Ubuntu USN-8339-1: OpenJDK 25 Multiple CVEs Security Update

Vulnerability Overview Vulnerability ID: USN-8339-1 Release Date: May 28, 2026 Description: Multiple security vulnerabilities exist in various components of OpenJDK 25, specifically including: - The JAXP component fails to properly validate certain APIs, which may allow remote unauthenticated attackers to obtain sensitive information (CVE-2026-22016). - The Networking component fails to properly validate certain APIs, which may allow remote unauthenticated attackers to cause a denial of service (CVE-2026-34282). - The JSSE component fails to properly validate certain APIs, which may allow remote unauthenticated attackers to cause a denial of service (CVE-2026-22021). - The JGSS component fails to properly validate certain APIs, which may allow remote attackers to exploit this issue (CVE-2026-22018). Impact Scope Affected Versions: - 26.04 LTS (resolute) - 25.10 (questing) - 24.04 LTS (noble) - 22.04 LTS (jammy) Remediation Update Instructions: - Update the system to the following package versions to remediate the vulnerabilities: - 26.04 LTS (resolute): - – 25.0.3+9-2-26.04.2 - – 25.0.3+9-2-26.04.2 - – 25.0.3+9-2-26.04.2 - – 25.0.3+9-2-26.04.2 - – 25.0.3+9-2-26.04.2 - 25.10 (questing): - – 25.0.3+9-2-25.10.2 - – 25.0.3+9-2-25.10.2 - – 25.0.3+9-2-25.10.2 - – 25.0.3+9-2-25.10.2 - – 25.0.3+9-2-25.10.2 - 24.04 LTS (noble): - – 25.0.3+9-2-24.04.2 - – 25.0.3+9-2-24.04.2 - – 25.0.3+9-2-24.04.2 - – 25.0.3+9-2-24.04.2 - – 25.0.3+9-2-24.04.2 - 22.04 LTS (jammy): - – 25.0.3+9-2-22.04.2 - – 25.0.3+9-2-22.04.2 - – 25.0.3+9-2-22.04.2 - – 25.0.3+9-2-22.04.2 - – 25.0.3+9-2-22.04.2 Notes: - After updating, you must restart any running Java applications to apply all necessary changes. References CVE-2026-34282 CVE-2026-34268 CVE-2026-23865 CVE-2026-22021 CVE-2026-22018 CVE-2026-22016 CVE-2026-22013 CVE-2026-22008 CVE-2026-22007 Related Advisories USN-8341-1 USN-8334-1 USN-8333-1 USN-8332-1 USN-8331-1 USN-8330-1 USN-8328-1 USN-8327-1 USN-8086-1 Additional Information Reduce Security Risks: Ubuntu Pro provides ten years of security coverage for packages in over 25,000 main and universe repositories, with free coverage for up to five machines. Contact For further questions, please contact team members.

Goal Reached Thanks to every supporter — we hit 100%!

Ubuntu USN-8339-1: OpenJDK 25 Multiple CVEs Security Update

More from this source