SUSE-SU-2025:03224-1
- Source
- https://www.suse.com/support/update/announcement/2025/suse-su-202503224-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:03224-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2025:03224-1
- Upstream
- Related
- Published
- 2025-09-15T11:37:25Z
- Modified
- 2026-03-23T04:48:00.485937Z
- Summary
- Security update for java-1_8_0-openjdk
- Details
-
This update for java-180-openjdk fixes the following issues:
Update to version jdk8u462 (icedtea-3.36.0).
Security issues fixed:
- CVE-2025-30749: heap corruption allows unauthenticated attacker with network access to compromise and takeover Java applications that load and run untrusted code (bsc#1246595).
- CVE-2025-30754: incomplete handshake allows unauthenticated attacker with network access via TLS to gain unauthorized update, insert, delete and read access to sensitive data (bsc#1246598).
- CVE-2025-30761: issue in Scripting component allows unauthenticated attacker with network access to gain unauthorized creation, deletion or modification access to critical data (bsc#1246580).
- CVE-2025-50106: Glyph out-of-memory access allows unauthenticated attacker with network access to compromise and takeover Java applications that load and run untrusted code (bsc#1246584).
Other issues fixed:
- Import of OpenJDK 8 u462 build 08
- JDK-8026976: ECParameters, Point does not match field size.
- JDK-8071996: splitif accesses NULL region of ConstraintCast.
- JDK-8186143: keytool -ext option doesn't accept wildcards for DNS subject alternative names.
- JDK-8186787: clang-4.0 SIGSEGV in UnsafePutByte.
- JDK-8248001: javadoc generates invalid HTML pages whose ftp:// links are broken.
- JDK-8278472: Invalid value set to CANDIDATEFORM structure.
- JDK-8293107: GHA: Bump to Ubuntu 22.04.
- JDK-8303770: Remove Baltimore root certificate expiring in May 2025.
- JDK-8309841: Jarsigner should print a warning if an entry is removed.
- JDK-8339810: Clean up the code in sun.tools.jar.Main to properly close resources and use ZipFile during extract.
- JDK-8345625: Better HTTP connections.
- JDK-8346887: DrawFocusRect() may cause an assertion failure.
- JDK-8349111: Enhance Swing supports.
- JDK-8350498: Remove two Camerfirma root CA certificates.
- JDK-8352716: (tz) Update Timezone Data to 2025b.
- JDK-8353433: XCG currency code not recognized in JDK 8u.
- JDK-8356096: ISO 4217 Amendment 179 Update.
- JDK-8359170: Add 2 TLS and 2 CS Sectigo roots.
- Backports
- JDK-8358538: Update GHA Windows runner to 2025.
- JDK-8354941: Build failure with glibc 2.42 due to uabs() name collision.
- References
-
- https://www.suse.com/support/update/announcement/2025/suse-su-202503224-1/
- https://bugzilla.suse.com/1246580
- https://bugzilla.suse.com/1246584
- https://bugzilla.suse.com/1246595
- https://bugzilla.suse.com/1246598
- https://bugzilla.suse.com/1246806
- https://www.suse.com/security/cve/CVE-2025-30749
- https://www.suse.com/security/cve/CVE-2025-30754
- https://www.suse.com/security/cve/CVE-2025-30761
- https://www.suse.com/security/cve/CVE-2025-50106
Affected packages
openSUSE:Leap 15.6
java-1_8_0-openjdk
Package
- Name
- java-1_8_0-openjdk
- Purl
- pkg:rpm/opensuse/java-1_8_0-openjdk&distro=openSUSE%20Leap%2015.6
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.8.0.462-150000.3.109.1
Ecosystem specific
{
"binaries": [
{
"java-1_8_0-openjdk-demo": "1.8.0.462-150000.3.109.1",
"java-1_8_0-openjdk-javadoc": "1.8.0.462-150000.3.109.1",
"java-1_8_0-openjdk-accessibility": "1.8.0.462-150000.3.109.1",
"java-1_8_0-openjdk": "1.8.0.462-150000.3.109.1",
"java-1_8_0-openjdk-headless": "1.8.0.462-150000.3.109.1",
"java-1_8_0-openjdk-src": "1.8.0.462-150000.3.109.1",
"java-1_8_0-openjdk-devel": "1.8.0.462-150000.3.109.1"
}
]
}SUSE:Enterprise Storage 7.1
java-1_8_0-openjdk
Package
- Name
- java-1_8_0-openjdk
- Purl
- pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Enterprise%20Storage%207.1
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.8.0.462-150000.3.109.1
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
java-1_8_0-openjdk
Package
- Name
- java-1_8_0-openjdk
- Purl
- pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.8.0.462-150000.3.109.1
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
java-1_8_0-openjdk
Package
- Name
- java-1_8_0-openjdk
- Purl
- pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.8.0.462-150000.3.109.1
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
java-1_8_0-openjdk
Package
- Name
- java-1_8_0-openjdk
- Purl
- pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.8.0.462-150000.3.109.1
SUSE:Linux Enterprise Module for Legacy 15 SP6
java-1_8_0-openjdk
Package
- Name
- java-1_8_0-openjdk
- Purl
- pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP6
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.8.0.462-150000.3.109.1
SUSE:Linux Enterprise Module for Legacy 15 SP7
java-1_8_0-openjdk
Package
- Name
- java-1_8_0-openjdk
- Purl
- pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP7
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.8.0.462-150000.3.109.1
SUSE:Linux Enterprise Server 15 SP3-LTSS
java-1_8_0-openjdk
Package
- Name
- java-1_8_0-openjdk
- Purl
- pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.8.0.462-150000.3.109.1
SUSE:Linux Enterprise Server 15 SP4-LTSS
java-1_8_0-openjdk
Package
- Name
- java-1_8_0-openjdk
- Purl
- pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.8.0.462-150000.3.109.1
SUSE:Linux Enterprise Server 15 SP5-LTSS
java-1_8_0-openjdk
Package
- Name
- java-1_8_0-openjdk
- Purl
- pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.8.0.462-150000.3.109.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
java-1_8_0-openjdk
Package
- Name
- java-1_8_0-openjdk
- Purl
- pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.8.0.462-150000.3.109.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
java-1_8_0-openjdk
Package
- Name
- java-1_8_0-openjdk
- Purl
- pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.8.0.462-150000.3.109.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
java-1_8_0-openjdk
Package
- Name
- java-1_8_0-openjdk
- Purl
- pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.8.0.462-150000.3.109.1