Carter Kozak discovered that OpenJDK, when compiling with AVX-512 instruction support enabled, could produce code that resulted in memory corruption in certain situations. An attacker targeting applications built in this way could possibly use this to cause a denial of service or execute arbitrary code. In Ubuntu, OpenJDK defaults to not using AVX-512 instructions. (CVE-2023-22025)
It was discovered that OpenJDK did not properly perform PKIX certification path validation in certain situations. An attacker could use this to cause a denial of service. (CVE-2023-22081)
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "openjdk-11-dbg": "11.0.21+9-0ubuntu1~18.04", "openjdk-11-demo": "11.0.21+9-0ubuntu1~18.04", "openjdk-11-source": "11.0.21+9-0ubuntu1~18.04", "openjdk-11-jdk": "11.0.21+9-0ubuntu1~18.04", "openjdk-11-doc": "11.0.21+9-0ubuntu1~18.04", "openjdk-11-jdk-headless": "11.0.21+9-0ubuntu1~18.04", "openjdk-11-jre-zero": "11.0.21+9-0ubuntu1~18.04", "openjdk-11-jre": "11.0.21+9-0ubuntu1~18.04", "openjdk-11-jre-headless": "11.0.21+9-0ubuntu1~18.04" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "openjdk-17-dbg": "17.0.9+9-1~18.04", "openjdk-17-jdk": "17.0.9+9-1~18.04", "openjdk-17-jdk-headless": "17.0.9+9-1~18.04", "openjdk-17-demo": "17.0.9+9-1~18.04", "openjdk-17-doc": "17.0.9+9-1~18.04", "openjdk-17-source": "17.0.9+9-1~18.04", "openjdk-17-jre": "17.0.9+9-1~18.04", "openjdk-17-jre-zero": "17.0.9+9-1~18.04", "openjdk-17-jre-headless": "17.0.9+9-1~18.04" } ] }
{ "availability": "No subscription required", "binaries": [ { "openjdk-17-dbg": "17.0.9+9-1~20.04", "openjdk-17-jdk": "17.0.9+9-1~20.04", "openjdk-17-jdk-headless": "17.0.9+9-1~20.04", "openjdk-17-demo": "17.0.9+9-1~20.04", "openjdk-17-doc": "17.0.9+9-1~20.04", "openjdk-17-source": "17.0.9+9-1~20.04", "openjdk-17-jre": "17.0.9+9-1~20.04", "openjdk-17-jre-zero": "17.0.9+9-1~20.04", "openjdk-17-jre-headless": "17.0.9+9-1~20.04" } ] }
{ "availability": "No subscription required", "binaries": [ { "openjdk-11-dbg": "11.0.21+9-0ubuntu1~20.04", "openjdk-11-demo": "11.0.21+9-0ubuntu1~20.04", "openjdk-11-source": "11.0.21+9-0ubuntu1~20.04", "openjdk-11-jdk": "11.0.21+9-0ubuntu1~20.04", "openjdk-11-doc": "11.0.21+9-0ubuntu1~20.04", "openjdk-11-jdk-headless": "11.0.21+9-0ubuntu1~20.04", "openjdk-11-jre-zero": "11.0.21+9-0ubuntu1~20.04", "openjdk-11-jre": "11.0.21+9-0ubuntu1~20.04", "openjdk-11-jre-headless": "11.0.21+9-0ubuntu1~20.04" } ] }
{ "availability": "No subscription required", "binaries": [ { "openjdk-17-dbg": "17.0.9+9-1~22.04", "openjdk-17-jdk": "17.0.9+9-1~22.04", "openjdk-17-jdk-headless": "17.0.9+9-1~22.04", "openjdk-17-demo": "17.0.9+9-1~22.04", "openjdk-17-doc": "17.0.9+9-1~22.04", "openjdk-17-source": "17.0.9+9-1~22.04", "openjdk-17-jre": "17.0.9+9-1~22.04", "openjdk-17-jre-zero": "17.0.9+9-1~22.04", "openjdk-17-jre-headless": "17.0.9+9-1~22.04" } ] }
{ "availability": "No subscription required", "binaries": [ { "openjdk-11-dbg": "11.0.21+9-0ubuntu1~22.04", "openjdk-11-demo": "11.0.21+9-0ubuntu1~22.04", "openjdk-11-source": "11.0.21+9-0ubuntu1~22.04", "openjdk-11-jdk": "11.0.21+9-0ubuntu1~22.04", "openjdk-11-doc": "11.0.21+9-0ubuntu1~22.04", "openjdk-11-jdk-headless": "11.0.21+9-0ubuntu1~22.04", "openjdk-11-jre-zero": "11.0.21+9-0ubuntu1~22.04", "openjdk-11-jre": "11.0.21+9-0ubuntu1~22.04", "openjdk-11-jre-headless": "11.0.21+9-0ubuntu1~22.04" } ] }
{ "availability": "No subscription required", "binaries": [ { "openjdk-17-dbg": "17.0.9+9-1~23.10", "openjdk-17-jdk": "17.0.9+9-1~23.10", "openjdk-17-jdk-headless": "17.0.9+9-1~23.10", "openjdk-17-demo": "17.0.9+9-1~23.10", "openjdk-17-doc": "17.0.9+9-1~23.10", "openjdk-17-source": "17.0.9+9-1~23.10", "openjdk-17-jre": "17.0.9+9-1~23.10", "openjdk-17-jre-zero": "17.0.9+9-1~23.10", "openjdk-17-jre-headless": "17.0.9+9-1~23.10" } ] }
{ "availability": "No subscription required", "binaries": [ { "openjdk-21-dbg": "21.0.1+12-2~23.10", "openjdk-21-demo": "21.0.1+12-2~23.10", "openjdk-21-jre-headless": "21.0.1+12-2~23.10", "openjdk-21-jdk-headless": "21.0.1+12-2~23.10", "openjdk-21-source": "21.0.1+12-2~23.10", "openjdk-21-jdk": "21.0.1+12-2~23.10", "openjdk-21-doc": "21.0.1+12-2~23.10", "openjdk-21-jre": "21.0.1+12-2~23.10", "openjdk-21-jre-zero": "21.0.1+12-2~23.10" } ] }
{ "availability": "No subscription required", "binaries": [ { "openjdk-11-dbg": "11.0.21+9-0ubuntu1~23.10", "openjdk-11-demo": "11.0.21+9-0ubuntu1~23.10", "openjdk-11-source": "11.0.21+9-0ubuntu1~23.10", "openjdk-11-jdk": "11.0.21+9-0ubuntu1~23.10", "openjdk-11-doc": "11.0.21+9-0ubuntu1~23.10", "openjdk-11-jdk-headless": "11.0.21+9-0ubuntu1~23.10", "openjdk-11-jre-zero": "11.0.21+9-0ubuntu1~23.10", "openjdk-11-jre": "11.0.21+9-0ubuntu1~23.10", "openjdk-11-jre-headless": "11.0.21+9-0ubuntu1~23.10" } ] }