Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 498
Alerts This Week
Warning Icon 1 498

openSUSE 15.6: 2025:1525-1 important: java-1_8_0-openjdk access issues

opensuse
Calendar Grey May 9, 2025
Scroller Opensuse
This notification details a significant upgrade for python-3_9_7 that addresses urgent vulnerability concerns found in multiple Fedora applications.
An update that solves three vulnerabilities can now be installed.

Description

This update for java-1_8_0-openjdk fixes the following issues:

Update to version jdk8u452 (icedtea-3.35.0)

Security issues fixed:

* CVE-2025-21587: unauthorized creation, deletion or modification of critical

data through the JSSE component. (bsc#1241274)

* CVE-2025-30691: unauthorized update, insert or delete access to a subset of

Oracle Java SE data through the Compiler component. (bsc#1241275)

* CVE-2025-30698: unauthorized access to Oracle Java SE data and unauthorized

ability to cause partial DoS through the 2D component. (bsc#1241276)

Non-security issues fixed:

* JDK-8212096: javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java

failed intermittently due to SSLException: Tag mismatch.

* JDK-8261020: wrong format parameter in create_emergency_chunk_path.

* JDK-8266881: enable debug log for SSLEngineExplorerMatchedSNI.java.

* JDK-8268457: XML Transformer outputs Unicode supplementary character

incorrectly to HTML.

* JDK-8309841:...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory access control DoS important Java openSUSE

Patch

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* openSUSE Leap 15.6

zypper in -t patch openSUSE-SLE-15.6-2025-1525=1

* Legacy Module 15-SP6

zypper in -t patch SUSE-SLE-Module-Legacy-15-SP6-2025-1525=1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP3

zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-1525=1

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4

zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-1525=1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4

zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-1525=1

* SUSE Linux Enterprise Server 15 SP3 LTSS

zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-1525=1

* SUSE Linux Enterprise Server 15 SP4 LTSS

zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-1525=1

* SUSE Linux Enterprise Server 15 SP5 LTSS

zypper in -t patch...

Read the Full Advisory

Package List

* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64)

* java-1_8_0-openjdk-devel-1.8.0.452-150000.3.106.1

* java-1_8_0-openjdk-1.8.0.452-150000.3.106.1

* java-1_8_0-openjdk-accessibility-1.8.0.452-150000.3.106.1

* java-1_8_0-openjdk-debugsource-1.8.0.452-150000.3.106.1

* java-1_8_0-openjdk-demo-debuginfo-1.8.0.452-150000.3.106.1

* java-1_8_0-openjdk-headless-1.8.0.452-150000.3.106.1

* java-1_8_0-openjdk-headless-debuginfo-1.8.0.452-150000.3.106.1

* java-1_8_0-openjdk-demo-1.8.0.452-150000.3.106.1

* java-1_8_0-openjdk-debuginfo-1.8.0.452-150000.3.106.1

* java-1_8_0-openjdk-devel-debuginfo-1.8.0.452-150000.3.106.1

* java-1_8_0-openjdk-src-1.8.0.452-150000.3.106.1

* openSUSE Leap 15.6 (noarch)

* java-1_8_0-openjdk-javadoc-1.8.0.452-150000.3.106.1

* Legacy Module 15-SP6 (aarch64 ppc64le s390x x86_64)

* java-1_8_0-openjdk-devel-1.8.0.452-150000.3.106.1

* java-1_8_0-openjdk-1.8.0.452-150000.3.106.1

* java-1_8_0-openjdk-debugsource-1.8.0.452-150000.3.106.1

*...

Read the Full Advisory

References

* bsc#1241274

* bsc#1241275

* bsc#1241276

## References:

* https://www.suse.com/security/cve/CVE-2025-21587.html

* https://www.suse.com/security/cve/CVE-2025-30691.html

* https://www.suse.com/security/cve/CVE-2025-30698.html

* https://bugzilla.suse.com/show_bug.cgi?id=1241274

* https://bugzilla.suse.com/show_bug.cgi?id=1241275

* https://bugzilla.suse.com/show_bug.cgi?id=1241276

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:1525-1
Release Date: 2025-05-09T11:31:06Z
Affected Products: * Legacy Module 15-SP6 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6

Topics%20covered

Topics Covered

security advisory access control DoS important Java openSUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.