{"schemaVersion":3,"id":"SUSE-SU-2025:1487-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for java-11-openjdk\n\nThis update for java-11-openjdk fixes the following issues:\n\nUpgrade to upstream tag jdk-11.0.27+6 (April 2025 CPU)\n\nCVEs:\n\n+ CVE-2025-21587: Fixed JSSE unauthorized access, deletion or modification of critical data (bsc#1241274)\n+ CVE-2025-30691: Fixed Oracle Java SE Compiler Unauthorized Data Access (bsc#1241275)\n+ CVE-2025-30698: Fixed Oracle Java 2D unauthorized data access and DoS (bsc#1241276)\n\nChanges:\n\n    + JDK-8195675: Call to insertText with single character\n      from custom Input Method ignored\n    + JDK-8202926: Test java/awt/Focus/\n      /WindowUpdateFocusabilityTest/\n      /WindowUpdateFocusabilityTest.html fails\n    + JDK-8216539: tools/jar/modularJar/Basic.java timed out\n    + JDK-8268364: jmethod clearing should be done during\n      unloading\n    + JDK-8273914: Indy string concat changes order of\n      operations\n    + JDK-8294316: SA core file support is broken on macosx-x64\n      starting with macOS 12.x\n    + JDK-8306408: Fix the format of several tables in\n      building.md\n    + JDK-8309841: Jarsigner should print a warning if an entry\n      is removed\n    + JDK-8312049: runtime/logging/ClassLoadUnloadTest can be\n      improved\n    + JDK-8320916: jdk/jfr/event/gc/stacktrace/\n      /TestParallelMarkSweepAllocationPendingStackTrace.java failed\n      with 'OutOfMemoryError: GC overhead limit exceeded'\n    + JDK-8327650: Test java/nio/channels/DatagramChannel/\n      /StressNativeSignal.java timed out\n    + JDK-8328242: Add a log area to the PassFailJFrame\n    + JDK-8331863: DUIterator_Fast used before it is constructed\n    + JDK-8336012: Fix usages of jtreg-reserved properties\n    + JDK-8337494: Clarify JarInputStream behavior\n    + JDK-8337692: Better TLS connection support\n    + JDK-8338430: Improve compiler transformations\n    + JDK-8339560: Unaddressed comments during code review of\n      JDK-8337664\n    + JDK-8339810: Clean up the code in sun.tools.jar.Main to\n      properly close resources and use ZipFile during extract\n    + JDK-8339931: Update problem list for\n      WindowUpdateFocusabilityTest.java\n    + JDK-8340387: Update OS detection code to recognize\n      Windows Server 2025\n    + JDK-8341424: GHA: Collect hs_errs from build time failures\n    + JDK-8342562: Enhance Deflater operations\n    + JDK-8342704: GHA: Report truncation is broken after\n      JDK-8341424\n    + JDK-8343007: Enhance Buffered Image handling\n    + JDK-8343474: [updates] Customize README.md to specifics\n      of update project\n    + JDK-8343599: Kmem limit and max values swapped when\n      printing container information\n    + JDK-8343786: [11u] GHA: Bump macOS and Xcode versions to\n      macos-13 and XCode 14.3.1\n    + JDK-8344589: Update IANA Language Subtag Registry to\n      Version 2024-11-19\n    + JDK-8345509: Bump update version of OpenJDK: 11.0.27\n    + JDK-8346587: Distrust TLS server certificates anchored by\n      Camerfirma Root CAs\n    + JDK-8347427: JTabbedPane/8134116/Bug8134116.java has no\n      license header\n    + JDK-8347847: Enhance jar file support\n    + JDK-8347965: (tz) Update Timezone Data to 2025a\n    + JDK-8349603: [21u, 17u, 11u] Update GHA JDKs after Jan/25\n      updates\n    + JDK-8352097: (tz) zone.tab update missed in 2025a backport\n    + JDK-8354087: [11u] Remove designator\n      DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.27","dates":{"published":"2025-06-16T12:00:37.000Z","modified":"2026-02-04T03:20:43.763Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"opensuse","product":"java-11-openjdk&distro=openSUSE Leap 15.6","name":"java-11-openjdk","label":"java-11-openjdk&distro=openSUSE Leap 15.6","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/java-11-openjdk&distro=openSUSE Leap 15.6","purlType":"rpm","versions":[{"text":"< 11.0.27.0-150000.3.125.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.0.27.0-150000.3.125.1","eol":null,"hubHref":null},{"vendor":"suse","product":"java-11-openjdk&distro=SUSE Enterprise Storage 7.1","name":"java-11-openjdk","label":"java-11-openjdk&distro=SUSE Enterprise Storage 7.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE Enterprise Storage 7.1","purlType":"rpm","versions":[{"text":"< 11.0.27.0-150000.3.125.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.0.27.0-150000.3.125.1","eol":null,"hubHref":null},{"vendor":"suse","product":"java-11-openjdk&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","name":"java-11-openjdk","label":"java-11-openjdk&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","purlType":"rpm","versions":[{"text":"< 11.0.27.0-150000.3.125.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.0.27.0-150000.3.125.1","eol":null,"hubHref":null},{"vendor":"suse","product":"java-11-openjdk&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","name":"java-11-openjdk","label":"java-11-openjdk&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","purlType":"rpm","versions":[{"text":"< 11.0.27.0-150000.3.125.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.0.27.0-150000.3.125.1","eol":null,"hubHref":null},{"vendor":"suse","product":"java-11-openjdk&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","name":"java-11-openjdk","label":"java-11-openjdk&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 11.0.27.0-150000.3.125.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.0.27.0-150000.3.125.1","eol":null,"hubHref":null},{"vendor":"suse","product":"java-11-openjdk&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","name":"java-11-openjdk","label":"java-11-openjdk&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","purlType":"rpm","versions":[{"text":"< 11.0.27.0-150000.3.125.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.0.27.0-150000.3.125.1","eol":null,"hubHref":null},{"vendor":"suse","product":"java-11-openjdk&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","name":"java-11-openjdk","label":"java-11-openjdk&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","purlType":"rpm","versions":[{"text":"< 11.0.27.0-150000.3.125.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.0.27.0-150000.3.125.1","eol":null,"hubHref":null},{"vendor":"suse","product":"java-11-openjdk&distro=SUSE Linux Enterprise Module for Legacy 15 SP6","name":"java-11-openjdk","label":"java-11-openjdk&distro=SUSE Linux Enterprise Module for Legacy 15 SP6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE Linux Enterprise Module for Legacy 15 SP6","purlType":"rpm","versions":[{"text":"< 11.0.27.0-150000.3.125.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.0.27.0-150000.3.125.1","eol":null,"hubHref":null},{"vendor":"suse","product":"java-11-openjdk&distro=SUSE Linux Enterprise Module for Package Hub 15 SP6","name":"java-11-openjdk","label":"java-11-openjdk&distro=SUSE Linux Enterprise Module for Package Hub 15 SP6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE Linux Enterprise Module for Package Hub 15 SP6","purlType":"rpm","versions":[{"text":"< 11.0.27.0-150000.3.125.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.0.27.0-150000.3.125.1","eol":null,"hubHref":null},{"vendor":"suse","product":"java-11-openjdk&distro=SUSE Linux Enterprise Server 15 SP3-LTSS","name":"java-11-openjdk","label":"java-11-openjdk&distro=SUSE Linux Enterprise Server 15 SP3-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE Linux Enterprise Server 15 SP3-LTSS","purlType":"rpm","versions":[{"text":"< 11.0.27.0-150000.3.125.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.0.27.0-150000.3.125.1","eol":null,"hubHref":null},{"vendor":"suse","product":"java-11-openjdk&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","name":"java-11-openjdk","label":"java-11-openjdk&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 11.0.27.0-150000.3.125.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.0.27.0-150000.3.125.1","eol":null,"hubHref":null},{"vendor":"suse","product":"java-11-openjdk&distro=SUSE Linux Enterprise Server 15 SP5-LTSS","name":"java-11-openjdk","label":"java-11-openjdk&distro=SUSE Linux Enterprise Server 15 SP5-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE Linux Enterprise Server 15 SP5-LTSS","purlType":"rpm","versions":[{"text":"< 11.0.27.0-150000.3.125.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.0.27.0-150000.3.125.1","eol":null,"hubHref":null},{"vendor":"suse","product":"java-11-openjdk&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3","name":"java-11-openjdk","label":"java-11-openjdk&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3","purlType":"rpm","versions":[{"text":"< 11.0.27.0-150000.3.125.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.0.27.0-150000.3.125.1","eol":null,"hubHref":null},{"vendor":"suse","product":"java-11-openjdk&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","name":"java-11-openjdk","label":"java-11-openjdk&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","purlType":"rpm","versions":[{"text":"< 11.0.27.0-150000.3.125.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.0.27.0-150000.3.125.1","eol":null,"hubHref":null},{"vendor":"suse","product":"java-11-openjdk&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5","name":"java-11-openjdk","label":"java-11-openjdk&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5","purlType":"rpm","versions":[{"text":"< 11.0.27.0-150000.3.125.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.0.27.0-150000.3.125.1","eol":null,"hubHref":null},{"vendor":"suse","product":"java-11-openjdk&distro=SUSE Manager Proxy 4.3","name":"java-11-openjdk","label":"java-11-openjdk&distro=SUSE Manager Proxy 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE Manager Proxy 4.3","purlType":"rpm","versions":[{"text":"< 11.0.27.0-150000.3.125.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.0.27.0-150000.3.125.1","eol":null,"hubHref":null},{"vendor":"suse","product":"java-11-openjdk&distro=SUSE Manager Server 4.3","name":"java-11-openjdk","label":"java-11-openjdk&distro=SUSE Manager Server 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE Manager Server 4.3","purlType":"rpm","versions":[{"text":"< 11.0.27.0-150000.3.125.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.0.27.0-150000.3.125.1","eol":null,"hubHref":null}],"affectedCount":17,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251487-1/","label":"www.suse.com/support/update/announcement/2025/suse-su-20251487-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1241274","label":"bugzilla.suse.com/1241274","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1241275","label":"bugzilla.suse.com/1241275","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1241276","label":"bugzilla.suse.com/1241276","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2025-21587","label":"www.suse.com/security/cve/CVE-2025-21587","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-30691","label":"www.suse.com/security/cve/CVE-2025-30691","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-30698","label":"www.suse.com/security/cve/CVE-2025-30698","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2025-21587","CVE-2025-30691","CVE-2025-30698"],"downstream":[],"duplicates":[],"related":["CVE-2025-21587","CVE-2025-30691","CVE-2025-30698"]},"timeline":[{"kind":"published","date":"2025-06-16T12:00:37.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T03:20:43.763Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T23:18:53.044Z","stale":false,"partial":false}}