Improper input validation in Oracle Java SE - CVE-2025-30691

Vulnerability identifier: #VU107522

CSH Severity: Medium

CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-30691

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

The vulnerability exists due to improper input validation within the Compiler component in Oracle Java SE. A remote non-authenticated attacker can exploit this vulnerability to read and manipulate data.

Oracle Java SE
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
SUSE Linux Enterprise Server 12 SP5
Debian Linux
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
Anolis OS
SUSE Enterprise Storage
Legacy Module
Basesystem Module
SUSE Package Hub 15
openSUSE Leap
Ubuntu
openEuler
SecurID Governance and Lifecycle
IBM Cloud Pak for Security
Red Hat OpenShift Dev Spaces
Session Smart Router
Red Hat build of Keycloak
RSA Identity Governance and Lifecycle
QRadar Suite
IBM API Connect
Business Automation Insights
openjdk-17-jre (Ubuntu package)
openjdk-8-jre-jamvm (Ubuntu package)
openjdk-8-jre-zero (Ubuntu package)
openjdk-8-jre-headless (Ubuntu package)
openjdk-8-jre (Ubuntu package)
openjdk-8-jdk-headless (Ubuntu package)
openjdk-8-jdk (Ubuntu package)
openjdk-11-jre-zero (Ubuntu package)
openjdk-11-jre-headless (Ubuntu package)
openjdk-11-jre (Ubuntu package)
openjdk-11-jdk-headless (Ubuntu package)
openjdk-11-jdk (Ubuntu package)
openjdk-17-jre-zero (Ubuntu package)
openjdk-17-jre-headless (Ubuntu package)
openjdk-17-jdk-headless (Ubuntu package)
openjdk-17-jdk (Ubuntu package)
java-1_8_0-ibm
java-1_8_0-ibm-devel
java-1_8_0-ibm-plugin
java-1_8_0-ibm-alsa
java-1_8_0-ibm-demo
java-1_8_0-ibm-src
java-1_8_0-ibm-devel-32bit
java-1_8_0-ibm-32bit
java-1.8.0-openjdk-src
java-1.8.0-openjdk-headless-debug
java-1.8.0-openjdk-javadoc-zip-debug
java-1.8.0-openjdk-javadoc-zip
java-1.8.0-openjdk-javadoc-debug
java-1.8.0-openjdk-javadoc
java-1.8.0-openjdk-src-debug
java-1.8.0-openjdk-headless
java-1.8.0-openjdk
java-1.8.0-openjdk-accessibility
java-1.8.0-openjdk-accessibility-debug
java-1.8.0-openjdk-debug
java-1.8.0-openjdk-demo
java-1.8.0-openjdk-demo-debug
java-1.8.0-openjdk-devel
java-1.8.0-openjdk-devel-debug
java-1.8.0-openjdk (Red Hat package)
java-1_8_0-openjdk-demo-debuginfo
java-1_8_0-openjdk-debuginfo
java-1_8_0-openjdk-demo
java-1_8_0-openjdk-devel-debuginfo
java-1_8_0-openjdk
java-1_8_0-openjdk-headless
java-1_8_0-openjdk-devel
java-1_8_0-openjdk-headless-debuginfo
java-1_8_0-openjdk-debugsource
java-1_8_0-openjdk-javadoc
java-1_8_0-openjdk-src
java-1_8_0-openjdk-accessibility
java-1_8_0-openj9-debugsource
java-1_8_0-openj9-src
java-1_8_0-openj9-headless-debuginfo
java-1_8_0-openj9-javadoc
java-1_8_0-openj9-demo-debuginfo
java-1_8_0-openj9-headless
java-1_8_0-openj9
java-1_8_0-openj9-accessibility
java-1_8_0-openj9-demo
java-1_8_0-openj9-debuginfo
java-1_8_0-openj9-devel
java-1_8_0-openj9-devel-debuginfo
java-1.8.0-openjdk-src-slowdebug
java-1.8.0-openjdk-accessibility-slowdebug
java-1.8.0-openjdk-slowdebug
java-1.8.0-openjdk-headless-slowdebug
java-1.8.0-openjdk-openjfx-devel
java-1.8.0-openjdk-debuginfo
java-1.8.0-openjdk-debugsource
java-1.8.0-openjdk-demo-slowdebug
java-1.8.0-openjdk-openjfx-devel-slowdebug
java-1.8.0-openjdk-devel-slowdebug
java-1.8.0-openjdk-openjfx-slowdebug
java-1.8.0-openjdk-openjfx
java-11-openjdk-headless
java-11-openjdk-demo
java-11-openjdk-devel
java-11-openjdk
java-11-openjdk-debuginfo
java-11-openjdk-debugsource
java-11-openjdk-javadoc
java-11-openjdk-headless-debuginfo
java-11-openjdk-devel-debuginfo
java-11-openjdk-src
java-11-openjdk-jmods
java-17-openjdk-src
java-17-openjdk
java-17-openjdk-demo
java-17-openjdk-devel
java-17-openjdk-headless
java-17-openjdk-javadoc
java-17-openjdk-javadoc-zip
java-17-openjdk-static-libs
java-17-openjdk-jmods
java-17-openjdk-devel-debuginfo
java-17-openjdk-headless-debuginfo
java-17-openjdk-debuginfo
java-17-openjdk-debugsource
openjdk-17-crac (Ubuntu package)
openjdk-17 (debian package)
java-21-openjdk-demo
java-21-openjdk
java-21-openjdk-static-libs
java-21-openjdk-src
java-21-openjdk-jmods
java-21-openjdk-javadoc-zip
java-21-openjdk-javadoc
java-21-openjdk-headless
java-21-openjdk-devel
java-21-openjdk-debuginfo
java-21-openjdk-headless-debuginfo
java-21-openjdk-debugsource
java-21-openjdk-devel-debuginfo
openjdk-21-jdk-headless (Ubuntu package)
openjdk-21-jre-zero (Ubuntu package)
openjdk-21-jre-headless (Ubuntu package)
openjdk-21-jdk (Ubuntu package)
openjdk-21-jre (Ubuntu package)
openjdk-21-crac (Ubuntu package)
openjdk-24-jdk (Ubuntu package)
openjdk-24-jdk-headless (Ubuntu package)
openjdk-24-jre (Ubuntu package)
openjdk-24-jre-headless (Ubuntu package)
openjdk-24-jre-zero (Ubuntu package)
openjdk-24-jvmci-jdk (Ubuntu package)
Red Hat OpenShift Serverless

Install updates from vendor's website.

IBM Cloud Pak for Security - update to 1.11.3.0
QRadar Suite - update to 1.11.3.0
IBM API Connect - update to 10.0.8.2 ifix2
Business Automation Insights - addressed in versions 24.0.0.0.4, 24.0.1.0.4
openjdk-17-jre (Ubuntu package) - addressed in versions Ubuntu Pro, 17.0.15+6~us1-0ubuntu1~20.04, 17.0.15+6~us1-0ubuntu1~22.04, 17.0.15+6~us1-0ubuntu1~24.04, 17.0.15+6~us1-0ubuntu1~24.10, 17.0.15+6~us1-0ubuntu1~25.04
openjdk-8-jre-jamvm (Ubuntu package) - update to Ubuntu Pro
openjdk-8-jre-zero (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8u452-ga~us1-0ubuntu1~20.04, 8u452-ga~us1-0ubuntu1~22.04, 8u452-ga~us1-0ubuntu1~24.04, 8u452-ga~us1-0ubuntu1~24.10, 8u452-ga~us1-0ubuntu1~25.04
openjdk-8-jre-headless (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8u452-ga~us1-0ubuntu1~20.04, 8u452-ga~us1-0ubuntu1~22.04, 8u452-ga~us1-0ubuntu1~24.04, 8u452-ga~us1-0ubuntu1~24.10, 8u452-ga~us1-0ubuntu1~25.04
openjdk-8-jre (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8u452-ga~us1-0ubuntu1~20.04, 8u452-ga~us1-0ubuntu1~22.04, 8u452-ga~us1-0ubuntu1~24.04, 8u452-ga~us1-0ubuntu1~24.10, 8u452-ga~us1-0ubuntu1~25.04
openjdk-8-jdk-headless (Ubuntu package) - addressed in versions Ubuntu Pro, 8u452-ga~us1-0ubuntu1~20.04, 8u452-ga~us1-0ubuntu1~22.04, 8u452-ga~us1-0ubuntu1~24.04, 8u452-ga~us1-0ubuntu1~24.10, 8u452-ga~us1-0ubuntu1~25.04
openjdk-8-jdk (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8u452-ga~us1-0ubuntu1~20.04, 8u452-ga~us1-0ubuntu1~22.04, 8u452-ga~us1-0ubuntu1~24.04, 8u452-ga~us1-0ubuntu1~24.10, 8u452-ga~us1-0ubuntu1~25.04
openjdk-11-jre-zero (Ubuntu package) - addressed in versions Ubuntu Pro, 11.0.27+6~us1-0ubuntu1~20.04, 11.0.27+6~us1-0ubuntu1~22.04, 11.0.27+6~us1-0ubuntu1~24.04, 11.0.27+6~us1-0ubuntu1~24.10, 11.0.27+6~us1-0ubuntu1~25.04
openjdk-11-jre-headless (Ubuntu package) - addressed in versions Ubuntu Pro, 11.0.27+6~us1-0ubuntu1~20.04, 11.0.27+6~us1-0ubuntu1~22.04, 11.0.27+6~us1-0ubuntu1~24.04, 11.0.27+6~us1-0ubuntu1~24.10, 11.0.27+6~us1-0ubuntu1~25.04
openjdk-11-jre (Ubuntu package) - addressed in versions Ubuntu Pro, 11.0.27+6~us1-0ubuntu1~20.04, 11.0.27+6~us1-0ubuntu1~22.04, 11.0.27+6~us1-0ubuntu1~24.04, 11.0.27+6~us1-0ubuntu1~24.10, 11.0.27+6~us1-0ubuntu1~25.04
openjdk-11-jdk-headless (Ubuntu package) - addressed in versions Ubuntu Pro, 11.0.27+6~us1-0ubuntu1~20.04, 11.0.27+6~us1-0ubuntu1~22.04, 11.0.27+6~us1-0ubuntu1~24.04, 11.0.27+6~us1-0ubuntu1~24.10, 11.0.27+6~us1-0ubuntu1~25.04
openjdk-11-jdk (Ubuntu package) - addressed in versions Ubuntu Pro, 11.0.27+6~us1-0ubuntu1~20.04, 11.0.27+6~us1-0ubuntu1~22.04, 11.0.27+6~us1-0ubuntu1~24.04, 11.0.27+6~us1-0ubuntu1~24.10, 11.0.27+6~us1-0ubuntu1~25.04
openjdk-17-jre-zero (Ubuntu package) - addressed in versions Ubuntu Pro, 17.0.15+6~us1-0ubuntu1~20.04, 17.0.15+6~us1-0ubuntu1~22.04, 17.0.15+6~us1-0ubuntu1~24.04, 17.0.15+6~us1-0ubuntu1~24.10, 17.0.15+6~us1-0ubuntu1~25.04
openjdk-17-jre-headless (Ubuntu package) - addressed in versions Ubuntu Pro, 17.0.15+6~us1-0ubuntu1~20.04, 17.0.15+6~us1-0ubuntu1~22.04, 17.0.15+6~us1-0ubuntu1~24.04, 17.0.15+6~us1-0ubuntu1~24.10, 17.0.15+6~us1-0ubuntu1~25.04
openjdk-17-jdk-headless (Ubuntu package) - addressed in versions Ubuntu Pro, 17.0.15+6~us1-0ubuntu1~20.04, 17.0.15+6~us1-0ubuntu1~22.04, 17.0.15+6~us1-0ubuntu1~24.04, 17.0.15+6~us1-0ubuntu1~24.10, 17.0.15+6~us1-0ubuntu1~25.04
openjdk-17-jdk (Ubuntu package) - addressed in versions Ubuntu Pro, 17.0.15+6~us1-0ubuntu1~20.04, 17.0.15+6~us1-0ubuntu1~22.04, 17.0.15+6~us1-0ubuntu1~24.04, 17.0.15+6~us1-0ubuntu1~24.10, 17.0.15+6~us1-0ubuntu1~25.04
Red Hat OpenShift Serverless - update to 1
java-1_8_0-ibm - addressed in versions 1.8.0_sr8.45-30.135.1, 1.8.0_sr8.45-150000.3.101.1
java-1_8_0-ibm-devel - addressed in versions 1.8.0_sr8.45-30.135.1, 1.8.0_sr8.45-150000.3.101.1
java-1_8_0-ibm-plugin - addressed in versions 1.8.0_sr8.45-30.135.1, 1.8.0_sr8.45-150000.3.101.1
java-1_8_0-ibm-alsa - addressed in versions 1.8.0_sr8.45-30.135.1, 1.8.0_sr8.45-150000.3.101.1
java-1_8_0-ibm-demo - update to 1.8.0_sr8.45-150000.3.101.1
java-1_8_0-ibm-src - update to 1.8.0_sr8.45-150000.3.101.1
java-1_8_0-ibm-devel-32bit - update to 1.8.0_sr8.45-150000.3.101.1
java-1_8_0-ibm-32bit - update to 1.8.0_sr8.45-150000.3.101.1
java-1.8.0-openjdk-src - addressed in versions 1.8.0.452.b09-1, 1.8.0.452.b09-2.0.2
java-1.8.0-openjdk-headless-debug - update to 1.8.0.452.b09-1
java-1.8.0-openjdk-javadoc-zip-debug - update to 1.8.0.452.b09-1
java-1.8.0-openjdk-javadoc-zip - addressed in versions 1.8.0.452.b09-1, 1.8.0.452.b09-2.0.2
java-1.8.0-openjdk-javadoc-debug - update to 1.8.0.452.b09-1
java-1.8.0-openjdk-javadoc - addressed in versions 1.8.0.452.b09-1, 1.8.0.452.b09-2.0.2
java-1.8.0-openjdk-src-debug - update to 1.8.0.452.b09-1
java-1.8.0-openjdk-headless - addressed in versions 1.8.0.452.b09-1, 1.8.0.452.b09-2.0.2
java-1.8.0-openjdk - addressed in versions 1.8.0.452.b09-1, 1.8.0.452.b09-2.0.2
java-1.8.0-openjdk-accessibility - addressed in versions 1.8.0.452.b09-1, 1.8.0.452.b09-2.0.2
java-1.8.0-openjdk-accessibility-debug - update to 1.8.0.452.b09-1
java-1.8.0-openjdk-debug - update to 1.8.0.452.b09-1
java-1.8.0-openjdk-demo - addressed in versions 1.8.0.452.b09-1, 1.8.0.452.b09-2.0.2
java-1.8.0-openjdk-demo-debug - update to 1.8.0.452.b09-1
java-1.8.0-openjdk-devel - addressed in versions 1.8.0.452.b09-1, 1.8.0.452.b09-2.0.2
java-1.8.0-openjdk-devel-debug - update to 1.8.0.452.b09-1
java-1.8.0-openjdk (Red Hat package) - update to 1.8.0.452.b09-1.el7_9
java-1_8_0-openjdk-demo-debuginfo - addressed in versions 1.8.0.452-27.114.1, 1.8.0.452-150000.3.106.1
java-1_8_0-openjdk-debuginfo - addressed in versions 1.8.0.452-27.114.1, 1.8.0.452-150000.3.106.1
java-1_8_0-openjdk-demo - addressed in versions 1.8.0.452-27.114.1, 1.8.0.452-150000.3.106.1
java-1_8_0-openjdk-devel-debuginfo - addressed in versions 1.8.0.452-27.114.1, 1.8.0.452-150000.3.106.1
java-1_8_0-openjdk - addressed in versions 1.8.0.452-27.114.1, 1.8.0.452-150000.3.106.1
java-1_8_0-openjdk-headless - addressed in versions 1.8.0.452-27.114.1, 1.8.0.452-150000.3.106.1
java-1_8_0-openjdk-devel - addressed in versions 1.8.0.452-27.114.1, 1.8.0.452-150000.3.106.1
java-1_8_0-openjdk-headless-debuginfo - addressed in versions 1.8.0.452-27.114.1, 1.8.0.452-150000.3.106.1
java-1_8_0-openjdk-debugsource - addressed in versions 1.8.0.452-27.114.1, 1.8.0.452-150000.3.106.1
java-1_8_0-openjdk-javadoc - update to 1.8.0.452-150000.3.106.1
java-1_8_0-openjdk-src - update to 1.8.0.452-150000.3.106.1
java-1_8_0-openjdk-accessibility - update to 1.8.0.452-150000.3.106.1
java-1_8_0-openj9-debugsource - update to 1.8.0.452-150200.3.54.2
java-1_8_0-openj9-src - update to 1.8.0.452-150200.3.54.2
java-1_8_0-openj9-headless-debuginfo - update to 1.8.0.452-150200.3.54.2
java-1_8_0-openj9-javadoc - update to 1.8.0.452-150200.3.54.2
java-1_8_0-openj9-demo-debuginfo - update to 1.8.0.452-150200.3.54.2
java-1_8_0-openj9-headless - update to 1.8.0.452-150200.3.54.2
java-1_8_0-openj9 - update to 1.8.0.452-150200.3.54.2
java-1_8_0-openj9-accessibility - update to 1.8.0.452-150200.3.54.2
java-1_8_0-openj9-demo - update to 1.8.0.452-150200.3.54.2
java-1_8_0-openj9-debuginfo - update to 1.8.0.452-150200.3.54.2
java-1_8_0-openj9-devel - update to 1.8.0.452-150200.3.54.2
java-1_8_0-openj9-devel-debuginfo - update to 1.8.0.452-150200.3.54.2
java-1.8.0-openjdk-src-slowdebug - update to 1.8.0.462.b08-3
java-1.8.0-openjdk-src - update to 1.8.0.462.b08-3
java-1.8.0-openjdk-headless - update to 1.8.0.462.b08-3
java-1.8.0-openjdk-accessibility-slowdebug - update to 1.8.0.462.b08-3
java-1.8.0-openjdk-javadoc - update to 1.8.0.462.b08-3
java-1.8.0-openjdk-javadoc-zip - update to 1.8.0.462.b08-3
java-1.8.0-openjdk-slowdebug - update to 1.8.0.462.b08-3
java-1.8.0-openjdk-devel - update to 1.8.0.462.b08-3
java-1.8.0-openjdk-headless-slowdebug - update to 1.8.0.462.b08-3
java-1.8.0-openjdk-openjfx-devel - update to 1.8.0.462.b08-3
java-1.8.0-openjdk-debuginfo - update to 1.8.0.462.b08-3
java-1.8.0-openjdk-debugsource - update to 1.8.0.462.b08-3
java-1.8.0-openjdk-demo - update to 1.8.0.462.b08-3
java-1.8.0-openjdk-demo-slowdebug - update to 1.8.0.462.b08-3
java-1.8.0-openjdk-accessibility - update to 1.8.0.462.b08-3
java-1.8.0-openjdk-openjfx-devel-slowdebug - update to 1.8.0.462.b08-3
java-1.8.0-openjdk-devel-slowdebug - update to 1.8.0.462.b08-3
java-1.8.0-openjdk - update to 1.8.0.462.b08-3
java-1.8.0-openjdk-openjfx-slowdebug - update to 1.8.0.462.b08-3
java-1.8.0-openjdk-openjfx - update to 1.8.0.462.b08-3
Red Hat OpenShift Dev Spaces - update to 3.21.0
Session Smart Router - addressed in versions 6.2.10, 6.3.7
java-11-openjdk-headless - addressed in versions 11.0.27.0-3.87.1, 11.0.27.0-150000.3.125.1
java-11-openjdk-demo - addressed in versions 11.0.27.0-3.87.1, 11.0.27.0-150000.3.125.1
java-11-openjdk-devel - addressed in versions 11.0.27.0-3.87.1, 11.0.27.0-150000.3.125.1
java-11-openjdk - addressed in versions 11.0.27.0-3.87.1, 11.0.27.0-150000.3.125.1
java-11-openjdk-debuginfo - addressed in versions 11.0.27.0-3.87.1, 11.0.27.0-150000.3.125.1
java-11-openjdk-debugsource - addressed in versions 11.0.27.0-3.87.1, 11.0.27.0-150000.3.125.1
java-11-openjdk-javadoc - update to 11.0.27.0-150000.3.125.1
java-11-openjdk-headless-debuginfo - update to 11.0.27.0-150000.3.125.1
java-11-openjdk-devel-debuginfo - update to 11.0.27.0-150000.3.125.1
java-11-openjdk-src - update to 11.0.27.0-150000.3.125.1
java-11-openjdk-jmods - update to 11.0.27.0-150000.3.125.1
java-17-openjdk-src - update to 17.0.15.0.6-2.0.2
java-17-openjdk - update to 17.0.15.0.6-2.0.2
java-17-openjdk-demo - update to 17.0.15.0.6-2.0.2
java-17-openjdk-devel - update to 17.0.15.0.6-2.0.2
java-17-openjdk-headless - update to 17.0.15.0.6-2.0.2
java-17-openjdk-javadoc - update to 17.0.15.0.6-2.0.2
java-17-openjdk-javadoc-zip - update to 17.0.15.0.6-2.0.2
java-17-openjdk-static-libs - update to 17.0.15.0.6-2.0.2
java-17-openjdk-jmods - update to 17.0.15.0.6-2.0.2
java-17-openjdk-headless - update to 17.0.15.0-150400.3.54.1
java-17-openjdk-devel-debuginfo - update to 17.0.15.0-150400.3.54.1
java-17-openjdk - update to 17.0.15.0-150400.3.54.1
java-17-openjdk-headless-debuginfo - update to 17.0.15.0-150400.3.54.1
java-17-openjdk-debuginfo - update to 17.0.15.0-150400.3.54.1
java-17-openjdk-devel - update to 17.0.15.0-150400.3.54.1
java-17-openjdk-demo - update to 17.0.15.0-150400.3.54.1
java-17-openjdk-debugsource - update to 17.0.15.0-150400.3.54.1
java-17-openjdk-javadoc - update to 17.0.15.0-150400.3.54.1
java-17-openjdk-src - update to 17.0.15.0-150400.3.54.1
java-17-openjdk-jmods - update to 17.0.15.0-150400.3.54.1
openjdk-17-crac (Ubuntu package) - addressed in versions 17.0.15+6-0ubuntu1~24.10, 17.0.15+6-0ubuntu1~25.04
openjdk-17 (debian package) - update to 17.0.15+6-1~deb12u1
java-21-openjdk-demo - update to 21.0.7.0.6-1.0.2
java-21-openjdk - update to 21.0.7.0.6-1.0.2
java-21-openjdk-static-libs - update to 21.0.7.0.6-1.0.2
java-21-openjdk-src - update to 21.0.7.0.6-1.0.2
java-21-openjdk-jmods - update to 21.0.7.0.6-1.0.2
java-21-openjdk-javadoc-zip - update to 21.0.7.0.6-1.0.2
java-21-openjdk-javadoc - update to 21.0.7.0.6-1.0.2
java-21-openjdk-headless - update to 21.0.7.0.6-1.0.2
java-21-openjdk-devel - update to 21.0.7.0.6-1.0.2
java-21-openjdk-javadoc - update to 21.0.7.0-150600.3.12.1
java-21-openjdk-debuginfo - update to 21.0.7.0-150600.3.12.1
java-21-openjdk-jmods - update to 21.0.7.0-150600.3.12.1
java-21-openjdk-devel - update to 21.0.7.0-150600.3.12.1
java-21-openjdk-src - update to 21.0.7.0-150600.3.12.1
java-21-openjdk-headless - update to 21.0.7.0-150600.3.12.1
java-21-openjdk - update to 21.0.7.0-150600.3.12.1
java-21-openjdk-demo - update to 21.0.7.0-150600.3.12.1
java-21-openjdk-headless-debuginfo - update to 21.0.7.0-150600.3.12.1
java-21-openjdk-debugsource - update to 21.0.7.0-150600.3.12.1
java-21-openjdk-devel-debuginfo - update to 21.0.7.0-150600.3.12.1
openjdk-21-jdk-headless (Ubuntu package) - addressed in versions 21.0.7+6~us1-0ubuntu1~20.04, 21.0.7+6~us1-0ubuntu1~22.04, 21.0.7+6~us1-0ubuntu1~24.04, 21.0.7+6~us1-0ubuntu1~24.10, 21.0.7+6~us1-0ubuntu1~25.04
openjdk-21-jre-zero (Ubuntu package) - addressed in versions 21.0.7+6~us1-0ubuntu1~20.04, 21.0.7+6~us1-0ubuntu1~22.04, 21.0.7+6~us1-0ubuntu1~24.04, 21.0.7+6~us1-0ubuntu1~24.10, 21.0.7+6~us1-0ubuntu1~25.04
openjdk-21-jre-headless (Ubuntu package) - addressed in versions 21.0.7+6~us1-0ubuntu1~20.04, 21.0.7+6~us1-0ubuntu1~22.04, 21.0.7+6~us1-0ubuntu1~24.04, 21.0.7+6~us1-0ubuntu1~24.10, 21.0.7+6~us1-0ubuntu1~25.04
openjdk-21-jdk (Ubuntu package) - addressed in versions 21.0.7+6~us1-0ubuntu1~20.04, 21.0.7+6~us1-0ubuntu1~22.04, 21.0.7+6~us1-0ubuntu1~24.04, 21.0.7+6~us1-0ubuntu1~24.10, 21.0.7+6~us1-0ubuntu1~25.04
openjdk-21-jre (Ubuntu package) - addressed in versions 21.0.7+6~us1-0ubuntu1~20.04, 21.0.7+6~us1-0ubuntu1~22.04, 21.0.7+6~us1-0ubuntu1~24.04, 21.0.7+6~us1-0ubuntu1~24.10, 21.0.7+6~us1-0ubuntu1~25.04
openjdk-21-crac (Ubuntu package) - addressed in versions 21.0.7+6.1-0ubuntu1~24.10, 21.0.7+6.1-0ubuntu1~25.04
openjdk-24-jdk (Ubuntu package) - addressed in versions 24.0.1+9~us1-0ubuntu1~24.10, 24.0.1+9~us1-0ubuntu1~25.04
openjdk-24-jdk-headless (Ubuntu package) - addressed in versions 24.0.1+9~us1-0ubuntu1~24.10, 24.0.1+9~us1-0ubuntu1~25.04
openjdk-24-jre (Ubuntu package) - addressed in versions 24.0.1+9~us1-0ubuntu1~24.10, 24.0.1+9~us1-0ubuntu1~25.04
openjdk-24-jre-headless (Ubuntu package) - addressed in versions 24.0.1+9~us1-0ubuntu1~24.10, 24.0.1+9~us1-0ubuntu1~25.04
openjdk-24-jre-zero (Ubuntu package) - addressed in versions 24.0.1+9~us1-0ubuntu1~24.10, 24.0.1+9~us1-0ubuntu1~25.04
openjdk-24-jvmci-jdk (Ubuntu package) - addressed in versions 24.0.1+9~us1-0ubuntu1~24.10, 24.0.1+9~us1-0ubuntu1~25.04
Red Hat build of Keycloak - update to 26.0.11

• https://www.oracle.com/security-alerts/cpuapr2025.html

• Multiple vulnerabilities in Oracle Java SE
• Red Hat Enterprise Linux 7 Extended Lifecycle Support update for java-1.8.0-openjdk
• SUSE update for java-11-openjdk
• Multiple vulnerabilities in Red Hat build of Keycloak 26.0
• Debian update for openjdk-17
• SUSE update for java-21-openjdk
• Ubuntu update for openjdk-24
• Ubuntu update for openjdk-21
• Ubuntu update for openjdk-17
• Ubuntu update for openjdk-lts
• Ubuntu update for openjdk-8
• SUSE update for java-17-openjdk
• SUSE update for java-11-openjdk
• SUSE update for java-1_8_0-openjdk
• SUSE update for java-1_8_0-openjdk
• Anolis OS update for java-17-openjdk
• Anolis OS update for java-21-openjdk
• Anolis OS update for java-1.8.0-openjdk
• Ubuntu update for openjdk-21-crac
• Ubuntu update for openjdk-17-crac
• SUSE update for java-11-openjdk
• SUSE update for java-17-openjdk
• SUSE update for java-1_8_0-openjdk
• Multiple vulnerabilities in IBM Cloud Pak for Security and IBM QRadar Suite Software
• Multiple vulnerabilities in Red Hat OpenShift Serverless
• Multiple vulnerabilities in IBM API Connect
• SUSE update for java-11-openjdk
• Anolis OS update for java-1.8.0-openjdk
• SUSE update for java-1_8_0-ibm
• SUSE update for java-1_8_0-ibm
• SUSE update for java-1_8_0-openj9
• Multiple vulnerabilities in IBM Business Automation Insights
• openEuler update for openjdk-1.8.0
• Juniper Session Smart Router update for third-party components
• RSA Governance and Lifecycle update for Oracle Databse
• Multiple vulnerabilities in Red Hat OpenShift Dev Spaces 3.21