{"schemaVersion":3,"id":"SUSE-SU-2025:02563-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for java-11-openjdk\n\nThis update for java-11-openjdk fixes the following issues:\n\nUpgrade to upstream tag jdk-11.0.28+6 (July 2025 CPU):\n\nSecurity fixes:\n\n- CVE-2025-30749: several scenarios can lead to heap corruption (bsc#1246595)\n- CVE-2025-30754: incomplete handshake may lead to weakening TLS protections (bsc#1246598)\n- CVE-2025-30761: Improve scripting supports (bsc#1246580)\n- CVE-2025-50059: Improve HTTP client header handling (bsc#1246575)\n- CVE-2025-50106: Glyph out-of-memory access and crash (bsc#1246584)\n\nChangelog:\n\n    + JDK-8026976: ECParameters, Point does not match field size\n    + JDK-8211400: nsk.share.gc.Memory::getArrayLength returns wrong\n      value\n    + JDK-8231058: VerifyOops crashes with assert(_offset >= 0)\n      failed: offset for non comment?\n    + JDK-8232625: HttpClient redirect policy should be more\n      conservative\n    + JDK-8258483: [TESTBUG] gtest\n      CollectorPolicy.young_scaled_initial_ergo_vm fails if heap is\n      too small\n    + JDK-8293345: SunPKCS11 provider checks on PKCS11 Mechanism are\n      problematic\n    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts\n    + JDK-8301753: AppendFile/WriteFile has differences between make\n      3.81 and 4+\n    + JDK-8303770: Remove Baltimore root certificate expiring in May\n      2025\n    + JDK-8315380: AsyncGetCallTrace crash in frame::safe_for_sender\n    + JDK-8327476: Upgrade JLine to 3.26.1\n    + JDK-8328957: Update PKCS11Test.java to not use hardcoded path\n    + JDK-8331959: Update PKCS#11 Cryptographic Token Interface to\n      v3.1\n    + JDK-8339300: CollectorPolicy.young_scaled_initial_ergo_vm\n      gtest fails on ppc64 based platforms\n    + JDK-8339728: [Accessibility,Windows,JAWS] Bug in the\n      getKeyChar method of the AccessBridge class\n    + JDK-8345133: Test sun/security/tools/jarsigner/\n      /TsacertOptionTest.java failed: Warning found in stdout\n    + JDK-8345625: Better HTTP connections\n    + JDK-8346887: DrawFocusRect() may cause an assertion failure\n    + JDK-8347629: Test FailOverDirectExecutionControlTest.java\n      fails with -Xcomp\n    + JDK-8348110: Update LCMS to 2.17\n    + JDK-8348596: Update FreeType to 2.13.3\n    + JDK-8348598: Update Libpng to 1.6.47\n    + JDK-8348989: Better Glyph drawing\n    + JDK-8349111: Enhance Swing supports\n    + JDK-8349594: Enhance TLS protocol support\n    + JDK-8350469: [11u] Test AbsPathsInImage.java fails\n      - JDK-8239429 public clone\n    + JDK-8350498: Remove two Camerfirma root CA certificates\n    + JDK-8350991: Improve HTTP client header handling\n    + JDK-8351099: Bump update version of OpenJDK: 11.0.28\n    + JDK-8351422: Improve scripting supports\n    + JDK-8352302: Test sun/security/tools/jarsigner/\n      /TimestampCheck.java is failing\n    + JDK-8352716: (tz) Update Timezone Data to 2025b\n    + JDK-8356096: ISO 4217 Amendment 179 Update\n    + JDK-8356571: Re-enable -Wtype-limits for GCC in LCMS\n    + JDK-8359170: Add 2 TLS and 2 CS Sectigo roots\n    + JDK-8360147: Better Glyph drawing redux","dates":{"published":"2025-07-31T02:15:52.000Z","modified":"2026-02-04T03:12:15.269Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"java-11-openjdk&distro=SUSE Linux Enterprise Server 12 SP5-LTSS","name":"java-11-openjdk","label":"java-11-openjdk&distro=SUSE Linux Enterprise Server 12 SP5-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE Linux Enterprise Server 12 SP5-LTSS","purlType":"rpm","versions":[{"text":"< 11.0.28.0-3.90.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.0.28.0-3.90.1","eol":null,"hubHref":null},{"vendor":"suse","product":"java-11-openjdk&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5","name":"java-11-openjdk","label":"java-11-openjdk&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5","purlType":"rpm","versions":[{"text":"< 11.0.28.0-3.90.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.0.28.0-3.90.1","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502563-1/","label":"www.suse.com/support/update/announcement/2025/suse-su-202502563-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1246575","label":"bugzilla.suse.com/1246575","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1246580","label":"bugzilla.suse.com/1246580","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1246584","label":"bugzilla.suse.com/1246584","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1246595","label":"bugzilla.suse.com/1246595","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1246598","label":"bugzilla.suse.com/1246598","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2025-30749","label":"www.suse.com/security/cve/CVE-2025-30749","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-30754","label":"www.suse.com/security/cve/CVE-2025-30754","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-30761","label":"www.suse.com/security/cve/CVE-2025-30761","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-50059","label":"www.suse.com/security/cve/CVE-2025-50059","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-50106","label":"www.suse.com/security/cve/CVE-2025-50106","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2025-30749","CVE-2025-30754","CVE-2025-30761","CVE-2025-50059","CVE-2025-50106"],"downstream":[],"duplicates":[],"related":["CVE-2025-30749","CVE-2025-30754","CVE-2025-30761","CVE-2025-50059","CVE-2025-50106"]},"timeline":[{"kind":"published","date":"2025-07-31T02:15:52.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T03:12:15.269Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T17:58:53.307Z","stale":false,"partial":false}}