Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 420
Alerts This Week
Warning Icon 1 420

openSUSE Leap 16.0: java-21-openjdk Important 2025-20123-1 CVE-2025-53066

opensuse
Calendar Grey December 1, 2025
Scroller Opensuse
Important security update for openSUSE Java 21 to resolve critical issues, ensuring robust system integrity and performance.
An update that solves 3 vulnerabilities and has 4 bug fixes can now be installed.

Description

This update for java-21-openjdk fixes the following issues:

Update to upstream tag jdk-21.0.9+10 (October 2025 CPU):

- CVE-2025-53066: Fixed enhance path factories (bsc#1252417).

- CVE-2025-61748: Fixed enhance string handling (bsc#1252418).

- CVE-2025-53057: Fixed enhance certificate handling (bsc#1252414).

Other bug fixes:

- Do not embed rebuild counter (bsc#1246806)

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

zypper in -t patch openSUSE-Leap-16.0-82=1

Patch

Package List

- openSUSE Leap 16.0:

java-21-openjdk-21.0.9.0-160000.1.1

java-21-openjdk-demo-21.0.9.0-160000.1.1

java-21-openjdk-devel-21.0.9.0-160000.1.1

java-21-openjdk-headless-21.0.9.0-160000.1.1

java-21-openjdk-javadoc-21.0.9.0-160000.1.1

java-21-openjdk-jmods-21.0.9.0-160000.1.1

java-21-openjdk-src-21.0.9.0-160000.1.1

References

* bsc#1246806

* bsc#1252414

* bsc#1252417

* bsc#1252418

References:

* https://www.suse.com/security/cve/CVE-2025-53057.html

* https://www.suse.com/security/cve/CVE-2025-53066.html

* https://www.suse.com/security/cve/CVE-2025-61748.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2025-20123-1
Rating: important
Affected Products: openSUSE Leap 16.0 -------------------------------------------------------------

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.