Bug 2376786 (CVE-2025-30761) - CVE-2025-30761 openjdk: Improve scripting supports (Oracle CPU 2025-07)
Summary: CVE-2025-30761 openjdk: Improve scripting supports (Oracle CPU 2025-07)
Keywords:
Status: NEW
Alias: CVE-2025-30761
Deadline: 2025-07-15
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-07-07 10:53 UTC by OSIDB Bzimport
Modified: 2025-07-25 12:40 UTC (History)
11 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2025-07-07 10:53:55 UTC 
The --no-java security option can be bypassed in some cases.
Comment 1 Michal Findra 2025-07-25 11:11:23 UTC 
OpenJDK-8 upstream commit:
https://github.com/openjdk/jdk8u/commit/d24f35dcef2ecba264c7c0f78e93fd9179082a4c

OpenJDK-11 upstream commit:
https://github.com/openjdk/jdk11u/commit/f31f26ae25a32e7f98de7044bf5c8da1aa3f5bfb
Comment 2 Michal Findra 2025-07-25 12:40:08 UTC 
This CVE was fixed in Oracle Java SE 8u461, 11.0.28. 

https://www.oracle.com/java/technologies/javase/8u461-relnotes.html#R180_461
https://www.oracle.com/java/technologies/javase/11-0-28-relnotes.html#R11_0_28
Note You need to log in before you can comment on or make changes to this bug.