##
This update for mybatis, ognl fixes the following issues:
Version update to 3.5.7:
* Bug fixes:
* Improved performance under JDK 8. #2223
Version update to 3.5.8:
* List of changes:
* Avoid NullPointerException when mapping an empty string to java.lang.Character. #2368
* Fixed an incorrect argument when initializing static object. This resolves a compatibility issue with quarkus-mybatis. #2284
* Performance improvements. #2297 #2335 #2340
Version update to 3.5.9:
* List of changes:
* Add nullable to
* bsc#1248252
Cross-
* CVE-2025-53192
CVSS scores:
* CVE-2025-53192 ( SUSE ): 8.6
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2025-53192 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
* CVE-2025-53192 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products:
* openSUSE Leap 15.6
An update that solves one vulnerability can now be installed.
##
* https://www.suse.com/security/cve/CVE-2025-53192.html
* https://bugzilla.suse.com/show_bug.cgi?id=1248252
Get the latest Linux and open source security news straight to your inbox.