 24.10: USN-7255-1 moderate: OpenJDK 23 information exposure

ubuntu
Calendar Grey February 5, 2025
Dist Ubuntu Esm H88
Ubuntu USN-7256-1 discloses vulnerability in OpenJDK 23 that risks confidential data leakage via network. Immediate update for protection advised.
OpenJDK 23 could be made to expose sensitive information over the network.

Summary

OpenJDK 23 could be made to expose sensitive information over the

network.

Software Description:

- openjdk-23: Open Source Java implementation

Details:

It was discovered that the Hotspot component of OpenJDK 23 did not properly

handle API access under certain circumstances. An unauthenticated attacker

could possibly use this issue to access unauthorized resources and expose

sensitive information.

Topics%20covered

Topics Covered

security advisory information disclosure ubuntu network threat openjdk

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.10
   openjdk-23-jdk                  23.0.2+7-1ubuntu1~24.10
   openjdk-23-jdk-headless         23.0.2+7-1ubuntu1~24.10
   openjdk-23-jre                  23.0.2+7-1ubuntu1~24.10
   openjdk-23-jre-headless         23.0.2+7-1ubuntu1~24.10
   openjdk-23-jre-zero             23.0.2+7-1ubuntu1~24.10

This update uses a new upstream release, which includes additional bug
fixes. After a standard system update you need to restart Java
applications to make all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-7255-1

  CVE-2025-21502

Ubuntu Security Notice USN-7255-1

Topics%20covered

Topics Covered

security advisory information disclosure ubuntu network threat openjdk

Package Information

https://launchpad.net/ubuntu/+source/openjdk-23/23.0.2+7-1ubuntu1~24.10

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here