SUSE-SU-2025:3996-1

Опубликовано: 07 нояб. 2025

Источник: suse-cvrf

Описание

Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues:

Upgrade to upstream tag jdk-11.0.29+7 (October 2025 CPU):

CVE-2025-53057: Fixed unauthenticated attacker can achieve unauthorized creation, deletion or modification access to critical data (bsc#1252414).
CVE-2025-53066: Fixed unauthenticated attacker can achive unauthorized access to critical data or complete access (bsc#1252417).

Other bug fixes:

Do not embed rebuild counter (bsc#1246806)

Список пакетов

SUSE Enterprise Storage 7.1

java-11-openjdk-11.0.29.0-150000.3.132.2

java-11-openjdk-demo-11.0.29.0-150000.3.132.2

java-11-openjdk-devel-11.0.29.0-150000.3.132.2

java-11-openjdk-headless-11.0.29.0-150000.3.132.2

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

java-11-openjdk-11.0.29.0-150000.3.132.2

java-11-openjdk-demo-11.0.29.0-150000.3.132.2

java-11-openjdk-devel-11.0.29.0-150000.3.132.2

java-11-openjdk-headless-11.0.29.0-150000.3.132.2

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

java-11-openjdk-11.0.29.0-150000.3.132.2

java-11-openjdk-demo-11.0.29.0-150000.3.132.2

java-11-openjdk-devel-11.0.29.0-150000.3.132.2

java-11-openjdk-headless-11.0.29.0-150000.3.132.2

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

java-11-openjdk-11.0.29.0-150000.3.132.2

java-11-openjdk-demo-11.0.29.0-150000.3.132.2

java-11-openjdk-devel-11.0.29.0-150000.3.132.2

java-11-openjdk-headless-11.0.29.0-150000.3.132.2

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

java-11-openjdk-11.0.29.0-150000.3.132.2

java-11-openjdk-demo-11.0.29.0-150000.3.132.2

java-11-openjdk-devel-11.0.29.0-150000.3.132.2

java-11-openjdk-headless-11.0.29.0-150000.3.132.2

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

java-11-openjdk-11.0.29.0-150000.3.132.2

java-11-openjdk-demo-11.0.29.0-150000.3.132.2

java-11-openjdk-devel-11.0.29.0-150000.3.132.2

java-11-openjdk-headless-11.0.29.0-150000.3.132.2

SUSE Linux Enterprise Module for Legacy 15 SP6

java-11-openjdk-11.0.29.0-150000.3.132.2

java-11-openjdk-demo-11.0.29.0-150000.3.132.2

java-11-openjdk-devel-11.0.29.0-150000.3.132.2

java-11-openjdk-headless-11.0.29.0-150000.3.132.2

SUSE Linux Enterprise Module for Legacy 15 SP7

java-11-openjdk-11.0.29.0-150000.3.132.2

java-11-openjdk-demo-11.0.29.0-150000.3.132.2

java-11-openjdk-devel-11.0.29.0-150000.3.132.2

java-11-openjdk-headless-11.0.29.0-150000.3.132.2

SUSE Linux Enterprise Module for Package Hub 15 SP6

java-11-openjdk-javadoc-11.0.29.0-150000.3.132.2

SUSE Linux Enterprise Module for Package Hub 15 SP7

java-11-openjdk-javadoc-11.0.29.0-150000.3.132.2

SUSE Linux Enterprise Server 15 SP3-LTSS

java-11-openjdk-11.0.29.0-150000.3.132.2

java-11-openjdk-demo-11.0.29.0-150000.3.132.2

java-11-openjdk-devel-11.0.29.0-150000.3.132.2

java-11-openjdk-headless-11.0.29.0-150000.3.132.2

SUSE Linux Enterprise Server 15 SP4-LTSS

java-11-openjdk-11.0.29.0-150000.3.132.2

java-11-openjdk-demo-11.0.29.0-150000.3.132.2

java-11-openjdk-devel-11.0.29.0-150000.3.132.2

java-11-openjdk-headless-11.0.29.0-150000.3.132.2

SUSE Linux Enterprise Server 15 SP5-LTSS

java-11-openjdk-11.0.29.0-150000.3.132.2

java-11-openjdk-demo-11.0.29.0-150000.3.132.2

java-11-openjdk-devel-11.0.29.0-150000.3.132.2

java-11-openjdk-headless-11.0.29.0-150000.3.132.2

SUSE Linux Enterprise Server for SAP Applications 15 SP3

java-11-openjdk-11.0.29.0-150000.3.132.2

java-11-openjdk-demo-11.0.29.0-150000.3.132.2

java-11-openjdk-devel-11.0.29.0-150000.3.132.2

java-11-openjdk-headless-11.0.29.0-150000.3.132.2

SUSE Linux Enterprise Server for SAP Applications 15 SP4

java-11-openjdk-11.0.29.0-150000.3.132.2

java-11-openjdk-demo-11.0.29.0-150000.3.132.2

java-11-openjdk-devel-11.0.29.0-150000.3.132.2

java-11-openjdk-headless-11.0.29.0-150000.3.132.2

SUSE Linux Enterprise Server for SAP Applications 15 SP5

java-11-openjdk-11.0.29.0-150000.3.132.2

java-11-openjdk-demo-11.0.29.0-150000.3.132.2

java-11-openjdk-devel-11.0.29.0-150000.3.132.2

java-11-openjdk-headless-11.0.29.0-150000.3.132.2

SUSE Manager Proxy LTS 4.3

java-11-openjdk-11.0.29.0-150000.3.132.2

java-11-openjdk-demo-11.0.29.0-150000.3.132.2

java-11-openjdk-devel-11.0.29.0-150000.3.132.2

java-11-openjdk-headless-11.0.29.0-150000.3.132.2

SUSE Manager Server LTS 4.3

java-11-openjdk-11.0.29.0-150000.3.132.2

java-11-openjdk-demo-11.0.29.0-150000.3.132.2

java-11-openjdk-devel-11.0.29.0-150000.3.132.2

java-11-openjdk-headless-11.0.29.0-150000.3.132.2

openSUSE Leap 15.6

java-11-openjdk-11.0.29.0-150000.3.132.2

java-11-openjdk-demo-11.0.29.0-150000.3.132.2

java-11-openjdk-devel-11.0.29.0-150000.3.132.2

java-11-openjdk-headless-11.0.29.0-150000.3.132.2

java-11-openjdk-javadoc-11.0.29.0-150000.3.132.2

java-11-openjdk-jmods-11.0.29.0-150000.3.132.2

java-11-openjdk-src-11.0.29.0-150000.3.132.2

Ссылки

https://www.suse.com/support/update/announcement/2025/suse-su-20253996-1/
Link for SUSE-SU-2025:3996-1
https://lists.suse.com/pipermail/sle-security-updates/2025-November/023179.html
E-Mail link for SUSE-SU-2025:3996-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1246806
SUSE Bug 1246806
https://bugzilla.suse.com/1252414
SUSE Bug 1252414
https://bugzilla.suse.com/1252417
SUSE Bug 1252417
https://www.suse.com/security/cve/CVE-2025-53057/
SUSE CVE CVE-2025-53057 page
https://www.suse.com/security/cve/CVE-2025-53066/
SUSE CVE CVE-2025-53066 page

Описание

unknown

Затронутые продукты

SUSE Enterprise Storage 7.1:java-11-openjdk-11.0.29.0-150000.3.132.2

SUSE Enterprise Storage 7.1:java-11-openjdk-demo-11.0.29.0-150000.3.132.2

SUSE Enterprise Storage 7.1:java-11-openjdk-devel-11.0.29.0-150000.3.132.2

SUSE Enterprise Storage 7.1:java-11-openjdk-headless-11.0.29.0-150000.3.132.2

Ссылки

https://www.suse.com/security/cve/CVE-2025-53057.html
CVE-2025-53057
https://bugzilla.suse.com/1252414
SUSE Bug 1252414

Описание

unknown

Затронутые продукты

SUSE Enterprise Storage 7.1:java-11-openjdk-11.0.29.0-150000.3.132.2

SUSE Enterprise Storage 7.1:java-11-openjdk-demo-11.0.29.0-150000.3.132.2

SUSE Enterprise Storage 7.1:java-11-openjdk-devel-11.0.29.0-150000.3.132.2

SUSE Enterprise Storage 7.1:java-11-openjdk-headless-11.0.29.0-150000.3.132.2

Ссылки

https://www.suse.com/security/cve/CVE-2025-53066.html
CVE-2025-53066
https://bugzilla.suse.com/1252417
SUSE Bug 1252417

SUSE-SU-2025:3996-1

Описание

Список пакетов

SUSE Enterprise Storage 7.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

SUSE Linux Enterprise Module for Legacy 15 SP6

SUSE Linux Enterprise Module for Legacy 15 SP7

SUSE Linux Enterprise Module for Package Hub 15 SP6

SUSE Linux Enterprise Module for Package Hub 15 SP7

SUSE Linux Enterprise Server 15 SP3-LTSS

SUSE Linux Enterprise Server 15 SP4-LTSS

SUSE Linux Enterprise Server 15 SP5-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP3

SUSE Linux Enterprise Server for SAP Applications 15 SP4

SUSE Linux Enterprise Server for SAP Applications 15 SP5

SUSE Manager Proxy LTS 4.3

SUSE Manager Server LTS 4.3

openSUSE Leap 15.6

Ссылки

Уязвимость: CVE-2025-53057

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2025-53066

Описание

Затронутые продукты

Ссылки