Oracle CPU (2025 Q3)

[xtexx]

Affected package (and version)

openjdk-11 (3:11.0.27+ga-1), openjdk-17 (3:17.0.15+ga-1), openjdk-21 (3:21.0.7+ga-1), openjdk-24 (24.0.1+ga-1), openjdk-8 (3:8u452+ga-1), virtualbox (7.1.8-1~pre20250601T150900Z)

CVE ID(s)

CVE-2025-50059, CVE-2025-30749, CVE-2025-50106, CVE-2025-30761, CVE-2025-30754, CVE-2025-27113, CVE-2025-24855, CVE-2025-53024, CVE-2025-53027, CVE-2025-53028, CVE-2025-53025, CVE-2025-53026, CVE-2025-53030, CVE-2025-53029

Severity

Low

Other security advisory ID(s）

• Oracle CPU
• OpenJDK Vulnerability Advisory

Description/References

• Low severity because all OpenJDK CVEs mentioned above came from the JWS and applet sandbox, which is not widely used.

Patch(es)/Solution(s)

• Update OpenJDK to new GA versions (OpenJDK: 2025 Q3 GA Survey #11730).