SUSE-SU-2025:01788-1: java-1_8_0-ibm&distro=openSUSE Leap 15.6

CVSS: UnknownPublished
Published 31-05-2025Last modified 23-03-2026
Open JSON

Vulnerability summary

SUSE-SU-2025:01788-1 is a vulnerability in java-1_8_0-ibm&distro=openSUSE Leap 15.6 with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 4 · Downstream 0 · Related 4
CVE-2025-21587CVE-2025-30691CVE-2025-30698CVE-2025-4447

Timeline

  1. 31-05-2025
    PublishedVulnerability first disclosed.
  2. 23-03-2026
    Last modifiedVulnerability information updated.

Description

Security update for java-1_8_0-ibm This update for java-1_8_0-ibm fixes the following issues: Update to Java 8.0 Service Refresh 8 Fix Pack 45. Security issues fixed: - Oracle April 15 2025 CPU (bsc#1242208) * CVE-2025-21587: unauthorized access, deletion and modification of critical data via the JSSE component (bsc#1241274). * CVE-2025-30691: unauthorized access to data via the Compiler component (bsc#1241275). * CVE-2025-30698: unauthorized access to data and ability to cause a partial DoS via the 2D component (bsc#1241276). - IBM Security Update May 2025 * CVE-2025-4447: stack based buffer overflow in Eclipse OpenJ9 through modification of file that is read when the JVM starts (bsc#1243429). Other changes and issues fixed: - Security: * Avoid memory leak during aes cipher initialization operations for IBMJCEPlus and IBMJCEPlusProviders provider. * Changing the default of the com.ibm.security.spnego.msinterop property from true to false. * Deserializing a com.ibm.crypto.provider.rsaprivatecrtkey object causes a java.io.invalidobjectexception to be thrown. * Failed to read private key from a JKS keystore, specified as JCEKS keystore. * HTTPS channel binding support. * Keytool listing PKCS12 keystore issue. * On Linux systems, use gcc11.2 to compile IBM PKCS11 library. * Support has been added to the IBM Java XMLDSigRI security provider for the EdDSA (Edwards-curve Digital Signature Algorithm). * Updates to XDH Key Agreement, AESGCM Algorithms in IBMJCEPlus and IBMJCEPlusFIPS providers. - Class Libraries: * Update timezone information to the latest tzdata2025a. - Java Virtual Machine: * A SIGSEGV/GPF event received while processing verifyerror. * Crash while resolving MethodHandleNatives. * NoSuchMethodException or NoClassDefFoundError when loading classes. - JIT Compiler: * Assert in the JIT Compiler, badILOp. * Reduced MD5 performance.

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse11 products
  • java-1_8_0-ibm&distro=SUSE Enterprise Storage 7.1< 1.8.0_sr8.45-150000.3.101.1
  • java-1_8_0-ibm&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS< 1.8.0_sr8.45-150000.3.101.1
  • java-1_8_0-ibm&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 1.8.0_sr8.45-150000.3.101.1
  • java-1_8_0-ibm&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 1.8.0_sr8.45-150000.3.101.1
  • java-1_8_0-ibm&distro=SUSE Linux Enterprise Module for Legacy 15 SP6< 1.8.0_sr8.45-150000.3.101.1
Opensuse1 product
  • java-1_8_0-ibm&distro=openSUSE Leap 15.6< 1.8.0_sr8.45-150000.3.101.1

2 vendors · 12 products

References

10 links