Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

SUSE: java-21-openjdk Important Update CVE-2025-53057 2025:3859-1

suse
Calendar Grey October 29, 2025
Dist Suse Esm H88
This update for java-21-openjdk addresses critical issues and enhances data protection in SUSE systems.
* bsc#1246806 * bsc#1252414 * bsc#1252417 * bsc#1252418

Summary

## This update for java-21-openjdk fixes the following issues: Update to upstream tag jdk-21.0.9+10 (October 2025 CPU): * CVE-2025-53057: Fixed unauthenticated attacker can achieve unauthorized creation, deletion or modification access to critical data (bsc#1252414). * CVE-2025-53066: Fixed unauthenticated attacker can achive unauthorized access to critical data or complete access (bsc#1252417). * CVE-2025-61748: Fixed unauthenticated attacker can achive unauthorized update, insert or delete access to some resources (bsc#1252418). Other bug fixes: * Do not embed rebuild counter (bsc#1246806) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product:

Topics%20covered

Topics Covered

security advisory SuSE important java data access unauthorized

References

* bsc#1246806

* bsc#1252414

* bsc#1252417

* bsc#1252418

Cross-

* CVE-2025-53057

* CVE-2025-53066

* CVE-2025-61748

CVSS scores:

* CVE-2025-53057 ( SUSE ): 8.2

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

* CVE-2025-53057 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

* CVE-2025-53057 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

* CVE-2025-53066 ( SUSE ): 8.7

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

* CVE-2025-53066 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

* CVE-2025-53066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

* CVE-2025-61748 ( SUSE ): 6.3

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:3859-1
Release Date: 2025-10-29T15:10:42Z
Rating: important

Topics%20covered

Topics Covered

security advisory SuSE important java data access unauthorized

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here