Описание
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues:
Update to Java 8.0 Service Refresh 8 Fix Pack 40 (bsc#1236470):
- CVE-2025-21502: unauthenticated attacker can obtain unauthorized read and write access to data through the Hotspot component API (bsc#1236278).
Список пакетов
SUSE Linux Enterprise Server 12 SP5-LTSS
java-1_8_0-ibm-1.8.0_sr8.40-30.132.1
java-1_8_0-ibm-alsa-1.8.0_sr8.40-30.132.1
java-1_8_0-ibm-devel-1.8.0_sr8.40-30.132.1
java-1_8_0-ibm-plugin-1.8.0_sr8.40-30.132.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
java-1_8_0-ibm-1.8.0_sr8.40-30.132.1
java-1_8_0-ibm-alsa-1.8.0_sr8.40-30.132.1
java-1_8_0-ibm-devel-1.8.0_sr8.40-30.132.1
java-1_8_0-ibm-plugin-1.8.0_sr8.40-30.132.1
Ссылки
- Link for SUSE-SU-2025:0675-1
- E-Mail link for SUSE-SU-2025:0675-1
- SUSE Security Ratings
- SUSE Bug 1233296
- SUSE Bug 1236278
- SUSE Bug 1236470
- SUSE CVE CVE-2024-10917 page
- SUSE CVE CVE-2025-21502 page
Описание
In Eclipse OpenJ9 versions up to 0.47, the JNI function GetStringUTFLength may return an incorrect value which has wrapped around. From 0.48 the value is correct but may be truncated to include a smaller number of characters.
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-1.8.0_sr8.40-30.132.1
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.40-30.132.1
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.40-30.132.1
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.40-30.132.1
Ссылки
- CVE-2024-10917
- SUSE Bug 1233296
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-1.8.0_sr8.40-30.132.1
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.40-30.132.1
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.40-30.132.1
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.40-30.132.1
Ссылки
- CVE-2025-21502
- SUSE Bug 1236278