CVE-2025-10492
Publication date 16 September 2025
Last updated 24 September 2025
Ubuntu priority
A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| jasperreports | 25.04 plucky | Not in release |
| 24.04 LTS noble | Not in release | |
| 22.04 LTS jammy | Not in release | |
| 18.04 LTS bionic |
Needs evaluation
|
|
| 16.04 LTS xenial |
Needs evaluation
|