{"cves":[{"id":"CVE-2025-62641","published":"2025-10-21T20:20:00","updated_at":"2025-10-29T21:06:44.920202+00:00","description":"\nVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization\n(component: Core).  Supported versions that are affected are 7.1.12 and\n7.2.2. Easily exploitable vulnerability allows high privileged attacker\nwith logon to the infrastructure where Oracle VM VirtualBox executes to\ncompromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM\nVirtualBox, attacks may significantly impact additional products (scope\nchange).  Successful attacks of this vulnerability can result in takeover\nof Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality,\nIntegrity and Availability impacts).  CVSS Vector:\n(CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.2,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.2,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-62641","https://www.oracle.com/security-alerts/cpuoct2025.html"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1118542"],"patches":{"virtualbox":[]},"tags":{},"packages":[{"name":"virtualbox","source":"https://ubuntu.com/security/cve?package=virtualbox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=virtualbox","debian":"https://tracker.debian.org/pkg/virtualbox","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2025-62592","published":"2025-10-21T20:20:00","updated_at":"2025-10-29T21:06:36.662669+00:00","description":"\nVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization\n(component: Core).  Supported versions that are affected are 7.1.12 and\n7.2.2. Easily exploitable vulnerability allows high privileged attacker\nwith logon to the infrastructure where Oracle VM VirtualBox executes to\ncompromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM\nVirtualBox, attacks may significantly impact additional products (scope\nchange).  Successful attacks of this vulnerability can result in\nunauthorized access to critical data or complete access to all Oracle VM\nVirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality\nimpacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.0,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.0,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-62592","https://www.oracle.com/security-alerts/cpuoct2025.html"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1118542"],"patches":{"virtualbox":[]},"tags":{},"packages":[{"name":"virtualbox","source":"https://ubuntu.com/security/cve?package=virtualbox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=virtualbox","debian":"https://tracker.debian.org/pkg/virtualbox","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2025-62591","published":"2025-10-21T20:20:00","updated_at":"2025-10-29T21:00:36.575354+00:00","description":"\nVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization\n(component: Core).  Supported versions that are affected are 7.1.12 and\n7.2.2. Easily exploitable vulnerability allows high privileged attacker\nwith logon to the infrastructure where Oracle VM VirtualBox executes to\ncompromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM\nVirtualBox, attacks may significantly impact additional products (scope\nchange).  Successful attacks of this vulnerability can result in\nunauthorized access to critical data or complete access to all Oracle VM\nVirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality\nimpacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.0,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.0,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-62591","https://www.oracle.com/security-alerts/cpuoct2025.html"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1118542"],"patches":{"virtualbox":[]},"tags":{},"packages":[{"name":"virtualbox","source":"https://ubuntu.com/security/cve?package=virtualbox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=virtualbox","debian":"https://tracker.debian.org/pkg/virtualbox","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2025-62590","published":"2025-10-21T20:20:00","updated_at":"2025-10-29T21:09:30.547072+00:00","description":"\nVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization\n(component: Core).  Supported versions that are affected are 7.1.12 and\n7.2.2. Easily exploitable vulnerability allows high privileged attacker\nwith logon to the infrastructure where Oracle VM VirtualBox executes to\ncompromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM\nVirtualBox, attacks may significantly impact additional products (scope\nchange).  Successful attacks of this vulnerability can result in takeover\nof Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality,\nIntegrity and Availability impacts).  CVSS Vector:\n(CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.2,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.2,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-62590","https://www.oracle.com/security-alerts/cpuoct2025.html"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1118542"],"patches":{"virtualbox":[]},"tags":{},"packages":[{"name":"virtualbox","source":"https://ubuntu.com/security/cve?package=virtualbox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=virtualbox","debian":"https://tracker.debian.org/pkg/virtualbox","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2025-62589","published":"2025-10-21T20:20:00","updated_at":"2025-10-29T21:08:30.504033+00:00","description":"\nVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization\n(component: Core).  Supported versions that are affected are 7.1.12 and\n7.2.2. Easily exploitable vulnerability allows high privileged attacker\nwith logon to the infrastructure where Oracle VM VirtualBox executes to\ncompromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM\nVirtualBox, attacks may significantly impact additional products (scope\nchange).  Successful attacks of this vulnerability can result in takeover\nof Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality,\nIntegrity and Availability impacts).  CVSS Vector:\n(CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.2,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.2,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-62589","https://www.oracle.com/security-alerts/cpuoct2025.html"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1118542"],"patches":{"virtualbox":[]},"tags":{},"packages":[{"name":"virtualbox","source":"https://ubuntu.com/security/cve?package=virtualbox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=virtualbox","debian":"https://tracker.debian.org/pkg/virtualbox","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2025-62588","published":"2025-10-21T20:20:00","updated_at":"2025-10-29T21:05:59.116799+00:00","description":"\nVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization\n(component: Core).  Supported versions that are affected are 7.1.12 and\n7.2.2. Easily exploitable vulnerability allows high privileged attacker\nwith logon to the infrastructure where Oracle VM VirtualBox executes to\ncompromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM\nVirtualBox, attacks may significantly impact additional products (scope\nchange).  Successful attacks of this vulnerability can result in takeover\nof Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality,\nIntegrity and Availability impacts).  CVSS Vector:\n(CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.2,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.2,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-62588","https://www.oracle.com/security-alerts/cpuoct2025.html"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1118542"],"patches":{"virtualbox":[]},"tags":{},"packages":[{"name":"virtualbox","source":"https://ubuntu.com/security/cve?package=virtualbox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=virtualbox","debian":"https://tracker.debian.org/pkg/virtualbox","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2025-62587","published":"2025-10-21T20:20:00","updated_at":"2025-10-29T21:08:47.494155+00:00","description":"\nVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization\n(component: Core).  Supported versions that are affected are 7.1.12 and\n7.2.2. Easily exploitable vulnerability allows high privileged attacker\nwith logon to the infrastructure where Oracle VM VirtualBox executes to\ncompromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM\nVirtualBox, attacks may significantly impact additional products (scope\nchange).  Successful attacks of this vulnerability can result in takeover\nof Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality,\nIntegrity and Availability impacts).  CVSS Vector:\n(CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.2,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.2,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-62587","https://www.oracle.com/security-alerts/cpuoct2025.html"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1118542"],"patches":{"virtualbox":[]},"tags":{},"packages":[{"name":"virtualbox","source":"https://ubuntu.com/security/cve?package=virtualbox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=virtualbox","debian":"https://tracker.debian.org/pkg/virtualbox","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2025-61760","published":"2025-10-21T20:20:00","updated_at":"2025-10-29T21:07:36.782390+00:00","description":"\nVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization\n(component: Core).  Supported versions that are affected are 7.1.12 and\n7.2.2. Difficult to exploit vulnerability allows low privileged attacker\nwith logon to the infrastructure where Oracle VM VirtualBox executes to\ncompromise Oracle VM VirtualBox.  Successful attacks require human\ninteraction from a person other than the attacker and while the\nvulnerability is in Oracle VM VirtualBox, attacks may significantly impact\nadditional products (scope change). Successful attacks of this\nvulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base\nScore 7.5 (Confidentiality, Integrity and Availability impacts).  CVSS\nVector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-61760","https://www.oracle.com/security-alerts/cpuoct2025.html"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1118542"],"patches":{"virtualbox":[]},"tags":{},"packages":[{"name":"virtualbox","source":"https://ubuntu.com/security/cve?package=virtualbox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=virtualbox","debian":"https://tracker.debian.org/pkg/virtualbox","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2025-61759","published":"2025-10-21T20:20:00","updated_at":"2025-10-29T21:09:38.788495+00:00","description":"\nVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization\n(component: Core).  Supported versions that are affected are 7.1.12 and\n7.2.2. Easily exploitable vulnerability allows low privileged attacker with\nlogon to the infrastructure where Oracle VM VirtualBox executes to\ncompromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM\nVirtualBox, attacks may significantly impact additional products (scope\nchange).  Successful attacks of this vulnerability can result in\nunauthorized access to critical data or complete access to all Oracle VM\nVirtualBox accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality\nimpacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-61759","https://www.oracle.com/security-alerts/cpuoct2025.html"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1118542"],"patches":{"virtualbox":[]},"tags":{},"packages":[{"name":"virtualbox","source":"https://ubuntu.com/security/cve?package=virtualbox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=virtualbox","debian":"https://tracker.debian.org/pkg/virtualbox","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2025-61748","published":"2025-10-21T20:20:00","updated_at":"2025-12-02T02:17:12.862294+00:00","description":"\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM\nEnterprise Edition product of Oracle Java SE (component: Libraries).\nSupported versions that are affected are Oracle Java SE: 21.0.8 and  25;\nOracle GraalVM for JDK: 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15.\nDifficult to exploit vulnerability allows unauthenticated attacker with\nnetwork access via multiple protocols to compromise Oracle Java SE, Oracle\nGraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of\nthis vulnerability can result in  unauthorized update, insert or delete\naccess to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM\nEnterprise Edition accessible data. Note: This vulnerability can be\nexploited by using APIs in the specified Component, e.g., through a web\nservice which supplies data to the APIs. This vulnerability also applies to\nJava deployments, typically in clients running sandboxed Java Web Start\napplications or sandboxed Java applets, that load and run untrusted code\n(e.g., code that comes from the internet) and rely on the Java sandbox for\nsecurity. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector:\n(CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":3.7,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":3.7,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-61748","https://openjdk.org/groups/vulnerability/advisories/2025-10-21","https://www.oracle.com/security-alerts/cpuoct2025.html","https://ubuntu.com/security/notices/USN-7885-1","https://ubuntu.com/security/notices/USN-7884-1","https://ubuntu.com/security/notices/USN-7901-1","https://ubuntu.com/security/notices/USN-7902-1"],"bugs":[""],"patches":{"openjdk-8":[],"openjdk-9":[],"openjdk-lts":[],"openjdk-13":[],"openjdk-16":[],"openjdk-17":[],"openjdk-17-crac":[],"openjdk-18":[],"openjdk-19":[],"openjdk-21":[],"openjdk-21-crac":[],"openjdk-24":[],"openjdk-25":[],"openjdk-25-crac":[]},"tags":{},"packages":[{"name":"openjdk-13","source":"https://ubuntu.com/security/cve?package=openjdk-13","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-13","debian":"https://tracker.debian.org/pkg/openjdk-13","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"superseded by openjdk-17","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-16","source":"https://ubuntu.com/security/cve?package=openjdk-16","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-16","debian":"https://tracker.debian.org/pkg/openjdk-16","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"superseded by openjdk-17","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-17","source":"https://ubuntu.com/security/cve?package=openjdk-17","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-17","debian":"https://tracker.debian.org/pkg/openjdk-17","statuses":[{"release_codename":"resolute","status":"not-affected","description":"21+ only","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"21+ only","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"21+ only","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"21+ only","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"21+ only","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"21+ only","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"21+ only","component":null,"pocket":"security"}]},{"name":"openjdk-17-crac","source":"https://ubuntu.com/security/cve?package=openjdk-17-crac","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-17-crac","debian":"https://tracker.debian.org/pkg/openjdk-17-crac","statuses":[{"release_codename":"resolute","status":"not-affected","description":"21+ only","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"21+ only","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"21+ only","component":null,"pocket":"security"}]},{"name":"openjdk-18","source":"https://ubuntu.com/security/cve?package=openjdk-18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-18","debian":"https://tracker.debian.org/pkg/openjdk-18","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-19","source":"https://ubuntu.com/security/cve?package=openjdk-19","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-19","debian":"https://tracker.debian.org/pkg/openjdk-19","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-21","source":"https://ubuntu.com/security/cve?package=openjdk-21","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-21","debian":"https://tracker.debian.org/pkg/openjdk-21","statuses":[{"release_codename":"resolute","status":"released","description":"21.0.9+10-1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"21.0.9+10-1~22.04","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"21.0.9+10-1~24.04","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"21.0.9+10-1~25.04","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"21.0.9+10-1~25.10","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"21.0.9+10-1~20.04","component":null,"pocket":"esm-apps"}]},{"name":"openjdk-21-crac","source":"https://ubuntu.com/security/cve?package=openjdk-21-crac","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-21-crac","debian":"https://tracker.debian.org/pkg/openjdk-21-crac","statuses":[{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"21.0.9+10-0ubuntu1~25.04","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"21.0.9+10-0ubuntu1~25.10","component":null,"pocket":"security"}]},{"name":"openjdk-24","source":"https://ubuntu.com/security/cve?package=openjdk-24","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-24","debian":"https://tracker.debian.org/pkg/openjdk-24","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]},{"name":"openjdk-25","source":"https://ubuntu.com/security/cve?package=openjdk-25","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-25","debian":"https://tracker.debian.org/pkg/openjdk-25","statuses":[{"release_codename":"resolute","status":"released","description":"25.0.1+8-1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"25.0.1+8-1~22.04","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"25.0.1+8-1~24.04","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"25.0.1+8-1~25.04","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"25.0.1+8-1~25.10","component":null,"pocket":"security"}]},{"name":"openjdk-25-crac","source":"https://ubuntu.com/security/cve?package=openjdk-25-crac","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-25-crac","debian":"https://tracker.debian.org/pkg/openjdk-25-crac","statuses":[{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"21.0.9+10-0ubuntu1~25.10","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-8","source":"https://ubuntu.com/security/cve?package=openjdk-8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-8","debian":"https://tracker.debian.org/pkg/openjdk-8","statuses":[{"release_codename":"resolute","status":"not-affected","description":"21+ only","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"21+ only","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"21+ only","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"21+ only","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"21+ only","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"21+ only","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"21+ only","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"21+ only","component":null,"pocket":"security"}]},{"name":"openjdk-9","source":"https://ubuntu.com/security/cve?package=openjdk-9","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-9","debian":"https://tracker.debian.org/pkg/openjdk-9","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of ESM support, was ignored [no longer supported by upstream]","component":null,"pocket":"security"}]},{"name":"openjdk-lts","source":"https://ubuntu.com/security/cve?package=openjdk-lts","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-lts","debian":"https://tracker.debian.org/pkg/openjdk-lts","statuses":[{"release_codename":"resolute","status":"not-affected","description":"21+ only","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"21+ only","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"21+ only","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"21+ only","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"21+ only","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"21+ only","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"21+ only","component":null,"pocket":"security"}]}],"notices_ids":["USN-7884-1","USN-7885-1","USN-7901-1","USN-7902-1"],"notices":[{"id":"USN-7884-1","title":"OpenJDK 25 vulnerabilities","summary":"Several security issues were fixed in OpenJDK 25.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart Java applications\nto make all the necessary changes.","references":[],"published":"2025-11-24T12:08:12.645876","description":"Jinfeng Guo discovered that the Security component of OpenJDK 25 did not\ncorrectly handle certain representations of encoded strings. An\nunauthenticated remote attacker could possibly use this issue to modify\nfiles or leak sensitive information. (CVE-2025-53057)\n\nDarius Bohni discovered that the JAXP component of OpenJDK 25 was\nvulnerable to a XML External Entity (XEE) attack. An unauthenticated remote\nattacker could possibly use this issue to modify files or leak sensitive\ninformation. (CVE-2025-53066)\n\nYakov Shafranovich discovered that the Libraries component of OpenJDK 21\ncontained an issue where certain Strings built with StringBuilder returned\nan incorrect result for String.equals() checks.  An unauthenticated remote\nattacker could possibly use this issue to update, insert, or delete\naccessible data. (CVE-2025-61748)\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttps://openjdk.org/groups/vulnerability/advisories/2025-10-21","is_hidden":false,"release_packages":{"jammy":[{"name":"openjdk-25","version":"25.0.1+8-1~22.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-25-demo","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"},{"name":"openjdk-25-doc","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"},{"name":"openjdk-25-jdk","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"},{"name":"openjdk-25-jdk-headless","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"},{"name":"openjdk-25-jre","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"},{"name":"openjdk-25-jre-headless","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"},{"name":"openjdk-25-jre-zero","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"},{"name":"openjdk-25-jvmci-jdk","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"},{"name":"openjdk-25-source","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"},{"name":"openjdk-25-testsupport","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"}],"noble":[{"name":"openjdk-25","version":"25.0.1+8-1~24.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-25-demo","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"},{"name":"openjdk-25-doc","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"},{"name":"openjdk-25-jdk","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"},{"name":"openjdk-25-jdk-headless","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"},{"name":"openjdk-25-jre","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"},{"name":"openjdk-25-jre-headless","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"},{"name":"openjdk-25-jre-zero","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"},{"name":"openjdk-25-jvmci-jdk","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"},{"name":"openjdk-25-source","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"},{"name":"openjdk-25-testsupport","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"}],"plucky":[{"name":"openjdk-25","version":"25.0.1+8-1~25.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-25-demo","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"},{"name":"openjdk-25-doc","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"},{"name":"openjdk-25-jdk","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"},{"name":"openjdk-25-jdk-headless","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"},{"name":"openjdk-25-jre","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"},{"name":"openjdk-25-jre-headless","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"},{"name":"openjdk-25-jre-zero","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"},{"name":"openjdk-25-jvmci-jdk","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"},{"name":"openjdk-25-source","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"},{"name":"openjdk-25-testsupport","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"}],"questing":[{"name":"openjdk-25","version":"25.0.1+8-1~25.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-25-demo","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"},{"name":"openjdk-25-doc","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"},{"name":"openjdk-25-jdk","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"},{"name":"openjdk-25-jdk-headless","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"},{"name":"openjdk-25-jre","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"},{"name":"openjdk-25-jre-headless","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"},{"name":"openjdk-25-jre-zero","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"},{"name":"openjdk-25-jvmci-jdk","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"},{"name":"openjdk-25-source","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"},{"name":"openjdk-25-testsupport","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-53057","CVE-2025-61748","CVE-2025-53066"]},{"id":"USN-7885-1","title":"OpenJDK 21 vulnerabilities","summary":"Several security issues were fixed in OpenJDK 21.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart Java applications\nto make all the necessary changes.","references":[],"published":"2025-11-24T12:14:30.425780","description":"Jinfeng Guo discovered that the Security component of OpenJDK 21 did not\ncorrectly handle certain representations of encoded strings. An\nunauthenticated remote attacker could possibly use this issue to modify\nfiles or leak sensitive information. (CVE-2025-53057)\n\nDarius Bohni discovered that the JAXP component of OpenJDK 21 was\nvulnerable to a XML External Entity (XEE) attack. An unauthenticated remote\nattacker could possibly use this issue to modify files or leak sensitive\ninformation. (CVE-2025-53066)\n\nYakov Shafranovich discovered that the Libraries component of OpenJDK 21\ncontained an issue where certain Strings built with StringBuilder returned\nan incorrect result for String.equals() checks. An unauthenticated remote\nattacker could possibly use this issue to update, insert, or delete\naccessible data. (CVE-2025-61748)\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttps://openjdk.org/groups/vulnerability/advisories/2025-10-21","is_hidden":false,"release_packages":{"focal":[{"name":"openjdk-21","version":"21.0.9+10-1~20.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-21-demo","version":"21.0.9+10-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-21-doc","version":"21.0.9+10-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-21-jdk","version":"21.0.9+10-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-21-jdk-headless","version":"21.0.9+10-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-21-jre","version":"21.0.9+10-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-21-jre-headless","version":"21.0.9+10-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-21-jre-zero","version":"21.0.9+10-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-21-source","version":"21.0.9+10-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-21-testsupport","version":"21.0.9+10-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":null,"pocket":"esm-apps"}],"jammy":[{"name":"openjdk-21","version":"21.0.9+10-1~22.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-21-demo","version":"21.0.9+10-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~22.04","pocket":"security"},{"name":"openjdk-21-doc","version":"21.0.9+10-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~22.04","pocket":"security"},{"name":"openjdk-21-jdk","version":"21.0.9+10-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~22.04","pocket":"security"},{"name":"openjdk-21-jdk-headless","version":"21.0.9+10-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~22.04","pocket":"security"},{"name":"openjdk-21-jre","version":"21.0.9+10-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~22.04","pocket":"security"},{"name":"openjdk-21-jre-headless","version":"21.0.9+10-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~22.04","pocket":"security"},{"name":"openjdk-21-jre-zero","version":"21.0.9+10-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~22.04","pocket":"security"},{"name":"openjdk-21-source","version":"21.0.9+10-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~22.04","pocket":"security"},{"name":"openjdk-21-testsupport","version":"21.0.9+10-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~22.04","pocket":"security"}],"noble":[{"name":"openjdk-21","version":"21.0.9+10-1~24.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-21-demo","version":"21.0.9+10-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~24.04","pocket":"security"},{"name":"openjdk-21-doc","version":"21.0.9+10-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~24.04","pocket":"security"},{"name":"openjdk-21-jdk","version":"21.0.9+10-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~24.04","pocket":"security"},{"name":"openjdk-21-jdk-headless","version":"21.0.9+10-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~24.04","pocket":"security"},{"name":"openjdk-21-jre","version":"21.0.9+10-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~24.04","pocket":"security"},{"name":"openjdk-21-jre-headless","version":"21.0.9+10-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~24.04","pocket":"security"},{"name":"openjdk-21-jre-zero","version":"21.0.9+10-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~24.04","pocket":"security"},{"name":"openjdk-21-source","version":"21.0.9+10-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~24.04","pocket":"security"},{"name":"openjdk-21-testsupport","version":"21.0.9+10-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~24.04","pocket":"security"}],"plucky":[{"name":"openjdk-21","version":"21.0.9+10-1~25.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-21-demo","version":"21.0.9+10-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.04","pocket":"security"},{"name":"openjdk-21-doc","version":"21.0.9+10-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.04","pocket":"security"},{"name":"openjdk-21-jdk","version":"21.0.9+10-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.04","pocket":"security"},{"name":"openjdk-21-jdk-headless","version":"21.0.9+10-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.04","pocket":"security"},{"name":"openjdk-21-jre","version":"21.0.9+10-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.04","pocket":"security"},{"name":"openjdk-21-jre-headless","version":"21.0.9+10-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.04","pocket":"security"},{"name":"openjdk-21-jre-zero","version":"21.0.9+10-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.04","pocket":"security"},{"name":"openjdk-21-source","version":"21.0.9+10-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.04","pocket":"security"},{"name":"openjdk-21-testsupport","version":"21.0.9+10-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.04","pocket":"security"}],"questing":[{"name":"openjdk-21","version":"21.0.9+10-1~25.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-21-demo","version":"21.0.9+10-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.10","pocket":"security"},{"name":"openjdk-21-doc","version":"21.0.9+10-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.10","pocket":"security"},{"name":"openjdk-21-jdk","version":"21.0.9+10-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.10","pocket":"security"},{"name":"openjdk-21-jdk-headless","version":"21.0.9+10-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.10","pocket":"security"},{"name":"openjdk-21-jre","version":"21.0.9+10-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.10","pocket":"security"},{"name":"openjdk-21-jre-headless","version":"21.0.9+10-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.10","pocket":"security"},{"name":"openjdk-21-jre-zero","version":"21.0.9+10-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.10","pocket":"security"},{"name":"openjdk-21-source","version":"21.0.9+10-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.10","pocket":"security"},{"name":"openjdk-21-testsupport","version":"21.0.9+10-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.10","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-53057","CVE-2025-61748","CVE-2025-53066"]},{"id":"USN-7901-1","title":"CRaC JDK 21 vulnerabilities","summary":"Several security issues were fixed in CRaC JDK 21.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart Java applications\nto make all the necessary changes.","references":[],"published":"2025-12-01T14:42:39.109082","description":"Jinfeng Guo discovered that the Security component of CRaC JDK 21 did not\ncorrectly handle certain representations of encoded strings. An\nunauthenticated remote attacker could possibly use this issue to modify\nfiles or leak sensitive information. (CVE-2025-53057)\n\nDarius Bohni discovered that the JAXP component of CRaC JDK 21 was\nvulnerable to a XML External Entity (XEE) attack. An unauthenticated remote\nattacker could possibly use this issue to modify files or leak sensitive\ninformation. (CVE-2025-53066)\n\nYakov Shafranovich discovered that the Libraries component of CRaC JDK 21\ncontained an issue where certain Strings built with StringBuilder returned\nan incorrect result for String.equals() checks. An unauthenticated remote\nattacker could possibly use this issue to update, insert, or delete\naccessible data. (CVE-2025-61748)\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttps://openjdk.org/groups/vulnerability/advisories/2025-10-21","is_hidden":false,"release_packages":{"plucky":[{"name":"openjdk-21-crac","version":"21.0.9+10-0ubuntu1~25.04","description":"Open Source Java implementation with Coordinated Restore at Checkpoints","is_source":true},{"name":"openjdk-21-crac-demo","version":"21.0.9+10-0ubuntu1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-21-crac-doc","version":"21.0.9+10-0ubuntu1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-21-crac-jdk","version":"21.0.9+10-0ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-21-crac-jdk-headless","version":"21.0.9+10-0ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-21-crac-jre","version":"21.0.9+10-0ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-21-crac-jre-headless","version":"21.0.9+10-0ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-21-crac-jre-zero","version":"21.0.9+10-0ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-21-crac-source","version":"21.0.9+10-0ubuntu1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-21-crac-testsupport","version":"21.0.9+10-0ubuntu1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.04","pocket":"security"}],"questing":[{"name":"openjdk-21-crac","version":"21.0.9+10-0ubuntu1~25.10","description":"Open Source Java implementation with Coordinated Restore at Checkpoints","is_source":true},{"name":"openjdk-21-crac-demo","version":"21.0.9+10-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-21-crac-doc","version":"21.0.9+10-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-21-crac-jdk","version":"21.0.9+10-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-21-crac-jdk-headless","version":"21.0.9+10-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-21-crac-jre","version":"21.0.9+10-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-21-crac-jre-headless","version":"21.0.9+10-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-21-crac-jre-zero","version":"21.0.9+10-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-21-crac-source","version":"21.0.9+10-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-21-crac-testsupport","version":"21.0.9+10-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.10","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-53057","CVE-2025-53066","CVE-2025-61748"]},{"id":"USN-7902-1","title":"CRaC JDK 25 vulnerabilities","summary":"Several security issues were fixed in CRaC JDK 25.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart Java\napplications to make all the necessary changes.","references":[],"published":"2025-12-01T14:48:36.452617","description":"Jinfeng Guo discovered that the Security component of CRaC JDK 25 did not\ncorrectly handle certain representations of encoded strings. An\nunauthenticated remote attacker could possibly use this issue to modify\nfiles or leak sensitive information. (CVE-2025-53057)\n\nDarius Bohni discovered that the JAXP component of CRaC JDK 25 was\nvulnerable to a XML External Entity (XEE) attack. An unauthenticated\nremote attacker could possibly use this issue to modify files or leak\nsensitive information. (CVE-2025-53066)\n\nYakov Shafranovich discovered that the Libraries component of CRaC JDK\n25 contained an issue where certain Strings built with StringBuilder\nreturned an incorrect result for String.equals() checks. An unauthenticated\nremote attacker could possibly use this issue to update, insert, or\ndelete accessible data. (CVE-2025-61748)\n\nIn addition to security fixes, the updated packages contain bug fixes,\nnew features, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttps://openjdk.org/groups/vulnerability/advisories/2025-10-21","is_hidden":false,"release_packages":{"questing":[{"name":"openjdk-25-crac","version":"25.0.1+8-0ubuntu1~25.10","description":"Open Source Java implementation with Coordinated Restore at Checkpoints","is_source":true},{"name":"openjdk-25-crac-demo","version":"25.0.1+8-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac/25.0.1+8-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-25-crac-doc","version":"25.0.1+8-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac/25.0.1+8-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-25-crac-jdk","version":"25.0.1+8-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac/25.0.1+8-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-25-crac-jdk-headless","version":"25.0.1+8-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac/25.0.1+8-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-25-crac-jre","version":"25.0.1+8-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac/25.0.1+8-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-25-crac-jre-headless","version":"25.0.1+8-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac/25.0.1+8-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-25-crac-jre-zero","version":"25.0.1+8-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac/25.0.1+8-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-25-crac-source","version":"25.0.1+8-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac/25.0.1+8-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-25-crac-testsupport","version":"25.0.1+8-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac/25.0.1+8-0ubuntu1~25.10","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-53057","CVE-2025-53066","CVE-2025-61748"]}]},{"id":"CVE-2025-53069","published":"2025-10-21T20:20:00","updated_at":"2026-02-04T07:51:48.126077+00:00","description":"\nVulnerability in the MySQL Server product of Oracle MySQL (component:\nServer: Components Services).  Supported versions that are affected are\n8.0.0-8.0.43, 8.4.0-8.4.6 and  9.0.0-9.4.0. Easily exploitable\nvulnerability allows high privileged attacker with network access via\nmultiple protocols to compromise MySQL Server.  Successful attacks of this\nvulnerability can result in unauthorized ability to cause a hang or\nfrequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base\nScore 4.9 (Availability impacts).  CVSS Vector:\n(CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","ubuntu_description":"","notes":[{"author":"iconstantin","note":"since mysql versions 5.7 and earlier are no longer supported\nupstream, we are unable to update them to address security\nissues,\nmarking as ignored.\nmariadb 5.5, 10.0, 10.1, and 10.3 are end of life and no\nlonger supported upstream - marking as ignored."}],"codename":null,"priority":"medium","cvss3":4.9,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":4.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-53069","https://www.oracle.com/security-alerts/cpuoct2025.html","https://ubuntu.com/security/notices/USN-7873-1","https://ubuntu.com/security/notices/USN-8006-1"],"bugs":[""],"patches":{"mysql-5.5":[],"mysql-5.7":[],"mysql-8.0":[],"mysql-8.4":[],"mariadb":[],"mariadb-10.0":[],"mariadb-10.1":[],"mariadb-10.3":[],"mariadb-10.6":[],"percona-xtradb-cluster-5.6":[],"percona-server-5.6":[]},"tags":{},"packages":[{"name":"percona-xtradb-cluster-5.6","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.6","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-server-5.6","source":"https://ubuntu.com/security/cve?package=percona-server-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-server-5.6","debian":"https://tracker.debian.org/pkg/percona-server-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb","source":"https://ubuntu.com/security/cve?package=mariadb","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb","debian":"https://tracker.debian.org/pkg/mariadb","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.0","source":"https://ubuntu.com/security/cve?package=mariadb-10.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.0","debian":"https://tracker.debian.org/pkg/mariadb-10.0","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.1","source":"https://ubuntu.com/security/cve?package=mariadb-10.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.1","debian":"https://tracker.debian.org/pkg/mariadb-10.1","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.3","source":"https://ubuntu.com/security/cve?package=mariadb-10.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.3","debian":"https://tracker.debian.org/pkg/mariadb-10.3","statuses":[{"release_codename":"focal","status":"ignored","description":"no more upstream support","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.6","source":"https://ubuntu.com/security/cve?package=mariadb-10.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.6","debian":"https://tracker.debian.org/pkg/mariadb-10.6","statuses":[{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"trusty","status":"ignored","description":"see notes","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.7","source":"https://ubuntu.com/security/cve?package=mysql-5.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.7","debian":"https://tracker.debian.org/pkg/mysql-5.7","statuses":[{"release_codename":"bionic","status":"ignored","description":"see notes","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of ESM support, was ignored [see notes]","component":null,"pocket":"security"}]},{"name":"mysql-8.0","source":"https://ubuntu.com/security/cve?package=mysql-8.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.0","debian":"https://tracker.debian.org/pkg/mysql-8.0","statuses":[{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"8.0.44-0ubuntu0.22.04.1","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"8.0.44-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8.0.45-0ubuntu0.20.04.1+esm2","component":null,"pocket":"esm-infra"},{"release_codename":"upstream","status":"released","description":"8.0.44","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-8.4","source":"https://ubuntu.com/security/cve?package=mysql-8.4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.4","debian":"https://tracker.debian.org/pkg/mysql-8.4","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"8.4.7-0ubuntu0.25.04.1","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"8.4.7-0ubuntu0.25.10.2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8.4.7","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"8.4.7-0ubuntu2","component":null,"pocket":"security"}]}],"notices_ids":["USN-7873-1","USN-8006-1"],"notices":[{"id":"USN-7873-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. In general, a standard system update will make all the necessary\nchanges.","references":[],"published":"2025-11-19T12:53:58.935242","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 8.0.44 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS.\nUbuntu 25.04 and Ubuntu 25.10 have been updated to MySQL 8.4.7.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttps://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-44.html\nhttps://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-7.html\nhttps://www.oracle.com/security-alerts/cpuoct2025.html","is_hidden":false,"release_packages":{"jammy":[{"name":"mysql-8.0","version":"8.0.44-0ubuntu0.22.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-client","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-router","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-server","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"}],"noble":[{"name":"mysql-8.0","version":"8.0.44-0ubuntu0.24.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-client","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-router","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-server","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"}],"plucky":[{"name":"mysql-8.4","version":"8.4.7-0ubuntu0.25.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"libmysqlclient24","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-client","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-client-core","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-router","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-server","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-server-core","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-source","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"}],"questing":[{"name":"mysql-8.4","version":"8.4.7-0ubuntu0.25.10.2","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"libmysqlclient24","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-client","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-client-core","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-router","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-server","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-server-core","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-source","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-testsuite","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-53053","CVE-2025-53054","CVE-2025-53040","CVE-2025-53044","CVE-2025-53062","CVE-2025-53069","CVE-2025-53045","CVE-2025-53042"]},{"id":"USN-8006-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-02-03T07:52:06.723501","description":"Multiple security issues were discovered in MySQL and this update includes\na new upstream MySQL version to fix these issues.\n\nMySQL has been updated to 8.0.45 in Ubuntu 20.04 LTS.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttps://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-45.html\nhttps://www.oracle.com/security-alerts/cpujan2026.html","is_hidden":false,"release_packages":{"focal":[{"name":"mysql-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"libmysqlclient21","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client-core-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-router","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server-core-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-source-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-testsuite","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-testsuite-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2025-53040","CVE-2026-21968","CVE-2025-53044","CVE-2025-53045","CVE-2026-21964","CVE-2026-21941","CVE-2026-21937","CVE-2025-53062","CVE-2025-53054","CVE-2025-53053","CVE-2025-53069","CVE-2025-53042","CVE-2026-21936","CVE-2026-21948"]}]},{"id":"CVE-2025-53067","published":"2025-10-21T20:20:00","updated_at":"2025-10-29T21:05:16.768159+00:00","description":"\nVulnerability in the MySQL Server product of Oracle MySQL (component:\nServer: Optimizer).  Supported versions that are affected are 9.0.0-9.4.0.\nEasily exploitable vulnerability allows high privileged attacker with\nnetwork access via multiple protocols to compromise MySQL Server.\nSuccessful attacks of this vulnerability can result in unauthorized ability\nto cause a hang or frequently repeatable crash (complete DOS) of MySQL\nServer. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:\n(CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","ubuntu_description":"","notes":[{"author":"iconstantin","note":"since mysql versions 5.7 and earlier are no longer supported\nupstream, we are unable to update them to address security\nissues,\nmarking as ignored.\nmariadb 5.5, 10.0, 10.1, and 10.3 are end of life and no\nlonger supported upstream - marking as ignored."},{"author":"mdeslaur","note":"9.x only"}],"codename":null,"priority":"medium","cvss3":4.9,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":4.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-53067","https://www.oracle.com/security-alerts/cpuoct2025.html"],"bugs":[""],"patches":{"mysql-5.5":[],"mysql-5.7":[],"mysql-8.0":[],"mysql-8.4":[],"mariadb":[],"mariadb-10.0":[],"mariadb-10.1":[],"mariadb-10.3":[],"mariadb-10.6":[],"percona-xtradb-cluster-5.6":[],"percona-server-5.6":[]},"tags":{},"packages":[{"name":"percona-xtradb-cluster-5.6","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.6","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"percona-server-5.6","source":"https://ubuntu.com/security/cve?package=percona-server-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-server-5.6","debian":"https://tracker.debian.org/pkg/percona-server-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"mariadb","source":"https://ubuntu.com/security/cve?package=mariadb","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb","debian":"https://tracker.debian.org/pkg/mariadb","statuses":[{"release_codename":"resolute","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.0","source":"https://ubuntu.com/security/cve?package=mariadb-10.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.0","debian":"https://tracker.debian.org/pkg/mariadb-10.0","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.1","source":"https://ubuntu.com/security/cve?package=mariadb-10.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.1","debian":"https://tracker.debian.org/pkg/mariadb-10.1","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.3","source":"https://ubuntu.com/security/cve?package=mariadb-10.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.3","debian":"https://tracker.debian.org/pkg/mariadb-10.3","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"no more upstream support","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.6","source":"https://ubuntu.com/security/cve?package=mariadb-10.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.6","debian":"https://tracker.debian.org/pkg/mariadb-10.6","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"see notes","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.7","source":"https://ubuntu.com/security/cve?package=mysql-5.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.7","debian":"https://tracker.debian.org/pkg/mysql-5.7","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"see notes","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of ESM support, was ignored [see notes]","component":null,"pocket":"security"}]},{"name":"mysql-8.0","source":"https://ubuntu.com/security/cve?package=mysql-8.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.0","debian":"https://tracker.debian.org/pkg/mysql-8.0","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"9.x only","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"9.x only","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"9.x only","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"9.x only","component":null,"pocket":"security"}]},{"name":"mysql-8.4","source":"https://ubuntu.com/security/cve?package=mysql-8.4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.4","debian":"https://tracker.debian.org/pkg/mysql-8.4","statuses":[{"release_codename":"resolute","status":"not-affected","description":"9.x only","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"9.x only","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"9.x only","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"9.x only","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2025-53066","published":"2025-10-21T20:20:00","updated_at":"2025-12-02T02:17:12.862294+00:00","description":"\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM\nEnterprise Edition product of Oracle Java SE (component: JAXP).  Supported\nversions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28,\n17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and  21.0.8; Oracle\nGraalVM Enterprise Edition: 21.3.15. Easily exploitable vulnerability\nallows unauthenticated attacker with network access via multiple protocols\nto compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM\nEnterprise Edition.  Successful attacks of this vulnerability can result in\n unauthorized access to critical data or complete access to all Oracle Java\nSE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible\ndata. Note: This vulnerability can be exploited by using APIs in the\nspecified Component, e.g., through a web service which supplies data to the\nAPIs. This vulnerability also applies to Java deployments, typically in\nclients running sandboxed Java Web Start applications or sandboxed Java\napplets, that load and run untrusted code (e.g., code that comes from the\ninternet) and rely on the Java sandbox for security. CVSS 3.1 Base Score\n7.5 (Confidentiality impacts).  CVSS Vector:\n(CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-53066","https://openjdk.org/groups/vulnerability/advisories/2025-10-21","https://www.oracle.com/security-alerts/cpuoct2025.html","https://ubuntu.com/security/notices/USN-7885-1","https://ubuntu.com/security/notices/USN-7884-1","https://ubuntu.com/security/notices/USN-7883-1","https://ubuntu.com/security/notices/USN-7881-1","https://ubuntu.com/security/notices/USN-7882-1","https://ubuntu.com/security/notices/USN-7900-1","https://ubuntu.com/security/notices/USN-7901-1","https://ubuntu.com/security/notices/USN-7902-1"],"bugs":[""],"patches":{"openjdk-8":[],"openjdk-9":[],"openjdk-lts":[],"openjdk-13":[],"openjdk-16":[],"openjdk-17":[],"openjdk-17-crac":[],"openjdk-18":[],"openjdk-19":[],"openjdk-21":[],"openjdk-21-crac":[],"openjdk-24":[],"openjdk-25":[],"openjdk-25-crac":[]},"tags":{},"packages":[{"name":"openjdk-13","source":"https://ubuntu.com/security/cve?package=openjdk-13","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-13","debian":"https://tracker.debian.org/pkg/openjdk-13","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"superseded by openjdk-17","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-16","source":"https://ubuntu.com/security/cve?package=openjdk-16","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-16","debian":"https://tracker.debian.org/pkg/openjdk-16","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"superseded by openjdk-17","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-17","source":"https://ubuntu.com/security/cve?package=openjdk-17","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-17","debian":"https://tracker.debian.org/pkg/openjdk-17","statuses":[{"release_codename":"resolute","status":"released","description":"17.0.17+10-1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"17.0.17+10-1~18.04","component":null,"pocket":"esm-apps"},{"release_codename":"focal","status":"released","description":"17.0.17+10-1~20.04","component":null,"pocket":"esm-apps"},{"release_codename":"jammy","status":"released","description":"17.0.17+10-1~22.04","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"17.0.17+10-1~24.04","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"17.0.17+10-1~25.04","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"17.0.17+10-1~25.10","component":null,"pocket":"security"}]},{"name":"openjdk-17-crac","source":"https://ubuntu.com/security/cve?package=openjdk-17-crac","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-17-crac","debian":"https://tracker.debian.org/pkg/openjdk-17-crac","statuses":[{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"17.0.17+10-0ubuntu1~25.04","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"17.0.17+10-0ubuntu1~25.10","component":null,"pocket":"security"}]},{"name":"openjdk-18","source":"https://ubuntu.com/security/cve?package=openjdk-18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-18","debian":"https://tracker.debian.org/pkg/openjdk-18","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-19","source":"https://ubuntu.com/security/cve?package=openjdk-19","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-19","debian":"https://tracker.debian.org/pkg/openjdk-19","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-21","source":"https://ubuntu.com/security/cve?package=openjdk-21","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-21","debian":"https://tracker.debian.org/pkg/openjdk-21","statuses":[{"release_codename":"resolute","status":"released","description":"21.0.9+10-1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"21.0.9+10-1~22.04","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"21.0.9+10-1~24.04","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"21.0.9+10-1~25.04","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"21.0.9+10-1~25.10","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"21.0.9+10-1~20.04","component":null,"pocket":"esm-apps"}]},{"name":"openjdk-21-crac","source":"https://ubuntu.com/security/cve?package=openjdk-21-crac","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-21-crac","debian":"https://tracker.debian.org/pkg/openjdk-21-crac","statuses":[{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"21.0.9+10-0ubuntu1~25.04","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"21.0.9+10-0ubuntu1~25.10","component":null,"pocket":"security"}]},{"name":"openjdk-24","source":"https://ubuntu.com/security/cve?package=openjdk-24","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-24","debian":"https://tracker.debian.org/pkg/openjdk-24","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]},{"name":"openjdk-25","source":"https://ubuntu.com/security/cve?package=openjdk-25","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-25","debian":"https://tracker.debian.org/pkg/openjdk-25","statuses":[{"release_codename":"resolute","status":"released","description":"25.0.1+8","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"25.0.1+8-1~22.04","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"25.0.1+8-1~24.04","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"25.0.1+8-1~25.04","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"25.0.1+8-1~25.10","component":null,"pocket":"security"}]},{"name":"openjdk-25-crac","source":"https://ubuntu.com/security/cve?package=openjdk-25-crac","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-25-crac","debian":"https://tracker.debian.org/pkg/openjdk-25-crac","statuses":[{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"21.0.9+10-0ubuntu1~25.10","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-8","source":"https://ubuntu.com/security/cve?package=openjdk-8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-8","debian":"https://tracker.debian.org/pkg/openjdk-8","statuses":[{"release_codename":"resolute","status":"released","description":"8u472-ga-1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"8u472-ga-1~18.04","component":null,"pocket":"esm-apps"},{"release_codename":"focal","status":"released","description":"8u472-ga-1~20.04","component":null,"pocket":"esm-apps"},{"release_codename":"jammy","status":"released","description":"8u472-ga-1~22.04","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"8u472-ga-1~24.04","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"8u472-ga-1~25.04","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"8u472-ga-1~25.10","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"8u472-ga-1~16.04","component":null,"pocket":"esm-infra"}]},{"name":"openjdk-9","source":"https://ubuntu.com/security/cve?package=openjdk-9","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-9","debian":"https://tracker.debian.org/pkg/openjdk-9","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of ESM support, was ignored [no longer supported by upstream]","component":null,"pocket":"security"}]},{"name":"openjdk-lts","source":"https://ubuntu.com/security/cve?package=openjdk-lts","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-lts","debian":"https://tracker.debian.org/pkg/openjdk-lts","statuses":[{"release_codename":"resolute","status":"released","description":"11.0.29+7-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"11.0.29+7-1ubuntu1~18.04","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"11.0.29+7-1ubuntu1~20.04","component":null,"pocket":"esm-infra"},{"release_codename":"jammy","status":"released","description":"11.0.29+7-1ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"11.0.29+7-1ubuntu1~25.10","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"11.0.29+7-1ubuntu1~24.04","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"11.0.29+7-1ubuntu1~25.04","component":null,"pocket":"security"}]}],"notices_ids":["USN-7884-1","USN-7885-1","USN-7881-1","USN-7883-1","USN-7882-1","USN-7900-1","USN-7901-1","USN-7902-1"],"notices":[{"id":"USN-7884-1","title":"OpenJDK 25 vulnerabilities","summary":"Several security issues were fixed in OpenJDK 25.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart Java applications\nto make all the necessary changes.","references":[],"published":"2025-11-24T12:08:12.645876","description":"Jinfeng Guo discovered that the Security component of OpenJDK 25 did not\ncorrectly handle certain representations of encoded strings. An\nunauthenticated remote attacker could possibly use this issue to modify\nfiles or leak sensitive information. (CVE-2025-53057)\n\nDarius Bohni discovered that the JAXP component of OpenJDK 25 was\nvulnerable to a XML External Entity (XEE) attack. An unauthenticated remote\nattacker could possibly use this issue to modify files or leak sensitive\ninformation. (CVE-2025-53066)\n\nYakov Shafranovich discovered that the Libraries component of OpenJDK 21\ncontained an issue where certain Strings built with StringBuilder returned\nan incorrect result for String.equals() checks.  An unauthenticated remote\nattacker could possibly use this issue to update, insert, or delete\naccessible data. (CVE-2025-61748)\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttps://openjdk.org/groups/vulnerability/advisories/2025-10-21","is_hidden":false,"release_packages":{"jammy":[{"name":"openjdk-25","version":"25.0.1+8-1~22.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-25-demo","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"},{"name":"openjdk-25-doc","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"},{"name":"openjdk-25-jdk","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"},{"name":"openjdk-25-jdk-headless","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"},{"name":"openjdk-25-jre","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"},{"name":"openjdk-25-jre-headless","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"},{"name":"openjdk-25-jre-zero","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"},{"name":"openjdk-25-jvmci-jdk","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"},{"name":"openjdk-25-source","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"},{"name":"openjdk-25-testsupport","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"}],"noble":[{"name":"openjdk-25","version":"25.0.1+8-1~24.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-25-demo","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"},{"name":"openjdk-25-doc","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"},{"name":"openjdk-25-jdk","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"},{"name":"openjdk-25-jdk-headless","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"},{"name":"openjdk-25-jre","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"},{"name":"openjdk-25-jre-headless","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"},{"name":"openjdk-25-jre-zero","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"},{"name":"openjdk-25-jvmci-jdk","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"},{"name":"openjdk-25-source","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"},{"name":"openjdk-25-testsupport","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"}],"plucky":[{"name":"openjdk-25","version":"25.0.1+8-1~25.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-25-demo","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"},{"name":"openjdk-25-doc","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"},{"name":"openjdk-25-jdk","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"},{"name":"openjdk-25-jdk-headless","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"},{"name":"openjdk-25-jre","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"},{"name":"openjdk-25-jre-headless","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"},{"name":"openjdk-25-jre-zero","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"},{"name":"openjdk-25-jvmci-jdk","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"},{"name":"openjdk-25-source","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"},{"name":"openjdk-25-testsupport","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"}],"questing":[{"name":"openjdk-25","version":"25.0.1+8-1~25.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-25-demo","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"},{"name":"openjdk-25-doc","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"},{"name":"openjdk-25-jdk","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"},{"name":"openjdk-25-jdk-headless","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"},{"name":"openjdk-25-jre","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"},{"name":"openjdk-25-jre-headless","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"},{"name":"openjdk-25-jre-zero","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"},{"name":"openjdk-25-jvmci-jdk","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"},{"name":"openjdk-25-source","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"},{"name":"openjdk-25-testsupport","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-53057","CVE-2025-61748","CVE-2025-53066"]},{"id":"USN-7885-1","title":"OpenJDK 21 vulnerabilities","summary":"Several security issues were fixed in OpenJDK 21.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart Java applications\nto make all the necessary changes.","references":[],"published":"2025-11-24T12:14:30.425780","description":"Jinfeng Guo discovered that the Security component of OpenJDK 21 did not\ncorrectly handle certain representations of encoded strings. An\nunauthenticated remote attacker could possibly use this issue to modify\nfiles or leak sensitive information. (CVE-2025-53057)\n\nDarius Bohni discovered that the JAXP component of OpenJDK 21 was\nvulnerable to a XML External Entity (XEE) attack. An unauthenticated remote\nattacker could possibly use this issue to modify files or leak sensitive\ninformation. (CVE-2025-53066)\n\nYakov Shafranovich discovered that the Libraries component of OpenJDK 21\ncontained an issue where certain Strings built with StringBuilder returned\nan incorrect result for String.equals() checks. An unauthenticated remote\nattacker could possibly use this issue to update, insert, or delete\naccessible data. (CVE-2025-61748)\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttps://openjdk.org/groups/vulnerability/advisories/2025-10-21","is_hidden":false,"release_packages":{"focal":[{"name":"openjdk-21","version":"21.0.9+10-1~20.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-21-demo","version":"21.0.9+10-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-21-doc","version":"21.0.9+10-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-21-jdk","version":"21.0.9+10-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-21-jdk-headless","version":"21.0.9+10-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-21-jre","version":"21.0.9+10-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-21-jre-headless","version":"21.0.9+10-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-21-jre-zero","version":"21.0.9+10-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-21-source","version":"21.0.9+10-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-21-testsupport","version":"21.0.9+10-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":null,"pocket":"esm-apps"}],"jammy":[{"name":"openjdk-21","version":"21.0.9+10-1~22.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-21-demo","version":"21.0.9+10-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~22.04","pocket":"security"},{"name":"openjdk-21-doc","version":"21.0.9+10-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~22.04","pocket":"security"},{"name":"openjdk-21-jdk","version":"21.0.9+10-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~22.04","pocket":"security"},{"name":"openjdk-21-jdk-headless","version":"21.0.9+10-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~22.04","pocket":"security"},{"name":"openjdk-21-jre","version":"21.0.9+10-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~22.04","pocket":"security"},{"name":"openjdk-21-jre-headless","version":"21.0.9+10-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~22.04","pocket":"security"},{"name":"openjdk-21-jre-zero","version":"21.0.9+10-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~22.04","pocket":"security"},{"name":"openjdk-21-source","version":"21.0.9+10-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~22.04","pocket":"security"},{"name":"openjdk-21-testsupport","version":"21.0.9+10-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~22.04","pocket":"security"}],"noble":[{"name":"openjdk-21","version":"21.0.9+10-1~24.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-21-demo","version":"21.0.9+10-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~24.04","pocket":"security"},{"name":"openjdk-21-doc","version":"21.0.9+10-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~24.04","pocket":"security"},{"name":"openjdk-21-jdk","version":"21.0.9+10-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~24.04","pocket":"security"},{"name":"openjdk-21-jdk-headless","version":"21.0.9+10-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~24.04","pocket":"security"},{"name":"openjdk-21-jre","version":"21.0.9+10-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~24.04","pocket":"security"},{"name":"openjdk-21-jre-headless","version":"21.0.9+10-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~24.04","pocket":"security"},{"name":"openjdk-21-jre-zero","version":"21.0.9+10-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~24.04","pocket":"security"},{"name":"openjdk-21-source","version":"21.0.9+10-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~24.04","pocket":"security"},{"name":"openjdk-21-testsupport","version":"21.0.9+10-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~24.04","pocket":"security"}],"plucky":[{"name":"openjdk-21","version":"21.0.9+10-1~25.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-21-demo","version":"21.0.9+10-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.04","pocket":"security"},{"name":"openjdk-21-doc","version":"21.0.9+10-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.04","pocket":"security"},{"name":"openjdk-21-jdk","version":"21.0.9+10-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.04","pocket":"security"},{"name":"openjdk-21-jdk-headless","version":"21.0.9+10-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.04","pocket":"security"},{"name":"openjdk-21-jre","version":"21.0.9+10-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.04","pocket":"security"},{"name":"openjdk-21-jre-headless","version":"21.0.9+10-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.04","pocket":"security"},{"name":"openjdk-21-jre-zero","version":"21.0.9+10-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.04","pocket":"security"},{"name":"openjdk-21-source","version":"21.0.9+10-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.04","pocket":"security"},{"name":"openjdk-21-testsupport","version":"21.0.9+10-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.04","pocket":"security"}],"questing":[{"name":"openjdk-21","version":"21.0.9+10-1~25.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-21-demo","version":"21.0.9+10-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.10","pocket":"security"},{"name":"openjdk-21-doc","version":"21.0.9+10-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.10","pocket":"security"},{"name":"openjdk-21-jdk","version":"21.0.9+10-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.10","pocket":"security"},{"name":"openjdk-21-jdk-headless","version":"21.0.9+10-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.10","pocket":"security"},{"name":"openjdk-21-jre","version":"21.0.9+10-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.10","pocket":"security"},{"name":"openjdk-21-jre-headless","version":"21.0.9+10-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.10","pocket":"security"},{"name":"openjdk-21-jre-zero","version":"21.0.9+10-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.10","pocket":"security"},{"name":"openjdk-21-source","version":"21.0.9+10-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.10","pocket":"security"},{"name":"openjdk-21-testsupport","version":"21.0.9+10-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.10","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-53057","CVE-2025-61748","CVE-2025-53066"]},{"id":"USN-7881-1","title":"OpenJDK 8 vulnerabilities","summary":"Several security issues were fixed in OpenJDK 8.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart Java\napplications to make all the necessary changes.","references":[],"published":"2025-11-24T00:36:57.374616","description":"Jinfeng Guo discovered that the Security component of OpenJDK 8 did not\ncorrectly handle certain representations of encoded strings. An\nunauthenticated remote attacker could possibly use this issue to modify\nfiles or leak sensitive information. (CVE-2025-53057)\n\nDarius Bohni discovered that the JAXP component of OpenJDK 8 was\nvulnerable to a XML External Entity (XEE) attack. An unauthenticated\nremote attacker could possibly use this issue to modify files or leak\nsensitive information. (CVE-2025-53066)\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttps://openjdk.org/groups/vulnerability/advisories/2025-10-21","is_hidden":false,"release_packages":{"bionic":[{"name":"openjdk-8","version":"8u472-ga-1~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-8-demo","version":"8u472-ga-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-doc","version":"8u472-ga-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jdk","version":"8u472-ga-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jdk-headless","version":"8u472-ga-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jre","version":"8u472-ga-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jre-headless","version":"8u472-ga-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jre-zero","version":"8u472-ga-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-source","version":"8u472-ga-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"}],"focal":[{"name":"openjdk-8","version":"8u472-ga-1~20.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-8-demo","version":"8u472-ga-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-doc","version":"8u472-ga-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jdk","version":"8u472-ga-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jdk-headless","version":"8u472-ga-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jre","version":"8u472-ga-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jre-headless","version":"8u472-ga-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jre-zero","version":"8u472-ga-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-source","version":"8u472-ga-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"}],"jammy":[{"name":"openjdk-8","version":"8u472-ga-1~22.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-8-demo","version":"8u472-ga-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~22.04","pocket":"security"},{"name":"openjdk-8-doc","version":"8u472-ga-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~22.04","pocket":"security"},{"name":"openjdk-8-jdk","version":"8u472-ga-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~22.04","pocket":"security"},{"name":"openjdk-8-jdk-headless","version":"8u472-ga-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~22.04","pocket":"security"},{"name":"openjdk-8-jre","version":"8u472-ga-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~22.04","pocket":"security"},{"name":"openjdk-8-jre-headless","version":"8u472-ga-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~22.04","pocket":"security"},{"name":"openjdk-8-jre-zero","version":"8u472-ga-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~22.04","pocket":"security"},{"name":"openjdk-8-source","version":"8u472-ga-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~22.04","pocket":"security"}],"noble":[{"name":"openjdk-8","version":"8u472-ga-1~24.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-8-demo","version":"8u472-ga-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~24.04","pocket":"security"},{"name":"openjdk-8-doc","version":"8u472-ga-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~24.04","pocket":"security"},{"name":"openjdk-8-jdk","version":"8u472-ga-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~24.04","pocket":"security"},{"name":"openjdk-8-jdk-headless","version":"8u472-ga-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~24.04","pocket":"security"},{"name":"openjdk-8-jre","version":"8u472-ga-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~24.04","pocket":"security"},{"name":"openjdk-8-jre-headless","version":"8u472-ga-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~24.04","pocket":"security"},{"name":"openjdk-8-jre-zero","version":"8u472-ga-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~24.04","pocket":"security"},{"name":"openjdk-8-source","version":"8u472-ga-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~24.04","pocket":"security"}],"plucky":[{"name":"openjdk-8","version":"8u472-ga-1~25.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-8-demo","version":"8u472-ga-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.04","pocket":"security"},{"name":"openjdk-8-doc","version":"8u472-ga-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.04","pocket":"security"},{"name":"openjdk-8-jdk","version":"8u472-ga-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.04","pocket":"security"},{"name":"openjdk-8-jdk-headless","version":"8u472-ga-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.04","pocket":"security"},{"name":"openjdk-8-jre","version":"8u472-ga-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.04","pocket":"security"},{"name":"openjdk-8-jre-headless","version":"8u472-ga-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.04","pocket":"security"},{"name":"openjdk-8-jre-zero","version":"8u472-ga-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.04","pocket":"security"},{"name":"openjdk-8-source","version":"8u472-ga-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.04","pocket":"security"}],"questing":[{"name":"openjdk-8","version":"8u472-ga-1~25.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-8-demo","version":"8u472-ga-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.10","pocket":"security"},{"name":"openjdk-8-doc","version":"8u472-ga-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.10","pocket":"security"},{"name":"openjdk-8-jdk","version":"8u472-ga-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.10","pocket":"security"},{"name":"openjdk-8-jdk-headless","version":"8u472-ga-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.10","pocket":"security"},{"name":"openjdk-8-jre","version":"8u472-ga-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.10","pocket":"security"},{"name":"openjdk-8-jre-headless","version":"8u472-ga-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.10","pocket":"security"},{"name":"openjdk-8-jre-zero","version":"8u472-ga-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.10","pocket":"security"},{"name":"openjdk-8-source","version":"8u472-ga-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.10","pocket":"security"}],"xenial":[{"name":"openjdk-8","version":"8u472-ga-1~16.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-8-demo","version":"8u472-ga-1~16.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-8-doc","version":"8u472-ga-1~16.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-8-jdk","version":"8u472-ga-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-8-jdk-headless","version":"8u472-ga-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-8-jre","version":"8u472-ga-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-8-jre-headless","version":"8u472-ga-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-8-jre-jamvm","version":"8u472-ga-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-8-jre-zero","version":"8u472-ga-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-8-source","version":"8u472-ga-1~16.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2025-53057","CVE-2025-53066"]},{"id":"USN-7883-1","title":"OpenJDK 17 vulnerabilities","summary":"Several security issues were fixed in OpenJDK 17.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart Java\napplications to make all the necessary changes.","references":[],"published":"2025-11-24T00:55:38.768921","description":"Jinfeng Guo discovered that the Security component of OpenJDK 17 did not\ncorrectly handle certain representations of encoded strings. An\nunauthenticated remote attacker could possibly use this issue to modify\nfiles or leak sensitive information. (CVE-2025-53057)\n\nDarius Bohni discovered that the JAXP component of OpenJDK 17 was\nvulnerable to a XML External Entity (XEE) attack. An unauthenticated\nremote attacker could possibly use this issue to modify files or leak\nsensitive information. (CVE-2025-53066)\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttps://openjdk.org/groups/vulnerability/advisories/2025-10-21","is_hidden":false,"release_packages":{"bionic":[{"name":"openjdk-17","version":"17.0.17+10-1~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.17+10-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-17-doc","version":"17.0.17+10-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-17-jdk","version":"17.0.17+10-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-17-jdk-headless","version":"17.0.17+10-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-17-jre","version":"17.0.17+10-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-17-jre-headless","version":"17.0.17+10-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-17-jre-zero","version":"17.0.17+10-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-17-source","version":"17.0.17+10-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"}],"focal":[{"name":"openjdk-17","version":"17.0.17+10-1~20.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.17+10-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-17-doc","version":"17.0.17+10-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-17-jdk","version":"17.0.17+10-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-17-jdk-headless","version":"17.0.17+10-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-17-jre","version":"17.0.17+10-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-17-jre-headless","version":"17.0.17+10-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-17-jre-zero","version":"17.0.17+10-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-17-source","version":"17.0.17+10-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"}],"jammy":[{"name":"openjdk-17","version":"17.0.17+10-1~22.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.17+10-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~22.04","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.17+10-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~22.04","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.17+10-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~22.04","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.17+10-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~22.04","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.17+10-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~22.04","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.17+10-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~22.04","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.17+10-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~22.04","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.17+10-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~22.04","pocket":"security"}],"noble":[{"name":"openjdk-17","version":"17.0.17+10-1~24.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.17+10-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~24.04","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.17+10-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~24.04","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.17+10-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~24.04","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.17+10-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~24.04","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.17+10-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~24.04","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.17+10-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~24.04","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.17+10-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~24.04","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.17+10-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~24.04","pocket":"security"}],"plucky":[{"name":"openjdk-17","version":"17.0.17+10-1~25.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.17+10-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.04","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.17+10-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.04","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.17+10-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.04","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.17+10-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.04","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.17+10-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.04","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.17+10-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.04","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.17+10-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.04","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.17+10-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.04","pocket":"security"}],"questing":[{"name":"openjdk-17","version":"17.0.17+10-1~25.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.17+10-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.10","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.17+10-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.10","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.17+10-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.10","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.17+10-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.10","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.17+10-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.10","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.17+10-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.10","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.17+10-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.10","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.17+10-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.10","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-53057","CVE-2025-53066"]},{"id":"USN-7882-1","title":"OpenJDK 11 vulnerabilities","summary":"Several security issues were fixed in OpenJDK 11.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart Java\napplications to make all the necessary changes.","references":[],"published":"2025-11-24T00:52:17.522166","description":"Jinfeng Guo discovered that the Security component of OpenJDK 11 did not\ncorrectly handle certain representations of encoded strings. An\nunauthenticated remote attacker could possibly use this issue to modify\nfiles or leak sensitive information. (CVE-2025-53057)\n\nDarius Bohni discovered that the JAXP component of OpenJDK 11 was\nvulnerable to a XML External Entity (XEE) attack. An unauthenticated\nremote attacker could possibly use this issue to modify files or leak\nsensitive information. (CVE-2025-53066)\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttps://openjdk.org/groups/vulnerability/advisories/2025-10-21","is_hidden":false,"release_packages":{"bionic":[{"name":"openjdk-lts","version":"11.0.29+7-1ubuntu1~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-11-demo","version":"11.0.29+7-1ubuntu1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-doc","version":"11.0.29+7-1ubuntu1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jdk","version":"11.0.29+7-1ubuntu1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jdk-headless","version":"11.0.29+7-1ubuntu1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jre","version":"11.0.29+7-1ubuntu1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jre-headless","version":"11.0.29+7-1ubuntu1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jre-zero","version":"11.0.29+7-1ubuntu1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-source","version":"11.0.29+7-1ubuntu1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"openjdk-lts","version":"11.0.29+7-1ubuntu1~20.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-11-demo","version":"11.0.29+7-1ubuntu1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-doc","version":"11.0.29+7-1ubuntu1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jdk","version":"11.0.29+7-1ubuntu1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jdk-headless","version":"11.0.29+7-1ubuntu1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jre","version":"11.0.29+7-1ubuntu1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jre-headless","version":"11.0.29+7-1ubuntu1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jre-zero","version":"11.0.29+7-1ubuntu1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-source","version":"11.0.29+7-1ubuntu1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"}],"jammy":[{"name":"openjdk-lts","version":"11.0.29+7-1ubuntu1~22.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-11-demo","version":"11.0.29+7-1ubuntu1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~22.04","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.29+7-1ubuntu1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~22.04","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.29+7-1ubuntu1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~22.04","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.29+7-1ubuntu1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~22.04","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.29+7-1ubuntu1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~22.04","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.29+7-1ubuntu1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~22.04","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.29+7-1ubuntu1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~22.04","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.29+7-1ubuntu1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~22.04","pocket":"security"}],"noble":[{"name":"openjdk-lts","version":"11.0.29+7-1ubuntu1~24.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-11-demo","version":"11.0.29+7-1ubuntu1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~24.04","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.29+7-1ubuntu1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~24.04","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.29+7-1ubuntu1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~24.04","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.29+7-1ubuntu1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~24.04","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.29+7-1ubuntu1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~24.04","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.29+7-1ubuntu1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~24.04","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.29+7-1ubuntu1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~24.04","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.29+7-1ubuntu1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~24.04","pocket":"security"}],"plucky":[{"name":"openjdk-lts","version":"11.0.29+7-1ubuntu1~25.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-11-demo","version":"11.0.29+7-1ubuntu1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.04","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.29+7-1ubuntu1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.04","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.29+7-1ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.04","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.29+7-1ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.04","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.29+7-1ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.04","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.29+7-1ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.04","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.29+7-1ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.04","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.29+7-1ubuntu1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.04","pocket":"security"}],"questing":[{"name":"openjdk-lts","version":"11.0.29+7-1ubuntu1~25.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-11-demo","version":"11.0.29+7-1ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.10","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.29+7-1ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.10","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.29+7-1ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.10","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.29+7-1ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.10","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.29+7-1ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.10","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.29+7-1ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.10","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.29+7-1ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.10","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.29+7-1ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.10","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-53057","CVE-2025-53066"]},{"id":"USN-7900-1","title":"CRaC JDK 17 vulnerabilities","summary":"Several security issues were fixed in CRaC JDK 17.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart Java\napplications to make all the necessary changes.","references":[],"published":"2025-12-01T14:37:11.399842","description":"Jinfeng Guo discovered that the Security component of CRaC JDK 17 did not\ncorrectly handle certain representations of encoded strings. An\nunauthenticated remote attacker could possibly use this issue to modify\nfiles or leak sensitive information. (CVE-2025-53057)\n\nDarius Bohni discovered that the JAXP component of CRaC JDK 17 was\nvulnerable to a XML External Entity (XEE) attack. An unauthenticated\nremote attacker could possibly use this issue to modify files or leak\nsensitive information. (CVE-2025-53066)\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttps://openjdk.org/groups/vulnerability/advisories/2025-10-21","is_hidden":false,"release_packages":{"plucky":[{"name":"openjdk-17-crac","version":"17.0.17+10-0ubuntu1~25.04","description":"Open Source Java implementation with Coordinated Restore at Checkpoints","is_source":true},{"name":"openjdk-17-crac-demo","version":"17.0.17+10-0ubuntu1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-17-crac-doc","version":"17.0.17+10-0ubuntu1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-17-crac-jdk","version":"17.0.17+10-0ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-17-crac-jdk-headless","version":"17.0.17+10-0ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-17-crac-jre","version":"17.0.17+10-0ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-17-crac-jre-headless","version":"17.0.17+10-0ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-17-crac-jre-zero","version":"17.0.17+10-0ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-17-crac-source","version":"17.0.17+10-0ubuntu1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.04","pocket":"security"}],"questing":[{"name":"openjdk-17-crac","version":"17.0.17+10-0ubuntu1~25.10","description":"Open Source Java implementation with Coordinated Restore at Checkpoints","is_source":true},{"name":"openjdk-17-crac-demo","version":"17.0.17+10-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-17-crac-doc","version":"17.0.17+10-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-17-crac-jdk","version":"17.0.17+10-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-17-crac-jdk-headless","version":"17.0.17+10-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-17-crac-jre","version":"17.0.17+10-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-17-crac-jre-headless","version":"17.0.17+10-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-17-crac-jre-zero","version":"17.0.17+10-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-17-crac-source","version":"17.0.17+10-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.10","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-53057","CVE-2025-53066"]},{"id":"USN-7901-1","title":"CRaC JDK 21 vulnerabilities","summary":"Several security issues were fixed in CRaC JDK 21.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart Java applications\nto make all the necessary changes.","references":[],"published":"2025-12-01T14:42:39.109082","description":"Jinfeng Guo discovered that the Security component of CRaC JDK 21 did not\ncorrectly handle certain representations of encoded strings. An\nunauthenticated remote attacker could possibly use this issue to modify\nfiles or leak sensitive information. (CVE-2025-53057)\n\nDarius Bohni discovered that the JAXP component of CRaC JDK 21 was\nvulnerable to a XML External Entity (XEE) attack. An unauthenticated remote\nattacker could possibly use this issue to modify files or leak sensitive\ninformation. (CVE-2025-53066)\n\nYakov Shafranovich discovered that the Libraries component of CRaC JDK 21\ncontained an issue where certain Strings built with StringBuilder returned\nan incorrect result for String.equals() checks. An unauthenticated remote\nattacker could possibly use this issue to update, insert, or delete\naccessible data. (CVE-2025-61748)\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttps://openjdk.org/groups/vulnerability/advisories/2025-10-21","is_hidden":false,"release_packages":{"plucky":[{"name":"openjdk-21-crac","version":"21.0.9+10-0ubuntu1~25.04","description":"Open Source Java implementation with Coordinated Restore at Checkpoints","is_source":true},{"name":"openjdk-21-crac-demo","version":"21.0.9+10-0ubuntu1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-21-crac-doc","version":"21.0.9+10-0ubuntu1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-21-crac-jdk","version":"21.0.9+10-0ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-21-crac-jdk-headless","version":"21.0.9+10-0ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-21-crac-jre","version":"21.0.9+10-0ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-21-crac-jre-headless","version":"21.0.9+10-0ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-21-crac-jre-zero","version":"21.0.9+10-0ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-21-crac-source","version":"21.0.9+10-0ubuntu1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-21-crac-testsupport","version":"21.0.9+10-0ubuntu1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.04","pocket":"security"}],"questing":[{"name":"openjdk-21-crac","version":"21.0.9+10-0ubuntu1~25.10","description":"Open Source Java implementation with Coordinated Restore at Checkpoints","is_source":true},{"name":"openjdk-21-crac-demo","version":"21.0.9+10-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-21-crac-doc","version":"21.0.9+10-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-21-crac-jdk","version":"21.0.9+10-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-21-crac-jdk-headless","version":"21.0.9+10-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-21-crac-jre","version":"21.0.9+10-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-21-crac-jre-headless","version":"21.0.9+10-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-21-crac-jre-zero","version":"21.0.9+10-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-21-crac-source","version":"21.0.9+10-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-21-crac-testsupport","version":"21.0.9+10-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.10","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-53057","CVE-2025-53066","CVE-2025-61748"]},{"id":"USN-7902-1","title":"CRaC JDK 25 vulnerabilities","summary":"Several security issues were fixed in CRaC JDK 25.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart Java\napplications to make all the necessary changes.","references":[],"published":"2025-12-01T14:48:36.452617","description":"Jinfeng Guo discovered that the Security component of CRaC JDK 25 did not\ncorrectly handle certain representations of encoded strings. An\nunauthenticated remote attacker could possibly use this issue to modify\nfiles or leak sensitive information. (CVE-2025-53057)\n\nDarius Bohni discovered that the JAXP component of CRaC JDK 25 was\nvulnerable to a XML External Entity (XEE) attack. An unauthenticated\nremote attacker could possibly use this issue to modify files or leak\nsensitive information. (CVE-2025-53066)\n\nYakov Shafranovich discovered that the Libraries component of CRaC JDK\n25 contained an issue where certain Strings built with StringBuilder\nreturned an incorrect result for String.equals() checks. An unauthenticated\nremote attacker could possibly use this issue to update, insert, or\ndelete accessible data. (CVE-2025-61748)\n\nIn addition to security fixes, the updated packages contain bug fixes,\nnew features, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttps://openjdk.org/groups/vulnerability/advisories/2025-10-21","is_hidden":false,"release_packages":{"questing":[{"name":"openjdk-25-crac","version":"25.0.1+8-0ubuntu1~25.10","description":"Open Source Java implementation with Coordinated Restore at Checkpoints","is_source":true},{"name":"openjdk-25-crac-demo","version":"25.0.1+8-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac/25.0.1+8-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-25-crac-doc","version":"25.0.1+8-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac/25.0.1+8-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-25-crac-jdk","version":"25.0.1+8-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac/25.0.1+8-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-25-crac-jdk-headless","version":"25.0.1+8-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac/25.0.1+8-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-25-crac-jre","version":"25.0.1+8-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac/25.0.1+8-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-25-crac-jre-headless","version":"25.0.1+8-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac/25.0.1+8-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-25-crac-jre-zero","version":"25.0.1+8-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac/25.0.1+8-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-25-crac-source","version":"25.0.1+8-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac/25.0.1+8-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-25-crac-testsupport","version":"25.0.1+8-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac/25.0.1+8-0ubuntu1~25.10","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-53057","CVE-2025-53066","CVE-2025-61748"]}]},{"id":"CVE-2025-53062","published":"2025-10-21T20:20:00","updated_at":"2026-02-04T07:52:00.816145+00:00","description":"\nVulnerability in the MySQL Server product of Oracle MySQL (component:\nInnoDB).  Supported versions that are affected are 8.0.0-8.0.43,\n8.4.0-8.4.6 and  9.0.0-9.4.0. Easily exploitable vulnerability allows high\nprivileged attacker with network access via multiple protocols to\ncompromise MySQL Server.  Successful attacks of this vulnerability can\nresult in unauthorized ability to cause a hang or frequently repeatable\ncrash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability\nimpacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","ubuntu_description":"","notes":[{"author":"iconstantin","note":"since mysql versions 5.7 and earlier are no longer supported\nupstream, we are unable to update them to address security\nissues,\nmarking as ignored.\nmariadb 5.5, 10.0, 10.1, and 10.3 are end of life and no\nlonger supported upstream - marking as ignored."}],"codename":null,"priority":"medium","cvss3":4.9,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":4.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-53062","https://www.oracle.com/security-alerts/cpuoct2025.html","https://ubuntu.com/security/notices/USN-7873-1","https://ubuntu.com/security/notices/USN-8006-1"],"bugs":[""],"patches":{"mysql-5.5":[],"mysql-5.7":[],"mysql-8.0":[],"mysql-8.4":[],"mariadb":[],"mariadb-10.0":[],"mariadb-10.1":[],"mariadb-10.3":[],"mariadb-10.6":[],"percona-xtradb-cluster-5.6":[],"percona-server-5.6":[]},"tags":{},"packages":[{"name":"percona-xtradb-cluster-5.6","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.6","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"percona-server-5.6","source":"https://ubuntu.com/security/cve?package=percona-server-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-server-5.6","debian":"https://tracker.debian.org/pkg/percona-server-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"mariadb","source":"https://ubuntu.com/security/cve?package=mariadb","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb","debian":"https://tracker.debian.org/pkg/mariadb","statuses":[{"release_codename":"resolute","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.0","source":"https://ubuntu.com/security/cve?package=mariadb-10.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.0","debian":"https://tracker.debian.org/pkg/mariadb-10.0","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.1","source":"https://ubuntu.com/security/cve?package=mariadb-10.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.1","debian":"https://tracker.debian.org/pkg/mariadb-10.1","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.3","source":"https://ubuntu.com/security/cve?package=mariadb-10.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.3","debian":"https://tracker.debian.org/pkg/mariadb-10.3","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"no more upstream support","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.6","source":"https://ubuntu.com/security/cve?package=mariadb-10.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.6","debian":"https://tracker.debian.org/pkg/mariadb-10.6","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"see notes","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.7","source":"https://ubuntu.com/security/cve?package=mysql-5.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.7","debian":"https://tracker.debian.org/pkg/mysql-5.7","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"see notes","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of ESM support, was ignored [see notes]","component":null,"pocket":"security"}]},{"name":"mysql-8.0","source":"https://ubuntu.com/security/cve?package=mysql-8.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.0","debian":"https://tracker.debian.org/pkg/mysql-8.0","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"8.0.44-0ubuntu0.22.04.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8.0.45-0ubuntu0.20.04.1+esm2","component":null,"pocket":"esm-infra"},{"release_codename":"upstream","status":"released","description":"8.0.44","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"8.0.44-0ubuntu0.24.04.1","component":null,"pocket":"security"}]},{"name":"mysql-8.4","source":"https://ubuntu.com/security/cve?package=mysql-8.4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.4","debian":"https://tracker.debian.org/pkg/mysql-8.4","statuses":[{"release_codename":"resolute","status":"released","description":"8.4.7-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8.4.7","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"8.4.7-0ubuntu0.25.04.1","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"8.4.7-0ubuntu0.25.10.2","component":null,"pocket":"security"}]}],"notices_ids":["USN-7873-1","USN-8006-1"],"notices":[{"id":"USN-7873-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. In general, a standard system update will make all the necessary\nchanges.","references":[],"published":"2025-11-19T12:53:58.935242","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 8.0.44 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS.\nUbuntu 25.04 and Ubuntu 25.10 have been updated to MySQL 8.4.7.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttps://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-44.html\nhttps://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-7.html\nhttps://www.oracle.com/security-alerts/cpuoct2025.html","is_hidden":false,"release_packages":{"jammy":[{"name":"mysql-8.0","version":"8.0.44-0ubuntu0.22.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-client","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-router","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-server","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"}],"noble":[{"name":"mysql-8.0","version":"8.0.44-0ubuntu0.24.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-client","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-router","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-server","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"}],"plucky":[{"name":"mysql-8.4","version":"8.4.7-0ubuntu0.25.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"libmysqlclient24","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-client","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-client-core","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-router","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-server","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-server-core","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-source","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"}],"questing":[{"name":"mysql-8.4","version":"8.4.7-0ubuntu0.25.10.2","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"libmysqlclient24","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-client","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-client-core","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-router","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-server","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-server-core","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-source","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-testsuite","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-53053","CVE-2025-53054","CVE-2025-53040","CVE-2025-53044","CVE-2025-53062","CVE-2025-53069","CVE-2025-53045","CVE-2025-53042"]},{"id":"USN-8006-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-02-03T07:52:06.723501","description":"Multiple security issues were discovered in MySQL and this update includes\na new upstream MySQL version to fix these issues.\n\nMySQL has been updated to 8.0.45 in Ubuntu 20.04 LTS.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttps://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-45.html\nhttps://www.oracle.com/security-alerts/cpujan2026.html","is_hidden":false,"release_packages":{"focal":[{"name":"mysql-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"libmysqlclient21","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client-core-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-router","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server-core-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-source-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-testsuite","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-testsuite-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2025-53040","CVE-2026-21968","CVE-2025-53044","CVE-2025-53045","CVE-2026-21964","CVE-2026-21941","CVE-2026-21937","CVE-2025-53062","CVE-2025-53054","CVE-2025-53053","CVE-2025-53069","CVE-2025-53042","CVE-2026-21936","CVE-2026-21948"]}]},{"id":"CVE-2025-53057","published":"2025-10-21T20:20:00","updated_at":"2025-12-02T02:17:12.862294+00:00","description":"\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM\nEnterprise Edition product of Oracle Java SE (component: Security).\nSupported versions that are affected are Oracle Java SE: 8u461, 8u461-perf,\n11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and  21.0.8;\nOracle GraalVM Enterprise Edition: 21.3.15. Difficult to exploit\nvulnerability allows unauthenticated attacker with network access via\nmultiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK,\nOracle GraalVM Enterprise Edition.  Successful attacks of this\nvulnerability can result in  unauthorized creation, deletion or\nmodification access to critical data or all Oracle Java SE, Oracle GraalVM\nfor JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This\nvulnerability can be exploited by using APIs in the specified Component,\ne.g., through a web service which supplies data to the APIs. This\nvulnerability also applies to Java deployments, typically in clients\nrunning sandboxed Java Web Start applications or sandboxed Java applets,\nthat load and run untrusted code (e.g., code that comes from the internet)\nand rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9\n(Integrity impacts).  CVSS Vector:\n(CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.9,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-53057","https://openjdk.org/groups/vulnerability/advisories/2025-10-21","https://www.oracle.com/security-alerts/cpuoct2025.html","https://ubuntu.com/security/notices/USN-7885-1","https://ubuntu.com/security/notices/USN-7884-1","https://ubuntu.com/security/notices/USN-7883-1","https://ubuntu.com/security/notices/USN-7881-1","https://ubuntu.com/security/notices/USN-7882-1","https://ubuntu.com/security/notices/USN-7900-1","https://ubuntu.com/security/notices/USN-7901-1","https://ubuntu.com/security/notices/USN-7902-1"],"bugs":[""],"patches":{"openjdk-8":[],"openjdk-9":[],"openjdk-lts":[],"openjdk-13":[],"openjdk-16":[],"openjdk-17":[],"openjdk-17-crac":[],"openjdk-18":[],"openjdk-19":[],"openjdk-21":[],"openjdk-21-crac":[],"openjdk-24":[],"openjdk-25":[],"openjdk-25-crac":[]},"tags":{},"packages":[{"name":"openjdk-13","source":"https://ubuntu.com/security/cve?package=openjdk-13","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-13","debian":"https://tracker.debian.org/pkg/openjdk-13","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"superseded by openjdk-17","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-16","source":"https://ubuntu.com/security/cve?package=openjdk-16","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-16","debian":"https://tracker.debian.org/pkg/openjdk-16","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"superseded by openjdk-17","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-17","source":"https://ubuntu.com/security/cve?package=openjdk-17","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-17","debian":"https://tracker.debian.org/pkg/openjdk-17","statuses":[{"release_codename":"resolute","status":"released","description":"17.0.17+10-1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"17.0.17+10-1~18.04","component":null,"pocket":"esm-apps"},{"release_codename":"focal","status":"released","description":"17.0.17+10-1~20.04","component":null,"pocket":"esm-apps"},{"release_codename":"jammy","status":"released","description":"17.0.17+10-1~22.04","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"17.0.17+10-1~24.04","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"17.0.17+10-1~25.04","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"17.0.17+10-1~25.10","component":null,"pocket":"security"}]},{"name":"openjdk-17-crac","source":"https://ubuntu.com/security/cve?package=openjdk-17-crac","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-17-crac","debian":"https://tracker.debian.org/pkg/openjdk-17-crac","statuses":[{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"17.0.17+10-0ubuntu1~25.04","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"17.0.17+10-0ubuntu1~25.10","component":null,"pocket":"security"}]},{"name":"openjdk-18","source":"https://ubuntu.com/security/cve?package=openjdk-18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-18","debian":"https://tracker.debian.org/pkg/openjdk-18","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-19","source":"https://ubuntu.com/security/cve?package=openjdk-19","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-19","debian":"https://tracker.debian.org/pkg/openjdk-19","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-21","source":"https://ubuntu.com/security/cve?package=openjdk-21","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-21","debian":"https://tracker.debian.org/pkg/openjdk-21","statuses":[{"release_codename":"resolute","status":"released","description":"21.0.9+10-1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"21.0.9+10-1~22.04","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"21.0.9+10-1~24.04","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"21.0.9+10-1~25.04","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"21.0.9+10-1~25.10","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"21.0.9+10-1~20.04","component":null,"pocket":"esm-apps"}]},{"name":"openjdk-21-crac","source":"https://ubuntu.com/security/cve?package=openjdk-21-crac","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-21-crac","debian":"https://tracker.debian.org/pkg/openjdk-21-crac","statuses":[{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"21.0.9+10-0ubuntu1~25.04","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"21.0.9+10-0ubuntu1~25.10","component":null,"pocket":"security"}]},{"name":"openjdk-24","source":"https://ubuntu.com/security/cve?package=openjdk-24","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-24","debian":"https://tracker.debian.org/pkg/openjdk-24","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]},{"name":"openjdk-25","source":"https://ubuntu.com/security/cve?package=openjdk-25","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-25","debian":"https://tracker.debian.org/pkg/openjdk-25","statuses":[{"release_codename":"resolute","status":"released","description":"25.0.1+8-1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"25.0.1+8-1~22.04","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"25.0.1+8-1~24.04","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"25.0.1+8-1~25.04","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"25.0.1+8-1~25.10","component":null,"pocket":"security"}]},{"name":"openjdk-25-crac","source":"https://ubuntu.com/security/cve?package=openjdk-25-crac","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-25-crac","debian":"https://tracker.debian.org/pkg/openjdk-25-crac","statuses":[{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"21.0.9+10-0ubuntu1~25.10","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-8","source":"https://ubuntu.com/security/cve?package=openjdk-8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-8","debian":"https://tracker.debian.org/pkg/openjdk-8","statuses":[{"release_codename":"resolute","status":"released","description":"8u472-ga-1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"8u472-ga-1~18.04","component":null,"pocket":"esm-apps"},{"release_codename":"focal","status":"released","description":"8u472-ga-1~20.04","component":null,"pocket":"esm-apps"},{"release_codename":"jammy","status":"released","description":"8u472-ga-1~22.04","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"8u472-ga-1~24.04","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"8u472-ga-1~25.04","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"8u472-ga-1~25.10","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"8u472-ga-1~16.04","component":null,"pocket":"esm-infra"}]},{"name":"openjdk-9","source":"https://ubuntu.com/security/cve?package=openjdk-9","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-9","debian":"https://tracker.debian.org/pkg/openjdk-9","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of ESM support, was ignored [no longer supported by upstream]","component":null,"pocket":"security"}]},{"name":"openjdk-lts","source":"https://ubuntu.com/security/cve?package=openjdk-lts","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-lts","debian":"https://tracker.debian.org/pkg/openjdk-lts","statuses":[{"release_codename":"resolute","status":"released","description":"11.0.29+7-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"11.0.29+7-1ubuntu1~18.04","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"11.0.29+7-1ubuntu1~20.04","component":null,"pocket":"esm-infra"},{"release_codename":"jammy","status":"released","description":"11.0.29+7-1ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"11.0.29+7-1ubuntu1~24.04","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"11.0.29+7-1ubuntu1~25.04","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"11.0.29+7-1ubuntu1~25.10","component":null,"pocket":"security"}]}],"notices_ids":["USN-7884-1","USN-7885-1","USN-7881-1","USN-7883-1","USN-7882-1","USN-7900-1","USN-7901-1","USN-7902-1"],"notices":[{"id":"USN-7884-1","title":"OpenJDK 25 vulnerabilities","summary":"Several security issues were fixed in OpenJDK 25.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart Java applications\nto make all the necessary changes.","references":[],"published":"2025-11-24T12:08:12.645876","description":"Jinfeng Guo discovered that the Security component of OpenJDK 25 did not\ncorrectly handle certain representations of encoded strings. An\nunauthenticated remote attacker could possibly use this issue to modify\nfiles or leak sensitive information. (CVE-2025-53057)\n\nDarius Bohni discovered that the JAXP component of OpenJDK 25 was\nvulnerable to a XML External Entity (XEE) attack. An unauthenticated remote\nattacker could possibly use this issue to modify files or leak sensitive\ninformation. (CVE-2025-53066)\n\nYakov Shafranovich discovered that the Libraries component of OpenJDK 21\ncontained an issue where certain Strings built with StringBuilder returned\nan incorrect result for String.equals() checks.  An unauthenticated remote\nattacker could possibly use this issue to update, insert, or delete\naccessible data. (CVE-2025-61748)\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttps://openjdk.org/groups/vulnerability/advisories/2025-10-21","is_hidden":false,"release_packages":{"jammy":[{"name":"openjdk-25","version":"25.0.1+8-1~22.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-25-demo","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"},{"name":"openjdk-25-doc","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"},{"name":"openjdk-25-jdk","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"},{"name":"openjdk-25-jdk-headless","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"},{"name":"openjdk-25-jre","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"},{"name":"openjdk-25-jre-headless","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"},{"name":"openjdk-25-jre-zero","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"},{"name":"openjdk-25-jvmci-jdk","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"},{"name":"openjdk-25-source","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"},{"name":"openjdk-25-testsupport","version":"25.0.1+8-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~22.04","pocket":"security"}],"noble":[{"name":"openjdk-25","version":"25.0.1+8-1~24.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-25-demo","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"},{"name":"openjdk-25-doc","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"},{"name":"openjdk-25-jdk","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"},{"name":"openjdk-25-jdk-headless","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"},{"name":"openjdk-25-jre","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"},{"name":"openjdk-25-jre-headless","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"},{"name":"openjdk-25-jre-zero","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"},{"name":"openjdk-25-jvmci-jdk","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"},{"name":"openjdk-25-source","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"},{"name":"openjdk-25-testsupport","version":"25.0.1+8-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~24.04","pocket":"security"}],"plucky":[{"name":"openjdk-25","version":"25.0.1+8-1~25.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-25-demo","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"},{"name":"openjdk-25-doc","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"},{"name":"openjdk-25-jdk","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"},{"name":"openjdk-25-jdk-headless","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"},{"name":"openjdk-25-jre","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"},{"name":"openjdk-25-jre-headless","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"},{"name":"openjdk-25-jre-zero","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"},{"name":"openjdk-25-jvmci-jdk","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"},{"name":"openjdk-25-source","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"},{"name":"openjdk-25-testsupport","version":"25.0.1+8-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.04","pocket":"security"}],"questing":[{"name":"openjdk-25","version":"25.0.1+8-1~25.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-25-demo","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"},{"name":"openjdk-25-doc","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"},{"name":"openjdk-25-jdk","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"},{"name":"openjdk-25-jdk-headless","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"},{"name":"openjdk-25-jre","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"},{"name":"openjdk-25-jre-headless","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"},{"name":"openjdk-25-jre-zero","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"},{"name":"openjdk-25-jvmci-jdk","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"},{"name":"openjdk-25-source","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"},{"name":"openjdk-25-testsupport","version":"25.0.1+8-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25/25.0.1+8-1~25.10","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-53057","CVE-2025-61748","CVE-2025-53066"]},{"id":"USN-7885-1","title":"OpenJDK 21 vulnerabilities","summary":"Several security issues were fixed in OpenJDK 21.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart Java applications\nto make all the necessary changes.","references":[],"published":"2025-11-24T12:14:30.425780","description":"Jinfeng Guo discovered that the Security component of OpenJDK 21 did not\ncorrectly handle certain representations of encoded strings. An\nunauthenticated remote attacker could possibly use this issue to modify\nfiles or leak sensitive information. (CVE-2025-53057)\n\nDarius Bohni discovered that the JAXP component of OpenJDK 21 was\nvulnerable to a XML External Entity (XEE) attack. An unauthenticated remote\nattacker could possibly use this issue to modify files or leak sensitive\ninformation. (CVE-2025-53066)\n\nYakov Shafranovich discovered that the Libraries component of OpenJDK 21\ncontained an issue where certain Strings built with StringBuilder returned\nan incorrect result for String.equals() checks. An unauthenticated remote\nattacker could possibly use this issue to update, insert, or delete\naccessible data. (CVE-2025-61748)\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttps://openjdk.org/groups/vulnerability/advisories/2025-10-21","is_hidden":false,"release_packages":{"focal":[{"name":"openjdk-21","version":"21.0.9+10-1~20.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-21-demo","version":"21.0.9+10-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-21-doc","version":"21.0.9+10-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-21-jdk","version":"21.0.9+10-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-21-jdk-headless","version":"21.0.9+10-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-21-jre","version":"21.0.9+10-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-21-jre-headless","version":"21.0.9+10-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-21-jre-zero","version":"21.0.9+10-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-21-source","version":"21.0.9+10-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-21-testsupport","version":"21.0.9+10-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":null,"pocket":"esm-apps"}],"jammy":[{"name":"openjdk-21","version":"21.0.9+10-1~22.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-21-demo","version":"21.0.9+10-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~22.04","pocket":"security"},{"name":"openjdk-21-doc","version":"21.0.9+10-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~22.04","pocket":"security"},{"name":"openjdk-21-jdk","version":"21.0.9+10-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~22.04","pocket":"security"},{"name":"openjdk-21-jdk-headless","version":"21.0.9+10-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~22.04","pocket":"security"},{"name":"openjdk-21-jre","version":"21.0.9+10-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~22.04","pocket":"security"},{"name":"openjdk-21-jre-headless","version":"21.0.9+10-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~22.04","pocket":"security"},{"name":"openjdk-21-jre-zero","version":"21.0.9+10-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~22.04","pocket":"security"},{"name":"openjdk-21-source","version":"21.0.9+10-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~22.04","pocket":"security"},{"name":"openjdk-21-testsupport","version":"21.0.9+10-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~22.04","pocket":"security"}],"noble":[{"name":"openjdk-21","version":"21.0.9+10-1~24.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-21-demo","version":"21.0.9+10-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~24.04","pocket":"security"},{"name":"openjdk-21-doc","version":"21.0.9+10-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~24.04","pocket":"security"},{"name":"openjdk-21-jdk","version":"21.0.9+10-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~24.04","pocket":"security"},{"name":"openjdk-21-jdk-headless","version":"21.0.9+10-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~24.04","pocket":"security"},{"name":"openjdk-21-jre","version":"21.0.9+10-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~24.04","pocket":"security"},{"name":"openjdk-21-jre-headless","version":"21.0.9+10-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~24.04","pocket":"security"},{"name":"openjdk-21-jre-zero","version":"21.0.9+10-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~24.04","pocket":"security"},{"name":"openjdk-21-source","version":"21.0.9+10-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~24.04","pocket":"security"},{"name":"openjdk-21-testsupport","version":"21.0.9+10-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~24.04","pocket":"security"}],"plucky":[{"name":"openjdk-21","version":"21.0.9+10-1~25.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-21-demo","version":"21.0.9+10-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.04","pocket":"security"},{"name":"openjdk-21-doc","version":"21.0.9+10-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.04","pocket":"security"},{"name":"openjdk-21-jdk","version":"21.0.9+10-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.04","pocket":"security"},{"name":"openjdk-21-jdk-headless","version":"21.0.9+10-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.04","pocket":"security"},{"name":"openjdk-21-jre","version":"21.0.9+10-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.04","pocket":"security"},{"name":"openjdk-21-jre-headless","version":"21.0.9+10-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.04","pocket":"security"},{"name":"openjdk-21-jre-zero","version":"21.0.9+10-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.04","pocket":"security"},{"name":"openjdk-21-source","version":"21.0.9+10-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.04","pocket":"security"},{"name":"openjdk-21-testsupport","version":"21.0.9+10-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.04","pocket":"security"}],"questing":[{"name":"openjdk-21","version":"21.0.9+10-1~25.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-21-demo","version":"21.0.9+10-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.10","pocket":"security"},{"name":"openjdk-21-doc","version":"21.0.9+10-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.10","pocket":"security"},{"name":"openjdk-21-jdk","version":"21.0.9+10-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.10","pocket":"security"},{"name":"openjdk-21-jdk-headless","version":"21.0.9+10-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.10","pocket":"security"},{"name":"openjdk-21-jre","version":"21.0.9+10-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.10","pocket":"security"},{"name":"openjdk-21-jre-headless","version":"21.0.9+10-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.10","pocket":"security"},{"name":"openjdk-21-jre-zero","version":"21.0.9+10-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.10","pocket":"security"},{"name":"openjdk-21-source","version":"21.0.9+10-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.10","pocket":"security"},{"name":"openjdk-21-testsupport","version":"21.0.9+10-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21/21.0.9+10-1~25.10","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-53057","CVE-2025-61748","CVE-2025-53066"]},{"id":"USN-7881-1","title":"OpenJDK 8 vulnerabilities","summary":"Several security issues were fixed in OpenJDK 8.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart Java\napplications to make all the necessary changes.","references":[],"published":"2025-11-24T00:36:57.374616","description":"Jinfeng Guo discovered that the Security component of OpenJDK 8 did not\ncorrectly handle certain representations of encoded strings. An\nunauthenticated remote attacker could possibly use this issue to modify\nfiles or leak sensitive information. (CVE-2025-53057)\n\nDarius Bohni discovered that the JAXP component of OpenJDK 8 was\nvulnerable to a XML External Entity (XEE) attack. An unauthenticated\nremote attacker could possibly use this issue to modify files or leak\nsensitive information. (CVE-2025-53066)\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttps://openjdk.org/groups/vulnerability/advisories/2025-10-21","is_hidden":false,"release_packages":{"bionic":[{"name":"openjdk-8","version":"8u472-ga-1~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-8-demo","version":"8u472-ga-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-doc","version":"8u472-ga-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jdk","version":"8u472-ga-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jdk-headless","version":"8u472-ga-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jre","version":"8u472-ga-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jre-headless","version":"8u472-ga-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jre-zero","version":"8u472-ga-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-source","version":"8u472-ga-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"}],"focal":[{"name":"openjdk-8","version":"8u472-ga-1~20.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-8-demo","version":"8u472-ga-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-doc","version":"8u472-ga-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jdk","version":"8u472-ga-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jdk-headless","version":"8u472-ga-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jre","version":"8u472-ga-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jre-headless","version":"8u472-ga-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jre-zero","version":"8u472-ga-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-source","version":"8u472-ga-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"}],"jammy":[{"name":"openjdk-8","version":"8u472-ga-1~22.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-8-demo","version":"8u472-ga-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~22.04","pocket":"security"},{"name":"openjdk-8-doc","version":"8u472-ga-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~22.04","pocket":"security"},{"name":"openjdk-8-jdk","version":"8u472-ga-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~22.04","pocket":"security"},{"name":"openjdk-8-jdk-headless","version":"8u472-ga-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~22.04","pocket":"security"},{"name":"openjdk-8-jre","version":"8u472-ga-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~22.04","pocket":"security"},{"name":"openjdk-8-jre-headless","version":"8u472-ga-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~22.04","pocket":"security"},{"name":"openjdk-8-jre-zero","version":"8u472-ga-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~22.04","pocket":"security"},{"name":"openjdk-8-source","version":"8u472-ga-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~22.04","pocket":"security"}],"noble":[{"name":"openjdk-8","version":"8u472-ga-1~24.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-8-demo","version":"8u472-ga-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~24.04","pocket":"security"},{"name":"openjdk-8-doc","version":"8u472-ga-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~24.04","pocket":"security"},{"name":"openjdk-8-jdk","version":"8u472-ga-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~24.04","pocket":"security"},{"name":"openjdk-8-jdk-headless","version":"8u472-ga-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~24.04","pocket":"security"},{"name":"openjdk-8-jre","version":"8u472-ga-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~24.04","pocket":"security"},{"name":"openjdk-8-jre-headless","version":"8u472-ga-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~24.04","pocket":"security"},{"name":"openjdk-8-jre-zero","version":"8u472-ga-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~24.04","pocket":"security"},{"name":"openjdk-8-source","version":"8u472-ga-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~24.04","pocket":"security"}],"plucky":[{"name":"openjdk-8","version":"8u472-ga-1~25.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-8-demo","version":"8u472-ga-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.04","pocket":"security"},{"name":"openjdk-8-doc","version":"8u472-ga-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.04","pocket":"security"},{"name":"openjdk-8-jdk","version":"8u472-ga-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.04","pocket":"security"},{"name":"openjdk-8-jdk-headless","version":"8u472-ga-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.04","pocket":"security"},{"name":"openjdk-8-jre","version":"8u472-ga-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.04","pocket":"security"},{"name":"openjdk-8-jre-headless","version":"8u472-ga-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.04","pocket":"security"},{"name":"openjdk-8-jre-zero","version":"8u472-ga-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.04","pocket":"security"},{"name":"openjdk-8-source","version":"8u472-ga-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.04","pocket":"security"}],"questing":[{"name":"openjdk-8","version":"8u472-ga-1~25.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-8-demo","version":"8u472-ga-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.10","pocket":"security"},{"name":"openjdk-8-doc","version":"8u472-ga-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.10","pocket":"security"},{"name":"openjdk-8-jdk","version":"8u472-ga-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.10","pocket":"security"},{"name":"openjdk-8-jdk-headless","version":"8u472-ga-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.10","pocket":"security"},{"name":"openjdk-8-jre","version":"8u472-ga-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.10","pocket":"security"},{"name":"openjdk-8-jre-headless","version":"8u472-ga-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.10","pocket":"security"},{"name":"openjdk-8-jre-zero","version":"8u472-ga-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.10","pocket":"security"},{"name":"openjdk-8-source","version":"8u472-ga-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u472-ga-1~25.10","pocket":"security"}],"xenial":[{"name":"openjdk-8","version":"8u472-ga-1~16.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-8-demo","version":"8u472-ga-1~16.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-8-doc","version":"8u472-ga-1~16.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-8-jdk","version":"8u472-ga-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-8-jdk-headless","version":"8u472-ga-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-8-jre","version":"8u472-ga-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-8-jre-headless","version":"8u472-ga-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-8-jre-jamvm","version":"8u472-ga-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-8-jre-zero","version":"8u472-ga-1~16.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-8-source","version":"8u472-ga-1~16.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2025-53057","CVE-2025-53066"]},{"id":"USN-7883-1","title":"OpenJDK 17 vulnerabilities","summary":"Several security issues were fixed in OpenJDK 17.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart Java\napplications to make all the necessary changes.","references":[],"published":"2025-11-24T00:55:38.768921","description":"Jinfeng Guo discovered that the Security component of OpenJDK 17 did not\ncorrectly handle certain representations of encoded strings. An\nunauthenticated remote attacker could possibly use this issue to modify\nfiles or leak sensitive information. (CVE-2025-53057)\n\nDarius Bohni discovered that the JAXP component of OpenJDK 17 was\nvulnerable to a XML External Entity (XEE) attack. An unauthenticated\nremote attacker could possibly use this issue to modify files or leak\nsensitive information. (CVE-2025-53066)\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttps://openjdk.org/groups/vulnerability/advisories/2025-10-21","is_hidden":false,"release_packages":{"bionic":[{"name":"openjdk-17","version":"17.0.17+10-1~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.17+10-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-17-doc","version":"17.0.17+10-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-17-jdk","version":"17.0.17+10-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-17-jdk-headless","version":"17.0.17+10-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-17-jre","version":"17.0.17+10-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-17-jre-headless","version":"17.0.17+10-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-17-jre-zero","version":"17.0.17+10-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-17-source","version":"17.0.17+10-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"}],"focal":[{"name":"openjdk-17","version":"17.0.17+10-1~20.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.17+10-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-17-doc","version":"17.0.17+10-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-17-jdk","version":"17.0.17+10-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-17-jdk-headless","version":"17.0.17+10-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-17-jre","version":"17.0.17+10-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-17-jre-headless","version":"17.0.17+10-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-17-jre-zero","version":"17.0.17+10-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-17-source","version":"17.0.17+10-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":null,"pocket":"esm-apps"}],"jammy":[{"name":"openjdk-17","version":"17.0.17+10-1~22.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.17+10-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~22.04","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.17+10-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~22.04","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.17+10-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~22.04","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.17+10-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~22.04","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.17+10-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~22.04","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.17+10-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~22.04","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.17+10-1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~22.04","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.17+10-1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~22.04","pocket":"security"}],"noble":[{"name":"openjdk-17","version":"17.0.17+10-1~24.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.17+10-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~24.04","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.17+10-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~24.04","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.17+10-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~24.04","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.17+10-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~24.04","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.17+10-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~24.04","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.17+10-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~24.04","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.17+10-1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~24.04","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.17+10-1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~24.04","pocket":"security"}],"plucky":[{"name":"openjdk-17","version":"17.0.17+10-1~25.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.17+10-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.04","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.17+10-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.04","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.17+10-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.04","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.17+10-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.04","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.17+10-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.04","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.17+10-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.04","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.17+10-1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.04","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.17+10-1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.04","pocket":"security"}],"questing":[{"name":"openjdk-17","version":"17.0.17+10-1~25.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.17+10-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.10","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.17+10-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.10","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.17+10-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.10","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.17+10-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.10","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.17+10-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.10","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.17+10-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.10","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.17+10-1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.10","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.17+10-1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.17+10-1~25.10","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-53057","CVE-2025-53066"]},{"id":"USN-7882-1","title":"OpenJDK 11 vulnerabilities","summary":"Several security issues were fixed in OpenJDK 11.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart Java\napplications to make all the necessary changes.","references":[],"published":"2025-11-24T00:52:17.522166","description":"Jinfeng Guo discovered that the Security component of OpenJDK 11 did not\ncorrectly handle certain representations of encoded strings. An\nunauthenticated remote attacker could possibly use this issue to modify\nfiles or leak sensitive information. (CVE-2025-53057)\n\nDarius Bohni discovered that the JAXP component of OpenJDK 11 was\nvulnerable to a XML External Entity (XEE) attack. An unauthenticated\nremote attacker could possibly use this issue to modify files or leak\nsensitive information. (CVE-2025-53066)\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttps://openjdk.org/groups/vulnerability/advisories/2025-10-21","is_hidden":false,"release_packages":{"bionic":[{"name":"openjdk-lts","version":"11.0.29+7-1ubuntu1~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-11-demo","version":"11.0.29+7-1ubuntu1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-doc","version":"11.0.29+7-1ubuntu1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jdk","version":"11.0.29+7-1ubuntu1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jdk-headless","version":"11.0.29+7-1ubuntu1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jre","version":"11.0.29+7-1ubuntu1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jre-headless","version":"11.0.29+7-1ubuntu1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jre-zero","version":"11.0.29+7-1ubuntu1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-source","version":"11.0.29+7-1ubuntu1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"openjdk-lts","version":"11.0.29+7-1ubuntu1~20.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-11-demo","version":"11.0.29+7-1ubuntu1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-doc","version":"11.0.29+7-1ubuntu1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jdk","version":"11.0.29+7-1ubuntu1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jdk-headless","version":"11.0.29+7-1ubuntu1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jre","version":"11.0.29+7-1ubuntu1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jre-headless","version":"11.0.29+7-1ubuntu1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jre-zero","version":"11.0.29+7-1ubuntu1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-source","version":"11.0.29+7-1ubuntu1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"}],"jammy":[{"name":"openjdk-lts","version":"11.0.29+7-1ubuntu1~22.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-11-demo","version":"11.0.29+7-1ubuntu1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~22.04","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.29+7-1ubuntu1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~22.04","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.29+7-1ubuntu1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~22.04","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.29+7-1ubuntu1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~22.04","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.29+7-1ubuntu1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~22.04","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.29+7-1ubuntu1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~22.04","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.29+7-1ubuntu1~22.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~22.04","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.29+7-1ubuntu1~22.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~22.04","pocket":"security"}],"noble":[{"name":"openjdk-lts","version":"11.0.29+7-1ubuntu1~24.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-11-demo","version":"11.0.29+7-1ubuntu1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~24.04","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.29+7-1ubuntu1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~24.04","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.29+7-1ubuntu1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~24.04","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.29+7-1ubuntu1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~24.04","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.29+7-1ubuntu1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~24.04","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.29+7-1ubuntu1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~24.04","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.29+7-1ubuntu1~24.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~24.04","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.29+7-1ubuntu1~24.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~24.04","pocket":"security"}],"plucky":[{"name":"openjdk-lts","version":"11.0.29+7-1ubuntu1~25.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-11-demo","version":"11.0.29+7-1ubuntu1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.04","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.29+7-1ubuntu1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.04","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.29+7-1ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.04","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.29+7-1ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.04","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.29+7-1ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.04","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.29+7-1ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.04","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.29+7-1ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.04","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.29+7-1ubuntu1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.04","pocket":"security"}],"questing":[{"name":"openjdk-lts","version":"11.0.29+7-1ubuntu1~25.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-11-demo","version":"11.0.29+7-1ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.10","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.29+7-1ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.10","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.29+7-1ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.10","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.29+7-1ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.10","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.29+7-1ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.10","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.29+7-1ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.10","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.29+7-1ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.10","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.29+7-1ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.29+7-1ubuntu1~25.10","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-53057","CVE-2025-53066"]},{"id":"USN-7900-1","title":"CRaC JDK 17 vulnerabilities","summary":"Several security issues were fixed in CRaC JDK 17.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart Java\napplications to make all the necessary changes.","references":[],"published":"2025-12-01T14:37:11.399842","description":"Jinfeng Guo discovered that the Security component of CRaC JDK 17 did not\ncorrectly handle certain representations of encoded strings. An\nunauthenticated remote attacker could possibly use this issue to modify\nfiles or leak sensitive information. (CVE-2025-53057)\n\nDarius Bohni discovered that the JAXP component of CRaC JDK 17 was\nvulnerable to a XML External Entity (XEE) attack. An unauthenticated\nremote attacker could possibly use this issue to modify files or leak\nsensitive information. (CVE-2025-53066)\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttps://openjdk.org/groups/vulnerability/advisories/2025-10-21","is_hidden":false,"release_packages":{"plucky":[{"name":"openjdk-17-crac","version":"17.0.17+10-0ubuntu1~25.04","description":"Open Source Java implementation with Coordinated Restore at Checkpoints","is_source":true},{"name":"openjdk-17-crac-demo","version":"17.0.17+10-0ubuntu1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-17-crac-doc","version":"17.0.17+10-0ubuntu1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-17-crac-jdk","version":"17.0.17+10-0ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-17-crac-jdk-headless","version":"17.0.17+10-0ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-17-crac-jre","version":"17.0.17+10-0ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-17-crac-jre-headless","version":"17.0.17+10-0ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-17-crac-jre-zero","version":"17.0.17+10-0ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-17-crac-source","version":"17.0.17+10-0ubuntu1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.04","pocket":"security"}],"questing":[{"name":"openjdk-17-crac","version":"17.0.17+10-0ubuntu1~25.10","description":"Open Source Java implementation with Coordinated Restore at Checkpoints","is_source":true},{"name":"openjdk-17-crac-demo","version":"17.0.17+10-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-17-crac-doc","version":"17.0.17+10-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-17-crac-jdk","version":"17.0.17+10-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-17-crac-jdk-headless","version":"17.0.17+10-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-17-crac-jre","version":"17.0.17+10-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-17-crac-jre-headless","version":"17.0.17+10-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-17-crac-jre-zero","version":"17.0.17+10-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-17-crac-source","version":"17.0.17+10-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17-crac/17.0.17+10-0ubuntu1~25.10","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-53057","CVE-2025-53066"]},{"id":"USN-7901-1","title":"CRaC JDK 21 vulnerabilities","summary":"Several security issues were fixed in CRaC JDK 21.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart Java applications\nto make all the necessary changes.","references":[],"published":"2025-12-01T14:42:39.109082","description":"Jinfeng Guo discovered that the Security component of CRaC JDK 21 did not\ncorrectly handle certain representations of encoded strings. An\nunauthenticated remote attacker could possibly use this issue to modify\nfiles or leak sensitive information. (CVE-2025-53057)\n\nDarius Bohni discovered that the JAXP component of CRaC JDK 21 was\nvulnerable to a XML External Entity (XEE) attack. An unauthenticated remote\nattacker could possibly use this issue to modify files or leak sensitive\ninformation. (CVE-2025-53066)\n\nYakov Shafranovich discovered that the Libraries component of CRaC JDK 21\ncontained an issue where certain Strings built with StringBuilder returned\nan incorrect result for String.equals() checks. An unauthenticated remote\nattacker could possibly use this issue to update, insert, or delete\naccessible data. (CVE-2025-61748)\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttps://openjdk.org/groups/vulnerability/advisories/2025-10-21","is_hidden":false,"release_packages":{"plucky":[{"name":"openjdk-21-crac","version":"21.0.9+10-0ubuntu1~25.04","description":"Open Source Java implementation with Coordinated Restore at Checkpoints","is_source":true},{"name":"openjdk-21-crac-demo","version":"21.0.9+10-0ubuntu1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-21-crac-doc","version":"21.0.9+10-0ubuntu1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-21-crac-jdk","version":"21.0.9+10-0ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-21-crac-jdk-headless","version":"21.0.9+10-0ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-21-crac-jre","version":"21.0.9+10-0ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-21-crac-jre-headless","version":"21.0.9+10-0ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-21-crac-jre-zero","version":"21.0.9+10-0ubuntu1~25.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-21-crac-source","version":"21.0.9+10-0ubuntu1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.04","pocket":"security"},{"name":"openjdk-21-crac-testsupport","version":"21.0.9+10-0ubuntu1~25.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.04","pocket":"security"}],"questing":[{"name":"openjdk-21-crac","version":"21.0.9+10-0ubuntu1~25.10","description":"Open Source Java implementation with Coordinated Restore at Checkpoints","is_source":true},{"name":"openjdk-21-crac-demo","version":"21.0.9+10-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-21-crac-doc","version":"21.0.9+10-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-21-crac-jdk","version":"21.0.9+10-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-21-crac-jdk-headless","version":"21.0.9+10-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-21-crac-jre","version":"21.0.9+10-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-21-crac-jre-headless","version":"21.0.9+10-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-21-crac-jre-zero","version":"21.0.9+10-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-21-crac-source","version":"21.0.9+10-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-21-crac-testsupport","version":"21.0.9+10-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-21-crac/21.0.9+10-0ubuntu1~25.10","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-53057","CVE-2025-53066","CVE-2025-61748"]},{"id":"USN-7902-1","title":"CRaC JDK 25 vulnerabilities","summary":"Several security issues were fixed in CRaC JDK 25.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart Java\napplications to make all the necessary changes.","references":[],"published":"2025-12-01T14:48:36.452617","description":"Jinfeng Guo discovered that the Security component of CRaC JDK 25 did not\ncorrectly handle certain representations of encoded strings. An\nunauthenticated remote attacker could possibly use this issue to modify\nfiles or leak sensitive information. (CVE-2025-53057)\n\nDarius Bohni discovered that the JAXP component of CRaC JDK 25 was\nvulnerable to a XML External Entity (XEE) attack. An unauthenticated\nremote attacker could possibly use this issue to modify files or leak\nsensitive information. (CVE-2025-53066)\n\nYakov Shafranovich discovered that the Libraries component of CRaC JDK\n25 contained an issue where certain Strings built with StringBuilder\nreturned an incorrect result for String.equals() checks. An unauthenticated\nremote attacker could possibly use this issue to update, insert, or\ndelete accessible data. (CVE-2025-61748)\n\nIn addition to security fixes, the updated packages contain bug fixes,\nnew features, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttps://openjdk.org/groups/vulnerability/advisories/2025-10-21","is_hidden":false,"release_packages":{"questing":[{"name":"openjdk-25-crac","version":"25.0.1+8-0ubuntu1~25.10","description":"Open Source Java implementation with Coordinated Restore at Checkpoints","is_source":true},{"name":"openjdk-25-crac-demo","version":"25.0.1+8-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac/25.0.1+8-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-25-crac-doc","version":"25.0.1+8-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac/25.0.1+8-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-25-crac-jdk","version":"25.0.1+8-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac/25.0.1+8-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-25-crac-jdk-headless","version":"25.0.1+8-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac/25.0.1+8-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-25-crac-jre","version":"25.0.1+8-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac/25.0.1+8-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-25-crac-jre-headless","version":"25.0.1+8-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac/25.0.1+8-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-25-crac-jre-zero","version":"25.0.1+8-0ubuntu1~25.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac/25.0.1+8-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-25-crac-source","version":"25.0.1+8-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac/25.0.1+8-0ubuntu1~25.10","pocket":"security"},{"name":"openjdk-25-crac-testsupport","version":"25.0.1+8-0ubuntu1~25.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac","version_link":"https://launchpad.net/ubuntu/+source/openjdk-25-crac/25.0.1+8-0ubuntu1~25.10","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-53057","CVE-2025-53066","CVE-2025-61748"]}]},{"id":"CVE-2025-53054","published":"2025-10-21T20:20:00","updated_at":"2026-02-04T07:52:32.173402+00:00","description":"\nVulnerability in the MySQL Server product of Oracle MySQL (component:\nInnoDB).  Supported versions that are affected are 8.0.0-8.0.43,\n8.4.0-8.4.6 and  9.0.0-9.4.0. Easily exploitable vulnerability allows high\nprivileged attacker with network access via multiple protocols to\ncompromise MySQL Server.  Successful attacks of this vulnerability can\nresult in unauthorized ability to cause a hang or frequently repeatable\ncrash (complete DOS) of MySQL Server as well as  unauthorized update,\ninsert or delete access to some of MySQL Server accessible data. CVSS 3.1\nBase Score 5.5 (Integrity and Availability impacts).  CVSS Vector:\n(CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).","ubuntu_description":"","notes":[{"author":"iconstantin","note":"since mysql versions 5.7 and earlier are no longer supported\nupstream, we are unable to update them to address security\nissues,\nmarking as ignored.\nmariadb 5.5, 10.0, 10.1, and 10.3 are end of life and no\nlonger supported upstream - marking as ignored."}],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-53054","https://www.oracle.com/security-alerts/cpuoct2025.html","https://ubuntu.com/security/notices/USN-7873-1","https://ubuntu.com/security/notices/USN-8006-1"],"bugs":[""],"patches":{"mysql-5.5":[],"mysql-5.7":[],"mysql-8.0":[],"mysql-8.4":[],"mariadb":[],"mariadb-10.0":[],"mariadb-10.1":[],"mariadb-10.3":[],"mariadb-10.6":[],"percona-xtradb-cluster-5.6":[],"percona-server-5.6":[]},"tags":{},"packages":[{"name":"percona-xtradb-cluster-5.6","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.6","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"percona-server-5.6","source":"https://ubuntu.com/security/cve?package=percona-server-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-server-5.6","debian":"https://tracker.debian.org/pkg/percona-server-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"mariadb","source":"https://ubuntu.com/security/cve?package=mariadb","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb","debian":"https://tracker.debian.org/pkg/mariadb","statuses":[{"release_codename":"resolute","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.0","source":"https://ubuntu.com/security/cve?package=mariadb-10.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.0","debian":"https://tracker.debian.org/pkg/mariadb-10.0","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.1","source":"https://ubuntu.com/security/cve?package=mariadb-10.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.1","debian":"https://tracker.debian.org/pkg/mariadb-10.1","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.3","source":"https://ubuntu.com/security/cve?package=mariadb-10.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.3","debian":"https://tracker.debian.org/pkg/mariadb-10.3","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"no more upstream support","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.6","source":"https://ubuntu.com/security/cve?package=mariadb-10.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.6","debian":"https://tracker.debian.org/pkg/mariadb-10.6","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"see notes","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.7","source":"https://ubuntu.com/security/cve?package=mysql-5.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.7","debian":"https://tracker.debian.org/pkg/mysql-5.7","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"see notes","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of ESM support, was ignored [see notes]","component":null,"pocket":"security"}]},{"name":"mysql-8.0","source":"https://ubuntu.com/security/cve?package=mysql-8.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.0","debian":"https://tracker.debian.org/pkg/mysql-8.0","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"8.0.44-0ubuntu0.22.04.1","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"8.0.44-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8.0.45-0ubuntu0.20.04.1+esm2","component":null,"pocket":"esm-infra"},{"release_codename":"upstream","status":"released","description":"8.0.44","component":null,"pocket":"security"}]},{"name":"mysql-8.4","source":"https://ubuntu.com/security/cve?package=mysql-8.4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.4","debian":"https://tracker.debian.org/pkg/mysql-8.4","statuses":[{"release_codename":"resolute","status":"released","description":"8.4.7-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"8.4.7-0ubuntu0.25.04.1","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"8.4.7-0ubuntu0.25.10.2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8.4.7","component":null,"pocket":"security"}]}],"notices_ids":["USN-7873-1","USN-8006-1"],"notices":[{"id":"USN-7873-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. In general, a standard system update will make all the necessary\nchanges.","references":[],"published":"2025-11-19T12:53:58.935242","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 8.0.44 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS.\nUbuntu 25.04 and Ubuntu 25.10 have been updated to MySQL 8.4.7.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttps://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-44.html\nhttps://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-7.html\nhttps://www.oracle.com/security-alerts/cpuoct2025.html","is_hidden":false,"release_packages":{"jammy":[{"name":"mysql-8.0","version":"8.0.44-0ubuntu0.22.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-client","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-router","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-server","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"}],"noble":[{"name":"mysql-8.0","version":"8.0.44-0ubuntu0.24.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-client","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-router","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-server","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"}],"plucky":[{"name":"mysql-8.4","version":"8.4.7-0ubuntu0.25.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"libmysqlclient24","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-client","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-client-core","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-router","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-server","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-server-core","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-source","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"}],"questing":[{"name":"mysql-8.4","version":"8.4.7-0ubuntu0.25.10.2","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"libmysqlclient24","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-client","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-client-core","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-router","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-server","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-server-core","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-source","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-testsuite","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-53053","CVE-2025-53054","CVE-2025-53040","CVE-2025-53044","CVE-2025-53062","CVE-2025-53069","CVE-2025-53045","CVE-2025-53042"]},{"id":"USN-8006-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-02-03T07:52:06.723501","description":"Multiple security issues were discovered in MySQL and this update includes\na new upstream MySQL version to fix these issues.\n\nMySQL has been updated to 8.0.45 in Ubuntu 20.04 LTS.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttps://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-45.html\nhttps://www.oracle.com/security-alerts/cpujan2026.html","is_hidden":false,"release_packages":{"focal":[{"name":"mysql-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"libmysqlclient21","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client-core-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-router","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server-core-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-source-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-testsuite","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-testsuite-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2025-53040","CVE-2026-21968","CVE-2025-53044","CVE-2025-53045","CVE-2026-21964","CVE-2026-21941","CVE-2026-21937","CVE-2025-53062","CVE-2025-53054","CVE-2025-53053","CVE-2025-53069","CVE-2025-53042","CVE-2026-21936","CVE-2026-21948"]}]},{"id":"CVE-2025-53053","published":"2025-10-21T20:20:00","updated_at":"2026-02-04T07:52:21.871818+00:00","description":"\nVulnerability in the MySQL Server product of Oracle MySQL (component:\nServer: DML).  Supported versions that are affected are 8.0.0-8.0.43,\n8.4.0-8.4.6 and  9.0.0-9.4.0. Easily exploitable vulnerability allows high\nprivileged attacker with network access via multiple protocols to\ncompromise MySQL Server.  Successful attacks of this vulnerability can\nresult in unauthorized ability to cause a hang or frequently repeatable\ncrash (complete DOS) of MySQL Server as well as  unauthorized update,\ninsert or delete access to some of MySQL Server accessible data. CVSS 3.1\nBase Score 5.5 (Integrity and Availability impacts).  CVSS Vector:\n(CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).","ubuntu_description":"","notes":[{"author":"iconstantin","note":"since mysql versions 5.7 and earlier are no longer supported\nupstream, we are unable to update them to address security\nissues,\nmarking as ignored.\nmariadb 5.5, 10.0, 10.1, and 10.3 are end of life and no\nlonger supported upstream - marking as ignored."}],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-53053","https://www.oracle.com/security-alerts/cpuoct2025.html","https://ubuntu.com/security/notices/USN-7873-1","https://ubuntu.com/security/notices/USN-8006-1"],"bugs":[""],"patches":{"mysql-5.5":[],"mysql-5.7":[],"mysql-8.0":[],"mysql-8.4":[],"mariadb":[],"mariadb-10.0":[],"mariadb-10.1":[],"mariadb-10.3":[],"mariadb-10.6":[],"percona-xtradb-cluster-5.6":[],"percona-server-5.6":[]},"tags":{},"packages":[{"name":"percona-xtradb-cluster-5.6","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.6","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-server-5.6","source":"https://ubuntu.com/security/cve?package=percona-server-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-server-5.6","debian":"https://tracker.debian.org/pkg/percona-server-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb","source":"https://ubuntu.com/security/cve?package=mariadb","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb","debian":"https://tracker.debian.org/pkg/mariadb","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.0","source":"https://ubuntu.com/security/cve?package=mariadb-10.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.0","debian":"https://tracker.debian.org/pkg/mariadb-10.0","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.1","source":"https://ubuntu.com/security/cve?package=mariadb-10.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.1","debian":"https://tracker.debian.org/pkg/mariadb-10.1","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.3","source":"https://ubuntu.com/security/cve?package=mariadb-10.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.3","debian":"https://tracker.debian.org/pkg/mariadb-10.3","statuses":[{"release_codename":"focal","status":"ignored","description":"no more upstream support","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.6","source":"https://ubuntu.com/security/cve?package=mariadb-10.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.6","debian":"https://tracker.debian.org/pkg/mariadb-10.6","statuses":[{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"trusty","status":"ignored","description":"see notes","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.7","source":"https://ubuntu.com/security/cve?package=mysql-5.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.7","debian":"https://tracker.debian.org/pkg/mysql-5.7","statuses":[{"release_codename":"bionic","status":"ignored","description":"see notes","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of ESM support, was ignored [see notes]","component":null,"pocket":"security"}]},{"name":"mysql-8.0","source":"https://ubuntu.com/security/cve?package=mysql-8.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.0","debian":"https://tracker.debian.org/pkg/mysql-8.0","statuses":[{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"8.0.44-0ubuntu0.22.04.1","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"8.0.44-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8.0.45-0ubuntu0.20.04.1+esm2","component":null,"pocket":"esm-infra"},{"release_codename":"upstream","status":"released","description":"8.0.44","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-8.4","source":"https://ubuntu.com/security/cve?package=mysql-8.4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.4","debian":"https://tracker.debian.org/pkg/mysql-8.4","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"8.4.7-0ubuntu0.25.04.1","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"8.4.7-0ubuntu0.25.10.2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8.4.7","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"8.4.7-0ubuntu2","component":null,"pocket":"security"}]}],"notices_ids":["USN-7873-1","USN-8006-1"],"notices":[{"id":"USN-7873-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. In general, a standard system update will make all the necessary\nchanges.","references":[],"published":"2025-11-19T12:53:58.935242","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 8.0.44 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS.\nUbuntu 25.04 and Ubuntu 25.10 have been updated to MySQL 8.4.7.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttps://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-44.html\nhttps://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-7.html\nhttps://www.oracle.com/security-alerts/cpuoct2025.html","is_hidden":false,"release_packages":{"jammy":[{"name":"mysql-8.0","version":"8.0.44-0ubuntu0.22.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-client","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-router","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-server","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"}],"noble":[{"name":"mysql-8.0","version":"8.0.44-0ubuntu0.24.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-client","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-router","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-server","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"}],"plucky":[{"name":"mysql-8.4","version":"8.4.7-0ubuntu0.25.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"libmysqlclient24","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-client","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-client-core","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-router","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-server","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-server-core","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-source","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"}],"questing":[{"name":"mysql-8.4","version":"8.4.7-0ubuntu0.25.10.2","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"libmysqlclient24","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-client","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-client-core","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-router","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-server","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-server-core","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-source","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-testsuite","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-53053","CVE-2025-53054","CVE-2025-53040","CVE-2025-53044","CVE-2025-53062","CVE-2025-53069","CVE-2025-53045","CVE-2025-53042"]},{"id":"USN-8006-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-02-03T07:52:06.723501","description":"Multiple security issues were discovered in MySQL and this update includes\na new upstream MySQL version to fix these issues.\n\nMySQL has been updated to 8.0.45 in Ubuntu 20.04 LTS.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttps://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-45.html\nhttps://www.oracle.com/security-alerts/cpujan2026.html","is_hidden":false,"release_packages":{"focal":[{"name":"mysql-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"libmysqlclient21","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client-core-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-router","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server-core-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-source-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-testsuite","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-testsuite-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2025-53040","CVE-2026-21968","CVE-2025-53044","CVE-2025-53045","CVE-2026-21964","CVE-2026-21941","CVE-2026-21937","CVE-2025-53062","CVE-2025-53054","CVE-2025-53053","CVE-2025-53069","CVE-2025-53042","CVE-2026-21936","CVE-2026-21948"]}]},{"id":"CVE-2025-53045","published":"2025-10-21T20:20:00","updated_at":"2026-02-04T07:51:48.126077+00:00","description":"\nVulnerability in the MySQL Server product of Oracle MySQL (component:\nInnoDB).  Supported versions that are affected are 8.0.0-8.0.43,\n8.4.0-8.4.6 and  9.0.0-9.4.0. Easily exploitable vulnerability allows high\nprivileged attacker with network access via multiple protocols to\ncompromise MySQL Server.  Successful attacks of this vulnerability can\nresult in unauthorized ability to cause a hang or frequently repeatable\ncrash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability\nimpacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","ubuntu_description":"","notes":[{"author":"iconstantin","note":"since mysql versions 5.7 and earlier are no longer supported\nupstream, we are unable to update them to address security\nissues,\nmarking as ignored.\nmariadb 5.5, 10.0, 10.1, and 10.3 are end of life and no\nlonger supported upstream - marking as ignored."}],"codename":null,"priority":"medium","cvss3":4.9,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":4.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-53045","https://www.oracle.com/security-alerts/cpuoct2025.html","https://ubuntu.com/security/notices/USN-7873-1","https://ubuntu.com/security/notices/USN-8006-1"],"bugs":[""],"patches":{"mysql-5.5":[],"mysql-5.7":[],"mysql-8.0":[],"mysql-8.4":[],"mariadb":[],"mariadb-10.0":[],"mariadb-10.1":[],"mariadb-10.3":[],"mariadb-10.6":[],"percona-xtradb-cluster-5.6":[],"percona-server-5.6":[]},"tags":{},"packages":[{"name":"percona-xtradb-cluster-5.6","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.6","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-server-5.6","source":"https://ubuntu.com/security/cve?package=percona-server-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-server-5.6","debian":"https://tracker.debian.org/pkg/percona-server-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb","source":"https://ubuntu.com/security/cve?package=mariadb","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb","debian":"https://tracker.debian.org/pkg/mariadb","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.0","source":"https://ubuntu.com/security/cve?package=mariadb-10.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.0","debian":"https://tracker.debian.org/pkg/mariadb-10.0","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.1","source":"https://ubuntu.com/security/cve?package=mariadb-10.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.1","debian":"https://tracker.debian.org/pkg/mariadb-10.1","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.3","source":"https://ubuntu.com/security/cve?package=mariadb-10.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.3","debian":"https://tracker.debian.org/pkg/mariadb-10.3","statuses":[{"release_codename":"focal","status":"ignored","description":"no more upstream support","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.6","source":"https://ubuntu.com/security/cve?package=mariadb-10.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.6","debian":"https://tracker.debian.org/pkg/mariadb-10.6","statuses":[{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"trusty","status":"ignored","description":"see notes","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.7","source":"https://ubuntu.com/security/cve?package=mysql-5.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.7","debian":"https://tracker.debian.org/pkg/mysql-5.7","statuses":[{"release_codename":"bionic","status":"ignored","description":"see notes","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of ESM support, was ignored [see notes]","component":null,"pocket":"security"}]},{"name":"mysql-8.0","source":"https://ubuntu.com/security/cve?package=mysql-8.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.0","debian":"https://tracker.debian.org/pkg/mysql-8.0","statuses":[{"release_codename":"upstream","status":"released","description":"8.0.44","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"8.0.44-0ubuntu0.22.04.1","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"8.0.44-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8.0.45-0ubuntu0.20.04.1+esm2","component":null,"pocket":"esm-infra"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-8.4","source":"https://ubuntu.com/security/cve?package=mysql-8.4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.4","debian":"https://tracker.debian.org/pkg/mysql-8.4","statuses":[{"release_codename":"upstream","status":"released","description":"8.4.7","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"8.4.7-0ubuntu0.25.04.1","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"8.4.7-0ubuntu0.25.10.2","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"8.4.7-0ubuntu2","component":null,"pocket":"security"}]}],"notices_ids":["USN-7873-1","USN-8006-1"],"notices":[{"id":"USN-7873-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. In general, a standard system update will make all the necessary\nchanges.","references":[],"published":"2025-11-19T12:53:58.935242","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 8.0.44 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS.\nUbuntu 25.04 and Ubuntu 25.10 have been updated to MySQL 8.4.7.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttps://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-44.html\nhttps://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-7.html\nhttps://www.oracle.com/security-alerts/cpuoct2025.html","is_hidden":false,"release_packages":{"jammy":[{"name":"mysql-8.0","version":"8.0.44-0ubuntu0.22.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-client","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-router","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-server","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"}],"noble":[{"name":"mysql-8.0","version":"8.0.44-0ubuntu0.24.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-client","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-router","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-server","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"}],"plucky":[{"name":"mysql-8.4","version":"8.4.7-0ubuntu0.25.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"libmysqlclient24","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-client","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-client-core","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-router","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-server","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-server-core","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-source","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"}],"questing":[{"name":"mysql-8.4","version":"8.4.7-0ubuntu0.25.10.2","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"libmysqlclient24","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-client","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-client-core","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-router","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-server","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-server-core","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-source","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-testsuite","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-53053","CVE-2025-53054","CVE-2025-53040","CVE-2025-53044","CVE-2025-53062","CVE-2025-53069","CVE-2025-53045","CVE-2025-53042"]},{"id":"USN-8006-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-02-03T07:52:06.723501","description":"Multiple security issues were discovered in MySQL and this update includes\na new upstream MySQL version to fix these issues.\n\nMySQL has been updated to 8.0.45 in Ubuntu 20.04 LTS.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttps://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-45.html\nhttps://www.oracle.com/security-alerts/cpujan2026.html","is_hidden":false,"release_packages":{"focal":[{"name":"mysql-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"libmysqlclient21","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client-core-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-router","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server-core-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-source-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-testsuite","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-testsuite-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2025-53040","CVE-2026-21968","CVE-2025-53044","CVE-2025-53045","CVE-2026-21964","CVE-2026-21941","CVE-2026-21937","CVE-2025-53062","CVE-2025-53054","CVE-2025-53053","CVE-2025-53069","CVE-2025-53042","CVE-2026-21936","CVE-2026-21948"]}]},{"id":"CVE-2025-53044","published":"2025-10-21T20:20:00","updated_at":"2026-02-04T07:52:12.379829+00:00","description":"\nVulnerability in the MySQL Server product of Oracle MySQL (component:\nInnoDB).  Supported versions that are affected are 8.0.0-8.0.43,\n8.4.0-8.4.6 and  9.0.0-9.4.0. Easily exploitable vulnerability allows high\nprivileged attacker with network access via multiple protocols to\ncompromise MySQL Server.  Successful attacks of this vulnerability can\nresult in unauthorized ability to cause a hang or frequently repeatable\ncrash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability\nimpacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","ubuntu_description":"","notes":[{"author":"iconstantin","note":"since mysql versions 5.7 and earlier are no longer supported\nupstream, we are unable to update them to address security\nissues,\nmarking as ignored.\nmariadb 5.5, 10.0, 10.1, and 10.3 are end of life and no\nlonger supported upstream - marking as ignored."}],"codename":null,"priority":"medium","cvss3":4.9,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":4.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-53044","https://www.oracle.com/security-alerts/cpuoct2025.html","https://ubuntu.com/security/notices/USN-7873-1","https://ubuntu.com/security/notices/USN-8006-1"],"bugs":[""],"patches":{"mysql-5.5":[],"mysql-5.7":[],"mysql-8.0":[],"mysql-8.4":[],"mariadb":[],"mariadb-10.0":[],"mariadb-10.1":[],"mariadb-10.3":[],"mariadb-10.6":[],"percona-xtradb-cluster-5.6":[],"percona-server-5.6":[]},"tags":{},"packages":[{"name":"percona-xtradb-cluster-5.6","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.6","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-server-5.6","source":"https://ubuntu.com/security/cve?package=percona-server-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-server-5.6","debian":"https://tracker.debian.org/pkg/percona-server-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb","source":"https://ubuntu.com/security/cve?package=mariadb","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb","debian":"https://tracker.debian.org/pkg/mariadb","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.0","source":"https://ubuntu.com/security/cve?package=mariadb-10.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.0","debian":"https://tracker.debian.org/pkg/mariadb-10.0","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.1","source":"https://ubuntu.com/security/cve?package=mariadb-10.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.1","debian":"https://tracker.debian.org/pkg/mariadb-10.1","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.3","source":"https://ubuntu.com/security/cve?package=mariadb-10.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.3","debian":"https://tracker.debian.org/pkg/mariadb-10.3","statuses":[{"release_codename":"focal","status":"ignored","description":"no more upstream support","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.6","source":"https://ubuntu.com/security/cve?package=mariadb-10.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.6","debian":"https://tracker.debian.org/pkg/mariadb-10.6","statuses":[{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"trusty","status":"ignored","description":"see notes","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.7","source":"https://ubuntu.com/security/cve?package=mysql-5.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.7","debian":"https://tracker.debian.org/pkg/mysql-5.7","statuses":[{"release_codename":"xenial","status":"ignored","description":"end of ESM support, was ignored [see notes]","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"see notes","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-8.0","source":"https://ubuntu.com/security/cve?package=mysql-8.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.0","debian":"https://tracker.debian.org/pkg/mysql-8.0","statuses":[{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"8.0.44-0ubuntu0.22.04.1","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"8.0.44-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8.0.45-0ubuntu0.20.04.1+esm2","component":null,"pocket":"esm-infra"},{"release_codename":"upstream","status":"released","description":"8.0.44","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-8.4","source":"https://ubuntu.com/security/cve?package=mysql-8.4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.4","debian":"https://tracker.debian.org/pkg/mysql-8.4","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"8.4.7-0ubuntu0.25.04.1","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"8.4.7-0ubuntu0.25.10.2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8.4.7","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"8.4.7-0ubuntu2","component":null,"pocket":"security"}]}],"notices_ids":["USN-7873-1","USN-8006-1"],"notices":[{"id":"USN-7873-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. In general, a standard system update will make all the necessary\nchanges.","references":[],"published":"2025-11-19T12:53:58.935242","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 8.0.44 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS.\nUbuntu 25.04 and Ubuntu 25.10 have been updated to MySQL 8.4.7.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttps://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-44.html\nhttps://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-7.html\nhttps://www.oracle.com/security-alerts/cpuoct2025.html","is_hidden":false,"release_packages":{"jammy":[{"name":"mysql-8.0","version":"8.0.44-0ubuntu0.22.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-client","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-router","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-server","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"}],"noble":[{"name":"mysql-8.0","version":"8.0.44-0ubuntu0.24.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-client","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-router","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-server","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"}],"plucky":[{"name":"mysql-8.4","version":"8.4.7-0ubuntu0.25.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"libmysqlclient24","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-client","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-client-core","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-router","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-server","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-server-core","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-source","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"}],"questing":[{"name":"mysql-8.4","version":"8.4.7-0ubuntu0.25.10.2","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"libmysqlclient24","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-client","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-client-core","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-router","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-server","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-server-core","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-source","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-testsuite","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-53053","CVE-2025-53054","CVE-2025-53040","CVE-2025-53044","CVE-2025-53062","CVE-2025-53069","CVE-2025-53045","CVE-2025-53042"]},{"id":"USN-8006-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-02-03T07:52:06.723501","description":"Multiple security issues were discovered in MySQL and this update includes\na new upstream MySQL version to fix these issues.\n\nMySQL has been updated to 8.0.45 in Ubuntu 20.04 LTS.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttps://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-45.html\nhttps://www.oracle.com/security-alerts/cpujan2026.html","is_hidden":false,"release_packages":{"focal":[{"name":"mysql-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"libmysqlclient21","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client-core-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-router","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server-core-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-source-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-testsuite","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-testsuite-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2025-53040","CVE-2026-21968","CVE-2025-53044","CVE-2025-53045","CVE-2026-21964","CVE-2026-21941","CVE-2026-21937","CVE-2025-53062","CVE-2025-53054","CVE-2025-53053","CVE-2025-53069","CVE-2025-53042","CVE-2026-21936","CVE-2026-21948"]}]},{"id":"CVE-2025-53042","published":"2025-10-21T20:20:00","updated_at":"2026-02-04T07:51:23.634501+00:00","description":"\nVulnerability in the MySQL Server product of Oracle MySQL (component:\nServer: Optimizer).  Supported versions that are affected are 8.0.0-8.0.43,\n8.4.0-8.4.6 and  9.0.0-9.4.0. Easily exploitable vulnerability allows high\nprivileged attacker with network access via multiple protocols to\ncompromise MySQL Server.  Successful attacks of this vulnerability can\nresult in unauthorized ability to cause a hang or frequently repeatable\ncrash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability\nimpacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","ubuntu_description":"","notes":[{"author":"iconstantin","note":"since mysql versions 5.7 and earlier are no longer supported\nupstream, we are unable to update them to address security\nissues,\nmarking as ignored.\nmariadb 5.5, 10.0, 10.1, and 10.3 are end of life and no\nlonger supported upstream - marking as ignored."}],"codename":null,"priority":"medium","cvss3":4.9,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":4.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-53042","https://www.oracle.com/security-alerts/cpuoct2025.html","https://ubuntu.com/security/notices/USN-7873-1","https://ubuntu.com/security/notices/USN-8006-1"],"bugs":[""],"patches":{"mysql-5.5":[],"mysql-5.7":[],"mysql-8.0":[],"mysql-8.4":[],"mariadb":[],"mariadb-10.0":[],"mariadb-10.1":[],"mariadb-10.3":[],"mariadb-10.6":[],"percona-xtradb-cluster-5.6":[],"percona-server-5.6":[]},"tags":{},"packages":[{"name":"percona-xtradb-cluster-5.6","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.6","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-server-5.6","source":"https://ubuntu.com/security/cve?package=percona-server-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-server-5.6","debian":"https://tracker.debian.org/pkg/percona-server-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb","source":"https://ubuntu.com/security/cve?package=mariadb","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb","debian":"https://tracker.debian.org/pkg/mariadb","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.0","source":"https://ubuntu.com/security/cve?package=mariadb-10.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.0","debian":"https://tracker.debian.org/pkg/mariadb-10.0","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.1","source":"https://ubuntu.com/security/cve?package=mariadb-10.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.1","debian":"https://tracker.debian.org/pkg/mariadb-10.1","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.3","source":"https://ubuntu.com/security/cve?package=mariadb-10.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.3","debian":"https://tracker.debian.org/pkg/mariadb-10.3","statuses":[{"release_codename":"focal","status":"ignored","description":"no more upstream support","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.6","source":"https://ubuntu.com/security/cve?package=mariadb-10.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.6","debian":"https://tracker.debian.org/pkg/mariadb-10.6","statuses":[{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"trusty","status":"ignored","description":"see notes","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.7","source":"https://ubuntu.com/security/cve?package=mysql-5.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.7","debian":"https://tracker.debian.org/pkg/mysql-5.7","statuses":[{"release_codename":"bionic","status":"ignored","description":"see notes","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of ESM support, was ignored [see notes]","component":null,"pocket":"security"}]},{"name":"mysql-8.0","source":"https://ubuntu.com/security/cve?package=mysql-8.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.0","debian":"https://tracker.debian.org/pkg/mysql-8.0","statuses":[{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8.0.44","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"8.0.44-0ubuntu0.22.04.1","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"8.0.44-0ubuntu0.24.04.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8.0.45-0ubuntu0.20.04.1+esm2","component":null,"pocket":"esm-infra"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-8.4","source":"https://ubuntu.com/security/cve?package=mysql-8.4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.4","debian":"https://tracker.debian.org/pkg/mysql-8.4","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8.4.7","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"8.4.7-0ubuntu0.25.04.1","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"8.4.7-0ubuntu0.25.10.2","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"8.4.7-0ubuntu2","component":null,"pocket":"security"}]}],"notices_ids":["USN-7873-1","USN-8006-1"],"notices":[{"id":"USN-7873-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. In general, a standard system update will make all the necessary\nchanges.","references":[],"published":"2025-11-19T12:53:58.935242","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 8.0.44 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS.\nUbuntu 25.04 and Ubuntu 25.10 have been updated to MySQL 8.4.7.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttps://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-44.html\nhttps://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-7.html\nhttps://www.oracle.com/security-alerts/cpuoct2025.html","is_hidden":false,"release_packages":{"jammy":[{"name":"mysql-8.0","version":"8.0.44-0ubuntu0.22.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-client","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-router","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-server","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.44-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.22.04.1","pocket":"security"}],"noble":[{"name":"mysql-8.0","version":"8.0.44-0ubuntu0.24.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-client","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-router","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-server","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.44-0ubuntu0.24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.44-0ubuntu0.24.04.1","pocket":"security"}],"plucky":[{"name":"mysql-8.4","version":"8.4.7-0ubuntu0.25.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"libmysqlclient24","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-client","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-client-core","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-router","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-server","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-server-core","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-source","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"8.4.7-0ubuntu0.25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.04.1","pocket":"security"}],"questing":[{"name":"mysql-8.4","version":"8.4.7-0ubuntu0.25.10.2","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"libmysqlclient24","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-client","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-client-core","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-router","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-server","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-server-core","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-source","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"},{"name":"mysql-testsuite","version":"8.4.7-0ubuntu0.25.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.4","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.4/8.4.7-0ubuntu0.25.10.2","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-53053","CVE-2025-53054","CVE-2025-53040","CVE-2025-53044","CVE-2025-53062","CVE-2025-53069","CVE-2025-53045","CVE-2025-53042"]},{"id":"USN-8006-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-02-03T07:52:06.723501","description":"Multiple security issues were discovered in MySQL and this update includes\na new upstream MySQL version to fix these issues.\n\nMySQL has been updated to 8.0.45 in Ubuntu 20.04 LTS.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttps://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-45.html\nhttps://www.oracle.com/security-alerts/cpujan2026.html","is_hidden":false,"release_packages":{"focal":[{"name":"mysql-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"libmysqlclient21","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client-core-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-router","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server-core-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-source-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-testsuite","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"},{"name":"mysql-testsuite-8.0","version":"8.0.45-0ubuntu0.20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2025-53040","CVE-2026-21968","CVE-2025-53044","CVE-2025-53045","CVE-2026-21964","CVE-2026-21941","CVE-2026-21937","CVE-2025-53062","CVE-2025-53054","CVE-2025-53053","CVE-2025-53069","CVE-2025-53042","CVE-2026-21936","CVE-2026-21948"]}]}],"offset":18340,"limit":20,"total_results":79316}