SUSE-SU-2025:02666-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2025/suse-su-202502666-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02666-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2025:02666-1

Upstream

CVE (5)

Related

CVE (5)

Published

2025-08-04T12:35:33Z

Modified

2026-03-23T04:46:43Z

Summary

Security update for java-11-openjdk

Details

This update for java-11-openjdk fixes the following issues:

Upgrade to upstream tag jdk-11.0.28+6 (July 2025 CPU):

Security fixes:

CVE-2025-30749: several scenarios can lead to heap corruption (bsc#1246595)
CVE-2025-30754: incomplete handshake may lead to weakening TLS protections (bsc#1246598)
CVE-2025-30761: Improve scripting supports (bsc#1246580)
CVE-2025-50059: Improve HTTP client header handling (bsc#1246575)
CVE-2025-50106: Glyph out-of-memory access and crash (bsc#1246584)

Changelog:

+ JDK-8026976: ECParameters, Point does not match field size
+ JDK-8211400: nsk.share.gc.Memory::getArrayLength returns wrong
  value
+ JDK-8231058: VerifyOops crashes with assert(_offset >= 0)
  failed: offset for non comment?
+ JDK-8232625: HttpClient redirect policy should be more
  conservative
+ JDK-8258483: [TESTBUG] gtest
  CollectorPolicy.young_scaled_initial_ergo_vm fails if heap is
  too small
+ JDK-8293345: SunPKCS11 provider checks on PKCS11 Mechanism are
  problematic
+ JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts
+ JDK-8301753: AppendFile/WriteFile has differences between make
  3.81 and 4+
+ JDK-8303770: Remove Baltimore root certificate expiring in May
  2025
+ JDK-8315380: AsyncGetCallTrace crash in frame::safe_for_sender
+ JDK-8327476: Upgrade JLine to 3.26.1
+ JDK-8328957: Update PKCS11Test.java to not use hardcoded path
+ JDK-8331959: Update PKCS#11 Cryptographic Token Interface to
  v3.1
+ JDK-8339300: CollectorPolicy.young_scaled_initial_ergo_vm
  gtest fails on ppc64 based platforms
+ JDK-8339728: [Accessibility,Windows,JAWS] Bug in the
  getKeyChar method of the AccessBridge class
+ JDK-8345133: Test sun/security/tools/jarsigner/
  /TsacertOptionTest.java failed: Warning found in stdout
+ JDK-8345625: Better HTTP connections
+ JDK-8346887: DrawFocusRect() may cause an assertion failure
+ JDK-8347629: Test FailOverDirectExecutionControlTest.java
  fails with -Xcomp
+ JDK-8348110: Update LCMS to 2.17
+ JDK-8348596: Update FreeType to 2.13.3
+ JDK-8348598: Update Libpng to 1.6.47
+ JDK-8348989: Better Glyph drawing
+ JDK-8349111: Enhance Swing supports
+ JDK-8349594: Enhance TLS protocol support
+ JDK-8350469: [11u] Test AbsPathsInImage.java fails
  - JDK-8239429 public clone
+ JDK-8350498: Remove two Camerfirma root CA certificates
+ JDK-8350991: Improve HTTP client header handling
+ JDK-8351099: Bump update version of OpenJDK: 11.0.28
+ JDK-8351422: Improve scripting supports
+ JDK-8352302: Test sun/security/tools/jarsigner/
  /TimestampCheck.java is failing
+ JDK-8352716: (tz) Update Timezone Data to 2025b
+ JDK-8356096: ISO 4217 Amendment 179 Update
+ JDK-8356571: Re-enable -Wtype-limits for GCC in LCMS
+ JDK-8359170: Add 2 TLS and 2 CS Sectigo roots
+ JDK-8360147: Better Glyph drawing redux

References

Affected packages

openSUSE:Leap 15.6

java-11-openjdk

Package

Name: java-11-openjdk
Purl: pkg:rpm/opensuse/java-11-openjdk&distro=openSUSE%20Leap%2015.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

11.0.28.0-150000.3.129.2

Ecosystem specific

{
    "binaries":  [
        {
            "java-11-openjdk":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-demo":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-devel":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-headless":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-javadoc":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-jmods":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-src":  "11.0.28.0-150000.3.129.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02666-1.json"

SUSE:Enterprise Storage 7.1

java-11-openjdk

Package

Name: java-11-openjdk
Purl: pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Enterprise%20Storage%207.1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

11.0.28.0-150000.3.129.2

Ecosystem specific

{
    "binaries":  [
        {
            "java-11-openjdk":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-demo":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-devel":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-headless":  "11.0.28.0-150000.3.129.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02666-1.json"

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS

java-11-openjdk

Package

Name: java-11-openjdk
Purl: pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

11.0.28.0-150000.3.129.2

Ecosystem specific

{
    "binaries":  [
        {
            "java-11-openjdk":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-demo":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-devel":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-headless":  "11.0.28.0-150000.3.129.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02666-1.json"

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS

java-11-openjdk

Package

Name: java-11-openjdk
Purl: pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

11.0.28.0-150000.3.129.2

Ecosystem specific

{
    "binaries":  [
        {
            "java-11-openjdk":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-demo":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-devel":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-headless":  "11.0.28.0-150000.3.129.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02666-1.json"

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS

java-11-openjdk

Package

Name: java-11-openjdk
Purl: pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

11.0.28.0-150000.3.129.2

Ecosystem specific

{
    "binaries":  [
        {
            "java-11-openjdk":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-demo":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-devel":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-headless":  "11.0.28.0-150000.3.129.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02666-1.json"

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS

java-11-openjdk

Package

Name: java-11-openjdk
Purl: pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

11.0.28.0-150000.3.129.2

Ecosystem specific

{
    "binaries":  [
        {
            "java-11-openjdk":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-demo":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-devel":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-headless":  "11.0.28.0-150000.3.129.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02666-1.json"

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS

java-11-openjdk

Package

Name: java-11-openjdk
Purl: pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

11.0.28.0-150000.3.129.2

Ecosystem specific

{
    "binaries":  [
        {
            "java-11-openjdk":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-demo":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-devel":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-headless":  "11.0.28.0-150000.3.129.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02666-1.json"

SUSE:Linux Enterprise Module for Legacy 15 SP6

java-11-openjdk

Package

Name: java-11-openjdk
Purl: pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

11.0.28.0-150000.3.129.2

Ecosystem specific

{
    "binaries":  [
        {
            "java-11-openjdk":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-demo":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-devel":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-headless":  "11.0.28.0-150000.3.129.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02666-1.json"

SUSE:Linux Enterprise Module for Legacy 15 SP7

java-11-openjdk

Package

Name: java-11-openjdk
Purl: pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

11.0.28.0-150000.3.129.2

Ecosystem specific

{
    "binaries":  [
        {
            "java-11-openjdk":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-demo":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-devel":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-headless":  "11.0.28.0-150000.3.129.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02666-1.json"

SUSE:Linux Enterprise Module for Package Hub 15 SP6

java-11-openjdk

Package

Name: java-11-openjdk
Purl: pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

11.0.28.0-150000.3.129.2

Ecosystem specific

{
    "binaries":  [
        {
            "java-11-openjdk-javadoc":  "11.0.28.0-150000.3.129.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02666-1.json"

SUSE:Linux Enterprise Module for Package Hub 15 SP7

java-11-openjdk

Package

Name: java-11-openjdk
Purl: pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

11.0.28.0-150000.3.129.2

Ecosystem specific

{
    "binaries":  [
        {
            "java-11-openjdk-javadoc":  "11.0.28.0-150000.3.129.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02666-1.json"

SUSE:Linux Enterprise Server 15 SP3-LTSS

java-11-openjdk

Package

Name: java-11-openjdk
Purl: pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

11.0.28.0-150000.3.129.2

Ecosystem specific

{
    "binaries":  [
        {
            "java-11-openjdk":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-demo":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-devel":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-headless":  "11.0.28.0-150000.3.129.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02666-1.json"

SUSE:Linux Enterprise Server 15 SP4-LTSS

java-11-openjdk

Package

Name: java-11-openjdk
Purl: pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

11.0.28.0-150000.3.129.2

Ecosystem specific

{
    "binaries":  [
        {
            "java-11-openjdk":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-demo":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-devel":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-headless":  "11.0.28.0-150000.3.129.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02666-1.json"

SUSE:Linux Enterprise Server 15 SP5-LTSS

java-11-openjdk

Package

Name: java-11-openjdk
Purl: pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

11.0.28.0-150000.3.129.2

Ecosystem specific

{
    "binaries":  [
        {
            "java-11-openjdk":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-demo":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-devel":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-headless":  "11.0.28.0-150000.3.129.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02666-1.json"

SUSE:Linux Enterprise Server for SAP Applications 15 SP3

java-11-openjdk

Package

Name: java-11-openjdk
Purl: pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

11.0.28.0-150000.3.129.2

Ecosystem specific

{
    "binaries":  [
        {
            "java-11-openjdk":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-demo":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-devel":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-headless":  "11.0.28.0-150000.3.129.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02666-1.json"

SUSE:Linux Enterprise Server for SAP Applications 15 SP4

java-11-openjdk

Package

Name: java-11-openjdk
Purl: pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

11.0.28.0-150000.3.129.2

Ecosystem specific

{
    "binaries":  [
        {
            "java-11-openjdk":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-demo":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-devel":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-headless":  "11.0.28.0-150000.3.129.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02666-1.json"

SUSE:Linux Enterprise Server for SAP Applications 15 SP5

java-11-openjdk

Package

Name: java-11-openjdk
Purl: pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

11.0.28.0-150000.3.129.2

Ecosystem specific

{
    "binaries":  [
        {
            "java-11-openjdk":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-demo":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-devel":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-headless":  "11.0.28.0-150000.3.129.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02666-1.json"

SUSE:Manager Proxy 4.3

java-11-openjdk

Package

Name: java-11-openjdk
Purl: pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Manager%20Proxy%204.3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

11.0.28.0-150000.3.129.2

Ecosystem specific

{
    "binaries":  [
        {
            "java-11-openjdk":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-demo":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-devel":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-headless":  "11.0.28.0-150000.3.129.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02666-1.json"

SUSE:Manager Server 4.3

java-11-openjdk

Package

Name: java-11-openjdk
Purl: pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Manager%20Server%204.3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

11.0.28.0-150000.3.129.2

Ecosystem specific

{
    "binaries":  [
        {
            "java-11-openjdk":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-demo":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-devel":  "11.0.28.0-150000.3.129.2",
            "java-11-openjdk-headless":  "11.0.28.0-150000.3.129.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02666-1.json"