SUSE-SU-2025:01490-1
Vulnerability from csaf_suse - Published: 2025-06-04 10:12 - Updated: 2025-06-04 10:12Summary
Security update for java-17-openjdk
Severity
Important
Notes
Title of the patch: Security update for java-17-openjdk
Description of the patch: This update for java-17-openjdk fixes the following issues:
Update to upstream tag jdk-17.0.15+6 (April 2025 CPU)
CVEs:
+ CVE-2025-21587: Fixed JSSE unauthorized access, deletion or modification of critical data (bsc#1241274)
+ CVE-2025-30691: Fixed Oracle Java SE Compiler Unauthorized Data Access (bsc#1241275)
+ CVE-2025-30698: Fixed Oracle Java 2D unauthorized data access and DoS (bsc#1241276)
Changes:
+ JDK-6355567: AdobeMarkerSegment causes failure to read
valid JPEG
+ JDK-8065099: [macos] javax/swing/PopupFactory/6276087/
/NonOpaquePopupMenuTest.java fails: no background shine
through
+ JDK-8179502: Enhance OCSP, CRL and Certificate Fetch
Timeouts
+ JDK-8198237: [macos] Test java/awt/Frame/
/ExceptionOnSetExtendedStateTest/
/ExceptionOnSetExtendedStateTest.java fails
+ JDK-8198666: Many java/awt/Modal/OnTop/ test fails on mac
+ JDK-8208565: [TEST_BUG] javax/swing/PopupFactory/6276087/
/NonOpaquePopupMenuTest.java throws NPE
+ JDK-8226933: [TEST_BUG]GTK L&F: There is no swatches or
RGB tab in JColorChooser
+ JDK-8226938: [TEST_BUG]GTK L&F: There is no Details
button in FileChooser Dialog
+ JDK-8266435: WBMPImageReader.read() should not truncate
the input stream
+ JDK-8267893: Improve jtreg test failure handler do get
native/mixed stack traces for cores and live processes
+ JDK-8270961: [TESTBUG] Move GotWrongOOMEException into
vm.share.gc package
+ JDK-8274893: Update java.desktop classes to use
try-with-resources
+ JDK-8276202: LogFileOutput.invalid_file_vm asserts when
being executed from a read only working directory
+ JDK-8277240: java/awt/Graphics2D/ScaledTransform/
/ScaledTransform.java dialog does not get disposed
+ JDK-8281234: The -protected option is not always checked
in keytool and jarsigner
+ JDK-8282314: nsk/jvmti/SuspendThread/suspendthrd003 may
leak memory
+ JDK-8283387: [macos] a11y : Screen magnifier does not
show selected Tab
+ JDK-8283404: [macos] a11y : Screen magnifier does not
show JMenu name
+ JDK-8283664: Remove jtreg tag manual=yesno for
java/awt/print/PrinterJob/PrintTextTest.java
+ JDK-8286779: javax.crypto.CryptoPolicyParser#isConsistent
always returns 'true'
+ JDK-8286875: ProgrammableUpcallHandler::on_entry/on_exit
access thread fields from native
+ JDK-8290400: Must run exe installers in jpackage jtreg
tests without UI
+ JDK-8292588: [macos] Multiscreen/MultiScreenLocationTest/
/MultiScreenLocationTest.java: Robot.mouseMove test failed on
Screen #0
+ JDK-8292704: sun/security/tools/jarsigner/compatibility/
/Compatibility.java use wrong key size for EC
+ JDK-8292848: AWT_Mixing and TrayIcon tests fail on el8
with hard-coded isOel7
+ JDK-8293345: SunPKCS11 provider checks on PKCS11
Mechanism are problematic
+ JDK-8293412: Remove unnecessary java.security.egd
overrides
+ JDK-8294067: [macOS] javax/swing/JComboBox/6559152/
/bug6559152.java Cannot select an item from popup with the
ENTER key.
+ JDK-8294316: SA core file support is broken on macosx-x64
starting with macOS 12.x
+ JDK-8295087: Manual Test to Automated Test Conversion
+ JDK-8295176: some langtools test pollutes source tree
+ JDK-8296591: Signature benchmark
+ JDK-8296818: Enhance JMH tests
java/security/Signatures.java
+ JDK-8299077: [REDO] JDK-4512626 Non-editable JTextArea
provides no visual indication of keyboard focus
+ JDK-8299127: [REDO] JDK-8194048 Regression automated test
'/open/test/jdk/javax/swing/text/DefaultCaret/HidingSelection/
/HidingSelectionTest.java' fails
+ JDK-8299128: [REDO] JDK-8213562 Test javax/swing/text/
/DefaultCaret/HidingSelection/MultiSelectionTest.java fails
+ JDK-8299739: HashedPasswordFileTest.java and ExceptionTest.java
can fail with java.lang.NullPointerException
+ JDK-8299994: java/security/Policy/Root/Root.java fails
when home directory is read-only
+ JDK-8301989: new
javax.swing.text.DefaultCaret().setBlinkRate(N) results in NPE
+ JDK-8302111: Serialization considerations
+ JDK-8305853: java/text/Format/DateFormat/
/DateFormatRegression.java fails with 'Uncaught exception
thrown in test method Test4089106'
+ JDK-8306711: Improve diagnosis of `IntlTest` framework
+ JDK-8308341: JNI_GetCreatedJavaVMs returns a partially
initialized JVM
+ JDK-8309171: Test vmTestbase/nsk/jvmti/scenarios/
/jni_interception/JI05/ji05t001/TestDescription.java fails
after JDK-8308341
+ JDK-8309231: ProblemList vmTestbase/nsk/jvmti/scenarios/
/jni_interception/JI05/ji05t001/TestDescription.java
+ JDK-8309740: Expand timeout windows for tests in
JDK-8179502
+ JDK-8309841: Jarsigner should print a warning if an entry
is removed
+ JDK-8310234: Refactor Locale tests to use JUnit
+ JDK-8310629: java/security/cert/CertPathValidator/OCSP/
/OCSPTimeout.java fails with RuntimeException: Server not ready
+ JDK-8311306: Test com/sun/management/ThreadMXBean/
/ThreadCpuTimeArray.java failed: out of expected range
+ JDK-8311546: Certificate name constraints improperly
validated with leading period
+ JDK-8311663: Additional refactoring of Locale tests to
JUnit
+ JDK-8312416: Tests in Locale should have more descriptive
names
+ JDK-8312518: [macos13] setFullScreenWindow() shows black
screen on macOS 13 & above
+ JDK-8313633: [macOS] java/awt/dnd/NextDropActionTest/
/NextDropActionTest.java fails with
java.lang.RuntimeException: wrong next drop action!
+ JDK-8313710: jcmd: typo in the documentation of JFR.start
and JFR.dump
+ JDK-8314225: SIGSEGV in JavaThread::is_lock_owned
+ JDK-8314610: hotspot can't compile with the latest of
gtest because of <iomanip>
+ JDK-8314752: Use google test string comparison macros
+ JDK-8314909: tools/jpackage/windows/Win8282351Test.java
fails with java.lang.AssertionError: Expected [0]. Actual
[1618]:
+ JDK-8314975: JavadocTester should set source path if not
specified
+ JDK-8315486: vmTestbase/nsk/jdwp/ThreadReference/
/ForceEarlyReturn/forceEarlyReturn002/forceEarlyReturn002.java
timed out
+ JDK-8315825: Open some swing tests
+ JDK-8315882: Open some swing tests 2
+ JDK-8315883: Open source several Swing JToolbar tests
+ JDK-8315952: Open source several Swing JToolbar JTooltip
JTree tests
+ JDK-8316056: Open source several Swing JTree tests
+ JDK-8316146: Open some swing tests 4
+ JDK-8316149: Open source several Swing JTree JViewport
KeyboardManager tests
+ JDK-8316218: Open some swing tests 5
+ JDK-8316371: Open some swing tests 6
+ JDK-8316559: Refactor some util/Calendar tests to JUnit
+ JDK-8316627: JViewport Test headless failure
+ JDK-8316696: Remove the testing base classes: IntlTest
and CollatorTest
+ JDK-8317631: Refactor ChoiceFormat tests to use JUnit
+ JDK-8317636: Improve heap walking API tests to verify
correctness of field indexes
+ JDK-8318442: java/net/httpclient/ManyRequests2.java fails
intermittently on Linux
+ JDK-8319567: Update java/lang/invoke tests to support vm
flags
+ JDK-8319568: Update java/lang/reflect/exeCallerAccessTest/
/CallerAccessTest.java to accept vm flags
+ JDK-8319569: Several java/util tests should be updated to
accept VM flags
+ JDK-8319647: Few java/lang/System/LoggerFinder/modules
tests ignore vm flags
+ JDK-8319648: java/lang/SecurityManager tests ignore vm
flags
+ JDK-8319672: Several classloader tests ignore VM flags
+ JDK-8319673: Few security tests ignore VM flags
+ JDK-8319676: A couple of jdk/modules/incubator/ tests
ignore VM flags
+ JDK-8319677: Test jdk/internal/misc/VM/RuntimeArguments.java
should be marked as flagless
+ JDK-8319818: Address GCC 13.2.0 warnings
(stringop-overflow and dangling-pointer)
+ JDK-8320372: test/jdk/sun/security/x509/DNSName/
/LeadingPeriod.java validity check failed
+ JDK-8320676: Manual printer tests have no Pass/Fail
buttons, instructions close set 1
+ JDK-8320691: Timeout handler on Windows takes 2 hours to
complete
+ JDK-8320714: java/util/Locale/LocaleProvidersRun.java and
java/util/ResourceBundle/modules/visibility/
/VisibilityTest.java timeout after passing
+ JDK-8320916: jdk/jfr/event/gc/stacktrace/
/TestParallelMarkSweepAllocationPendingStackTrace.java failed
with 'OutOfMemoryError: GC overhead limit exceeded'
+ JDK-8321818: vmTestbase/nsk/stress/strace/strace015.java
failed with 'Cannot read the array length because '<local4>'
is null'
+ JDK-8323196: jdk/jfr/api/consumer/filestream/TestOrdered.java
failed with 'Events are not ordered! Reuse = false'
+ JDK-8324672: Update jdk/java/time/tck/java/time/TCKInstant.java
now() to be more robust
+ JDK-8324807: Manual printer tests have no Pass/Fail
buttons, instructions close set 2
+ JDK-8325024: java/security/cert/CertPathValidator/OCSP(
/OCSPTimeout.java incorrect comment information
+ JDK-8325042: Remove unused JVMDITools test files
+ JDK-8325529: Remove unused imports from `ModuleGenerator`
test file
+ JDK-8325659: Normalize Random usage by incubator vector
tests
+ JDK-8325906: Problemlist vmTestbase/vm/mlvm/meth/stress/
/compiler/deoptimize/Test.java#id1 until JDK-8320865 is fixed
+ JDK-8325908: Finish removal of IntlTest and CollatorTest
+ JDK-8325937: runtime/handshake/HandshakeDirectTest.java
causes 'monitor end should be strictly below the frame pointer'
assertion failure on AArch64
+ JDK-8326421: Add jtreg test for large arrayCopy disjoint
case.
+ JDK-8326525: com/sun/tools/attach/BasicTests.java does
not verify AgentLoadException case
+ JDK-8327098: GTest needs larger combination limit
+ JDK-8327476: Upgrade JLine to 3.26.1
+ JDK-8327505: Test com/sun/jmx/remote/
/NotificationMarshalVersions/TestSerializationMismatch.java
fails
+ JDK-8327857: Remove applet usage from JColorChooser tests
Test4222508
+ JDK-8327859: Remove applet usage from JColorChooser tests
Test4319113
+ JDK-8327986: ASAN reports use-after-free in
DirectivesParserTest.empty_object_vm
+ JDK-8328005: Convert java/awt/im/JTextFieldTest.java
applet test to main
+ JDK-8328085: C2: Use after free in
PhaseChaitin::Register_Allocate()
+ JDK-8328121: Remove applet usage from JColorChooser tests
Test4759306
+ JDK-8328130: Remove applet usage from JColorChooser tests
Test4759934
+ JDK-8328185: Convert java/awt/image/MemoryLeakTest/
/MemoryLeakTest.java applet test to main
+ JDK-8328227: Remove applet usage from JColorChooser tests
Test4887836
+ JDK-8328368: Convert java/awt/image/multiresolution/
/MultiDisplayTest/MultiDisplayTest.java applet test to main
+ JDK-8328370: Convert java/awt/print/Dialog/PrintApplet.java
applet test to main
+ JDK-8328380: Remove applet usage from JColorChooser tests
Test6348456
+ JDK-8328387: Convert java/awt/Frame/FrameStateTest/
/FrameStateTest.html applet test to main
+ JDK-8328403: Remove applet usage from JColorChooser tests
Test6977726
+ JDK-8328553: Get rid of JApplet in
test/jdk/sanity/client/lib/SwingSet2/src/DemoModule.java
+ JDK-8328558: Convert javax/swing/JCheckBox/8032667/
/bug8032667.java applet test to main
+ JDK-8328717: Convert javax/swing/JColorChooser/8065098/
/bug8065098.java applet test to main
+ JDK-8328719: Convert java/awt/print/PageFormat/SetOrient.html
applet test to main
+ JDK-8328730: Convert java/awt/print/bug8023392/bug8023392.html
applet test to main
+ JDK-8328753: Open source few Undecorated Frame tests
+ JDK-8328819: Remove applet usage from JFileChooser tests
bug6698013
+ JDK-8328827: Convert java/awt/print/PrinterJob/
/PrinterDialogsModalityTest/PrinterDialogsModalityTest.html
applet test to main
+ JDK-8329210: Delete Redundant Printer Dialog Modality Test
+ JDK-8329320: Simplify awt/print/PageFormat/NullPaper.java
test
+ JDK-8329322: Convert PageFormat/Orient.java to use
PassFailJFrame
+ JDK-8329692: Add more details to FrameStateTest.java test
instructions
+ JDK-8330702: Update failure handler to don't generate
Error message if cores actions are empty
+ JDK-8331153: JFR: Improve logging of
jdk/jfr/api/consumer/filestream/TestOrdered.java
+ JDK-8331735: UpcallLinker::on_exit races with GC when
copying frame anchor
+ JDK-8331959: Update PKCS#11 Cryptographic Token Interface
to v3.1
+ JDK-8332158: [XWayland] test/jdk/java/awt/Mouse/
/EnterExitEvents/ResizingFrameTest.java
+ JDK-8332917: failure_handler should execute gdb 'info
threads' command on linux
+ JDK-8333360: PrintNullString.java doesn't use float
arguments
+ JDK-8333391: Test com/sun/jdi/InterruptHangTest.java
failed: Thread was never interrupted during sleep
+ JDK-8333403: Write a test to check various components
events are triggered properly
+ JDK-8333427: langtools/tools/javac/newlines/NewLineTest.java
is failing on Japanese Windows
+ JDK-8334305: Remove all code for nsk.share.Log verbose
mode
+ JDK-8334490: Normalize string with locale invariant
`toLowerCase()`
+ JDK-8334777: Test javax/management/remote/mandatory/notif/
/NotifReconnectDeadlockTest.java failed with
NullPointerException
+ JDK-8335150: Test LogGeneratedClassesTest.java fails on
rpmbuild mock enviroment
+ JDK-8335172: Add manual steps to run security/auth/callback/
/TextCallbackHandler/Password.java test
+ JDK-8335789: [TESTBUG] XparColor.java test fails with
Error. Parse Exception: Invalid or unrecognized bugid: @
+ JDK-8336012: Fix usages of jtreg-reserved properties
+ JDK-8336498: [macos] [build]: install-file macro may run
into permission denied error
+ JDK-8336692: Redo fix for JDK-8284620
+ JDK-8336942: Improve test coverage for class loading
elements with annotations of different retentions
+ JDK-8337222: gc/TestDisableExplicitGC.java fails due to
unexpected CodeCache GC
+ JDK-8337494: Clarify JarInputStream behavior
+ JDK-8337692: Better TLS connection support
+ JDK-8337826: Improve logging in OCSPTimeout and
SimpleOCSPResponder to help diagnose JDK-8309754
+ JDK-8337886: java/awt/Frame/MaximizeUndecoratedTest.java
fails in OEL due to a slight color difference
+ JDK-8337951: Test sun/security/validator/samedn.sh
CertificateNotYetValidException: NotBefore validation
+ JDK-8338100: C2: assert(!n_loop->is_member(get_loop(lca)))
failed: control must not be back in the loop
+ JDK-8338426: Test java/nio/channels/Selector/WakeupNow.java
failed
+ JDK-8338430: Improve compiler transformations
+ JDK-8338571: [TestBug] DefaultCloseOperation.java test
not working as expected wrt instruction after JDK-8325851 fix
+ JDK-8338595: Add more linesize for MIME decoder in macro
bench test Base64Decode
+ JDK-8338668: Test javax/swing/JFileChooser/8080628/
/bug8080628.java doesn't test for GTK L&F
+ JDK-8339154: Cleanups and JUnit conversion of
test/jdk/java/util/zip/Available.java
+ JDK-8339261: Logs truncated in test
javax/net/ssl/DTLS/DTLSRehandshakeTest.java
+ JDK-8339356: Test javax/net/ssl/SSLSocket/Tls13PacketSize.java
failed with java.net.SocketException: An established
connection was aborted by the software in your host machine
+ JDK-8339524: Clean up a few ExtendedRobot tests
+ JDK-8339687: Rearrange reachabilityFence()s in
jdk.test.lib.util.ForceGC
+ JDK-8339728: [Accessibility,Windows,JAWS] Bug in the
getKeyChar method of the AccessBridge class
+ JDK-8339810: Clean up the code in sun.tools.jar.Main to
properly close resources and use ZipFile during extract
+ JDK-8339883: Open source several AWT/2D related tests
+ JDK-8339902: Open source couple TextField related tests
+ JDK-8339943: Frame not disposed in
java/awt/dnd/DropActionChangeTest.java
+ JDK-8340078: Open source several 2D tests
+ JDK-8340116: test/jdk/sun/security/tools/jarsigner/
/PreserveRawManifestEntryAndDigest.java can fail due to regex
+ JDK-8340411: open source several 2D imaging tests
+ JDK-8340480: Bad copyright notices in changes from
JDK-8339902
+ JDK-8340687: Open source closed frame tests #1
+ JDK-8340719: Open source AWT List tests
+ JDK-8340969: jdk/jfr/startupargs/TestStartDuration.java
should be marked as flagless
+ JDK-8341037: Use standard layouts in
DefaultFrameIconTest.java and MenuCrash.java
+ JDK-8341111: open source several AWT tests including menu
shortcut tests
+ JDK-8341316: [macos] javax/swing/ProgressMonitor/
/ProgressMonitorEscapeKeyPress.java fails sometimes in macos
+ JDK-8341412: Various test failures after JDK-8334305
+ JDK-8341424: GHA: Collect hs_errs from build time failures
+ JDK-8341453: java/awt/a11y/AccessibleJTableTest.java
fails in some cases where the test tables are not visible
+ JDK-8341722: Fix some warnings as errors when building on
Linux with toolchain clang
+ JDK-8341881: [REDO] java/nio/file/attribute/
/BasicFileAttributeView/CreationTime.java#tmp fails on alinux3
+ JDK-8341978: Improve JButton/bug4490179.java
+ JDK-8341982: Simplify JButton/bug4323121.java
+ JDK-8342098: Write a test to compare the images
+ JDK-8342145: File libCreationTimeHelper.c compile fails
on Alpine
+ JDK-8342270: Test sun/security/pkcs11/Provider/
/RequiredMechCheck.java needs write access to src tree
+ JDK-8342498: Add test for Allocation elimination after
use as alignment reference by SuperWord
+ JDK-8342508: Use latch in BasicMenuUI/bug4983388.java
instead of delay
+ JDK-8342541: Exclude List/KeyEventsTest/KeyEventsTest.java
from running on macOS
+ JDK-8342562: Enhance Deflater operations
+ JDK-8342602: Remove JButton/PressedButtonRightClickTest
test
+ JDK-8342607: Enhance register printing on x86_64 platforms
+ JDK-8342609: jpackage test helper function incorrectly
removes a directory instead of its contents only
+ JDK-8342634: javax/imageio/plugins/wbmp/
/WBMPStreamTruncateTest.java creates temp file in src dir
+ JDK-8342635: javax/swing/JFileChooser/FileSystemView/
/WindowsDefaultIconSizeTest.java creates tmp file in src dir
+ JDK-8342704: GHA: Report truncation is broken after
JDK-8341424
+ JDK-8342811: java/net/httpclient/PlainProxyConnectionTest.java
failed: Unexpected connection count: 5
+ JDK-8342858: Make target mac-jdk-bundle fails on chmod
command
+ JDK-8342988: GHA: Build JTReg in single step
+ JDK-8343007: Enhance Buffered Image handling
+ JDK-8343100: Consolidate EmptyFolderTest and
EmptyFolderPackageTest jpackage tests into single java file
+ JDK-8343101: Rework BasicTest.testTemp test cases
+ JDK-8343118: [TESTBUG] java/awt/PrintJob/PrintCheckboxTest/
/PrintCheckboxManualTest.java fails with Error. Can't find
HTML file PrintCheckboxManualTest.html
+ JDK-8343128: PassFailJFrame.java test result: Error. Bad
action for script: build}
+ JDK-8343129: Disable unstable check of
ThreadsListHandle.sanity_vm ThreadList values
+ JDK-8343178: Test BasicTest.java javac compile fails
cannot find symbol
+ JDK-8343378: Exceptions in javax/management
DeadLockTest.java do not cause test failure
+ JDK-8343491: javax/management/remote/mandatory/connection/
/DeadLockTest.java failing with NoSuchObjectException: no such
object in table
+ JDK-8343599: Kmem limit and max values swapped when
printing container information
+ JDK-8343724: [PPC64] Disallow OptoScheduling
+ JDK-8343882: BasicAnnoTests doesn't handle multiple
annotations at the same position
+ JDK-8344581: [TESTBUG] java/awt/Robot/
/ScreenCaptureRobotTest.java failing on macOS
+ JDK-8344589: Update IANA Language Subtag Registry to
Version 2024-11-19
+ JDK-8344646: The libjsig deprecation warning should go to
stderr not stdout
+ JDK-8345296: AArch64: VM crashes with SIGILL when prctl
is disallowed
+ JDK-8345368: java/io/File/createTempFile/SpecialTempFile.java
fails on Windows Server 2025
+ JDK-8345371: Bump update version for OpenJDK: jdk-17.0.15
+ JDK-8345375: Improve debuggability of
test/jdk/java/net/Socket/CloseAvailable.java
+ JDK-8345414: Google CAInterop test failures
+ JDK-8345468: test/jdk/javax/swing/JScrollBar/4865918/
/bug4865918.java fails in ubuntu22.04
+ JDK-8346055: javax/swing/text/StyledEditorKit/4506788/
/bug4506788.java fails in ubuntu22.04
+ JDK-8346324: javax/swing/JScrollBar/4865918/bug4865918.java
fails in CI
+ JDK-8346587: Distrust TLS server certificates anchored by
Camerfirma Root CAs
+ JDK-8346671: java/nio/file/Files/probeContentType/Basic.java
fails on Windows 2025
+ JDK-8346828: javax/swing/JScrollBar/4865918/bug4865918.java
still fails in CI
+ JDK-8346887: DrawFocusRect() may cause an assertion failure
+ JDK-8346908: Update JDK 17 javadoc man page
+ JDK-8346972: Test java/nio/channels/FileChannel/
/LoopingTruncate.java fails sometimes with IOException: There
is not enough space on the disk
+ JDK-8347424: Fix and rewrite
sun/security/x509/DNSName/LeadingPeriod.java test
+ JDK-8347427: JTabbedPane/8134116/Bug8134116.java has no
license header
+ JDK-8347740: java/io/File/createTempFile/SpecialTempFile.java
failing
+ JDK-8347847: Enhance jar file support
+ JDK-8347965: (tz) Update Timezone Data to 2025a
+ JDK-8348625: [21u, 17u] Revert JDK-8185862 to restore old
java.awt.headless behavior on Windows
+ JDK-8348675: TrayIcon tests fail in Ubuntu 24.10 Wayland
+ JDK-8349603: [21u, 17u, 11u] Update GHA JDKs after Jan/25
updates
+ JDK-8352097: (tz) zone.tab update missed in 2025a backport
+ JDK-8353905: [17u] Remove designator
DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.15
Patchnames: SUSE-2025-1490,SUSE-SLE-Module-Legacy-15-SP7-2025-1490
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.4 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
4.8 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2025-21587
Threats
Impact
moderate
5.6 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2025-21587
Threats
Impact
important
References
17 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-17-openjdk",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-17-openjdk fixes the following issues:\n\nUpdate to upstream tag jdk-17.0.15+6 (April 2025 CPU)\n\nCVEs:\n\n+ CVE-2025-21587: Fixed JSSE unauthorized access, deletion or modification of critical data (bsc#1241274)\n+ CVE-2025-30691: Fixed Oracle Java SE Compiler Unauthorized Data Access (bsc#1241275)\n+ CVE-2025-30698: Fixed Oracle Java 2D unauthorized data access and DoS (bsc#1241276)\n\nChanges:\n\n + JDK-6355567: AdobeMarkerSegment causes failure to read\n valid JPEG\n + JDK-8065099: [macos] javax/swing/PopupFactory/6276087/\n /NonOpaquePopupMenuTest.java fails: no background shine\n through\n + JDK-8179502: Enhance OCSP, CRL and Certificate Fetch\n Timeouts\n + JDK-8198237: [macos] Test java/awt/Frame/\n /ExceptionOnSetExtendedStateTest/\n /ExceptionOnSetExtendedStateTest.java fails\n + JDK-8198666: Many java/awt/Modal/OnTop/ test fails on mac\n + JDK-8208565: [TEST_BUG] javax/swing/PopupFactory/6276087/\n /NonOpaquePopupMenuTest.java throws NPE\n + JDK-8226933: [TEST_BUG]GTK L\u0026F: There is no swatches or\n RGB tab in JColorChooser\n + JDK-8226938: [TEST_BUG]GTK L\u0026F: There is no Details\n button in FileChooser Dialog\n + JDK-8266435: WBMPImageReader.read() should not truncate\n the input stream\n + JDK-8267893: Improve jtreg test failure handler do get\n native/mixed stack traces for cores and live processes\n + JDK-8270961: [TESTBUG] Move GotWrongOOMEException into\n vm.share.gc package\n + JDK-8274893: Update java.desktop classes to use\n try-with-resources\n + JDK-8276202: LogFileOutput.invalid_file_vm asserts when\n being executed from a read only working directory\n + JDK-8277240: java/awt/Graphics2D/ScaledTransform/\n /ScaledTransform.java dialog does not get disposed\n + JDK-8281234: The -protected option is not always checked\n in keytool and jarsigner\n + JDK-8282314: nsk/jvmti/SuspendThread/suspendthrd003 may\n leak memory\n + JDK-8283387: [macos] a11y : Screen magnifier does not\n show selected Tab\n + JDK-8283404: [macos] a11y : Screen magnifier does not\n show JMenu name\n + JDK-8283664: Remove jtreg tag manual=yesno for\n java/awt/print/PrinterJob/PrintTextTest.java\n + JDK-8286779: javax.crypto.CryptoPolicyParser#isConsistent\n always returns \u0027true\u0027\n + JDK-8286875: ProgrammableUpcallHandler::on_entry/on_exit\n access thread fields from native\n + JDK-8290400: Must run exe installers in jpackage jtreg\n tests without UI\n + JDK-8292588: [macos] Multiscreen/MultiScreenLocationTest/\n /MultiScreenLocationTest.java: Robot.mouseMove test failed on\n Screen #0\n + JDK-8292704: sun/security/tools/jarsigner/compatibility/\n /Compatibility.java use wrong key size for EC\n + JDK-8292848: AWT_Mixing and TrayIcon tests fail on el8\n with hard-coded isOel7\n + JDK-8293345: SunPKCS11 provider checks on PKCS11\n Mechanism are problematic\n + JDK-8293412: Remove unnecessary java.security.egd\n overrides\n + JDK-8294067: [macOS] javax/swing/JComboBox/6559152/\n /bug6559152.java Cannot select an item from popup with the\n ENTER key.\n + JDK-8294316: SA core file support is broken on macosx-x64\n starting with macOS 12.x\n + JDK-8295087: Manual Test to Automated Test Conversion\n + JDK-8295176: some langtools test pollutes source tree\n + JDK-8296591: Signature benchmark\n + JDK-8296818: Enhance JMH tests\n java/security/Signatures.java\n + JDK-8299077: [REDO] JDK-4512626 Non-editable JTextArea\n provides no visual indication of keyboard focus\n + JDK-8299127: [REDO] JDK-8194048 Regression automated test\n \u0027/open/test/jdk/javax/swing/text/DefaultCaret/HidingSelection/\n /HidingSelectionTest.java\u0027 fails\n + JDK-8299128: [REDO] JDK-8213562 Test javax/swing/text/\n /DefaultCaret/HidingSelection/MultiSelectionTest.java fails\n + JDK-8299739: HashedPasswordFileTest.java and ExceptionTest.java\n can fail with java.lang.NullPointerException\n + JDK-8299994: java/security/Policy/Root/Root.java fails\n when home directory is read-only\n + JDK-8301989: new\n javax.swing.text.DefaultCaret().setBlinkRate(N) results in NPE\n + JDK-8302111: Serialization considerations\n + JDK-8305853: java/text/Format/DateFormat/\n /DateFormatRegression.java fails with \u0027Uncaught exception\n thrown in test method Test4089106\u0027\n + JDK-8306711: Improve diagnosis of `IntlTest` framework\n + JDK-8308341: JNI_GetCreatedJavaVMs returns a partially\n initialized JVM\n + JDK-8309171: Test vmTestbase/nsk/jvmti/scenarios/\n /jni_interception/JI05/ji05t001/TestDescription.java fails\n after JDK-8308341\n + JDK-8309231: ProblemList vmTestbase/nsk/jvmti/scenarios/\n /jni_interception/JI05/ji05t001/TestDescription.java\n + JDK-8309740: Expand timeout windows for tests in\n JDK-8179502\n + JDK-8309841: Jarsigner should print a warning if an entry\n is removed\n + JDK-8310234: Refactor Locale tests to use JUnit\n + JDK-8310629: java/security/cert/CertPathValidator/OCSP/\n /OCSPTimeout.java fails with RuntimeException: Server not ready\n + JDK-8311306: Test com/sun/management/ThreadMXBean/\n /ThreadCpuTimeArray.java failed: out of expected range\n + JDK-8311546: Certificate name constraints improperly\n validated with leading period\n + JDK-8311663: Additional refactoring of Locale tests to\n JUnit\n + JDK-8312416: Tests in Locale should have more descriptive\n names\n + JDK-8312518: [macos13] setFullScreenWindow() shows black\n screen on macOS 13 \u0026 above\n + JDK-8313633: [macOS] java/awt/dnd/NextDropActionTest/\n /NextDropActionTest.java fails with\n java.lang.RuntimeException: wrong next drop action!\n + JDK-8313710: jcmd: typo in the documentation of JFR.start\n and JFR.dump\n + JDK-8314225: SIGSEGV in JavaThread::is_lock_owned\n + JDK-8314610: hotspot can\u0027t compile with the latest of\n gtest because of \u003ciomanip\u003e\n + JDK-8314752: Use google test string comparison macros\n + JDK-8314909: tools/jpackage/windows/Win8282351Test.java\n fails with java.lang.AssertionError: Expected [0]. Actual\n [1618]:\n + JDK-8314975: JavadocTester should set source path if not\n specified\n + JDK-8315486: vmTestbase/nsk/jdwp/ThreadReference/\n /ForceEarlyReturn/forceEarlyReturn002/forceEarlyReturn002.java\n timed out\n + JDK-8315825: Open some swing tests\n + JDK-8315882: Open some swing tests 2\n + JDK-8315883: Open source several Swing JToolbar tests\n + JDK-8315952: Open source several Swing JToolbar JTooltip\n JTree tests\n + JDK-8316056: Open source several Swing JTree tests\n + JDK-8316146: Open some swing tests 4\n + JDK-8316149: Open source several Swing JTree JViewport\n KeyboardManager tests\n + JDK-8316218: Open some swing tests 5\n + JDK-8316371: Open some swing tests 6\n + JDK-8316559: Refactor some util/Calendar tests to JUnit\n + JDK-8316627: JViewport Test headless failure\n + JDK-8316696: Remove the testing base classes: IntlTest\n and CollatorTest\n + JDK-8317631: Refactor ChoiceFormat tests to use JUnit\n + JDK-8317636: Improve heap walking API tests to verify\n correctness of field indexes\n + JDK-8318442: java/net/httpclient/ManyRequests2.java fails\n intermittently on Linux\n + JDK-8319567: Update java/lang/invoke tests to support vm\n flags\n + JDK-8319568: Update java/lang/reflect/exeCallerAccessTest/\n /CallerAccessTest.java to accept vm flags\n + JDK-8319569: Several java/util tests should be updated to\n accept VM flags\n + JDK-8319647: Few java/lang/System/LoggerFinder/modules\n tests ignore vm flags\n + JDK-8319648: java/lang/SecurityManager tests ignore vm\n flags\n + JDK-8319672: Several classloader tests ignore VM flags\n + JDK-8319673: Few security tests ignore VM flags\n + JDK-8319676: A couple of jdk/modules/incubator/ tests\n ignore VM flags\n + JDK-8319677: Test jdk/internal/misc/VM/RuntimeArguments.java\n should be marked as flagless\n + JDK-8319818: Address GCC 13.2.0 warnings\n (stringop-overflow and dangling-pointer)\n + JDK-8320372: test/jdk/sun/security/x509/DNSName/\n /LeadingPeriod.java validity check failed\n + JDK-8320676: Manual printer tests have no Pass/Fail\n buttons, instructions close set 1\n + JDK-8320691: Timeout handler on Windows takes 2 hours to\n complete\n + JDK-8320714: java/util/Locale/LocaleProvidersRun.java and\n java/util/ResourceBundle/modules/visibility/\n /VisibilityTest.java timeout after passing\n + JDK-8320916: jdk/jfr/event/gc/stacktrace/\n /TestParallelMarkSweepAllocationPendingStackTrace.java failed\n with \u0027OutOfMemoryError: GC overhead limit exceeded\u0027\n + JDK-8321818: vmTestbase/nsk/stress/strace/strace015.java\n failed with \u0027Cannot read the array length because \u0027\u003clocal4\u003e\u0027\n is null\u0027\n + JDK-8323196: jdk/jfr/api/consumer/filestream/TestOrdered.java\n failed with \u0027Events are not ordered! Reuse = false\u0027\n + JDK-8324672: Update jdk/java/time/tck/java/time/TCKInstant.java\n now() to be more robust\n + JDK-8324807: Manual printer tests have no Pass/Fail\n buttons, instructions close set 2\n + JDK-8325024: java/security/cert/CertPathValidator/OCSP(\n /OCSPTimeout.java incorrect comment information\n + JDK-8325042: Remove unused JVMDITools test files\n + JDK-8325529: Remove unused imports from `ModuleGenerator`\n test file\n + JDK-8325659: Normalize Random usage by incubator vector\n tests\n + JDK-8325906: Problemlist vmTestbase/vm/mlvm/meth/stress/\n /compiler/deoptimize/Test.java#id1 until JDK-8320865 is fixed\n + JDK-8325908: Finish removal of IntlTest and CollatorTest\n + JDK-8325937: runtime/handshake/HandshakeDirectTest.java\n causes \u0027monitor end should be strictly below the frame pointer\u0027\n assertion failure on AArch64\n + JDK-8326421: Add jtreg test for large arrayCopy disjoint\n case.\n + JDK-8326525: com/sun/tools/attach/BasicTests.java does\n not verify AgentLoadException case\n + JDK-8327098: GTest needs larger combination limit\n + JDK-8327476: Upgrade JLine to 3.26.1\n + JDK-8327505: Test com/sun/jmx/remote/\n /NotificationMarshalVersions/TestSerializationMismatch.java\n fails\n + JDK-8327857: Remove applet usage from JColorChooser tests\n Test4222508\n + JDK-8327859: Remove applet usage from JColorChooser tests\n Test4319113\n + JDK-8327986: ASAN reports use-after-free in\n DirectivesParserTest.empty_object_vm\n + JDK-8328005: Convert java/awt/im/JTextFieldTest.java\n applet test to main\n + JDK-8328085: C2: Use after free in\n PhaseChaitin::Register_Allocate()\n + JDK-8328121: Remove applet usage from JColorChooser tests\n Test4759306\n + JDK-8328130: Remove applet usage from JColorChooser tests\n Test4759934\n + JDK-8328185: Convert java/awt/image/MemoryLeakTest/\n /MemoryLeakTest.java applet test to main\n + JDK-8328227: Remove applet usage from JColorChooser tests\n Test4887836\n + JDK-8328368: Convert java/awt/image/multiresolution/\n /MultiDisplayTest/MultiDisplayTest.java applet test to main\n + JDK-8328370: Convert java/awt/print/Dialog/PrintApplet.java\n applet test to main\n + JDK-8328380: Remove applet usage from JColorChooser tests\n Test6348456\n + JDK-8328387: Convert java/awt/Frame/FrameStateTest/\n /FrameStateTest.html applet test to main\n + JDK-8328403: Remove applet usage from JColorChooser tests\n Test6977726\n + JDK-8328553: Get rid of JApplet in\n test/jdk/sanity/client/lib/SwingSet2/src/DemoModule.java\n + JDK-8328558: Convert javax/swing/JCheckBox/8032667/\n /bug8032667.java applet test to main\n + JDK-8328717: Convert javax/swing/JColorChooser/8065098/\n /bug8065098.java applet test to main\n + JDK-8328719: Convert java/awt/print/PageFormat/SetOrient.html\n applet test to main\n + JDK-8328730: Convert java/awt/print/bug8023392/bug8023392.html\n applet test to main\n + JDK-8328753: Open source few Undecorated Frame tests\n + JDK-8328819: Remove applet usage from JFileChooser tests\n bug6698013\n + JDK-8328827: Convert java/awt/print/PrinterJob/\n /PrinterDialogsModalityTest/PrinterDialogsModalityTest.html\n applet test to main\n + JDK-8329210: Delete Redundant Printer Dialog Modality Test\n + JDK-8329320: Simplify awt/print/PageFormat/NullPaper.java\n test\n + JDK-8329322: Convert PageFormat/Orient.java to use\n PassFailJFrame\n + JDK-8329692: Add more details to FrameStateTest.java test\n instructions\n + JDK-8330702: Update failure handler to don\u0027t generate\n Error message if cores actions are empty\n + JDK-8331153: JFR: Improve logging of\n jdk/jfr/api/consumer/filestream/TestOrdered.java\n + JDK-8331735: UpcallLinker::on_exit races with GC when\n copying frame anchor\n + JDK-8331959: Update PKCS#11 Cryptographic Token Interface\n to v3.1\n + JDK-8332158: [XWayland] test/jdk/java/awt/Mouse/\n /EnterExitEvents/ResizingFrameTest.java\n + JDK-8332917: failure_handler should execute gdb \u0027info\n threads\u0027 command on linux\n + JDK-8333360: PrintNullString.java doesn\u0027t use float\n arguments\n + JDK-8333391: Test com/sun/jdi/InterruptHangTest.java\n failed: Thread was never interrupted during sleep\n + JDK-8333403: Write a test to check various components\n events are triggered properly\n + JDK-8333427: langtools/tools/javac/newlines/NewLineTest.java\n is failing on Japanese Windows\n + JDK-8334305: Remove all code for nsk.share.Log verbose\n mode\n + JDK-8334490: Normalize string with locale invariant\n `toLowerCase()`\n + JDK-8334777: Test javax/management/remote/mandatory/notif/\n /NotifReconnectDeadlockTest.java failed with\n NullPointerException\n + JDK-8335150: Test LogGeneratedClassesTest.java fails on\n rpmbuild mock enviroment\n + JDK-8335172: Add manual steps to run security/auth/callback/\n /TextCallbackHandler/Password.java test\n + JDK-8335789: [TESTBUG] XparColor.java test fails with\n Error. Parse Exception: Invalid or unrecognized bugid: @\n + JDK-8336012: Fix usages of jtreg-reserved properties\n + JDK-8336498: [macos] [build]: install-file macro may run\n into permission denied error\n + JDK-8336692: Redo fix for JDK-8284620\n + JDK-8336942: Improve test coverage for class loading\n elements with annotations of different retentions\n + JDK-8337222: gc/TestDisableExplicitGC.java fails due to\n unexpected CodeCache GC\n + JDK-8337494: Clarify JarInputStream behavior\n + JDK-8337692: Better TLS connection support\n + JDK-8337826: Improve logging in OCSPTimeout and\n SimpleOCSPResponder to help diagnose JDK-8309754\n + JDK-8337886: java/awt/Frame/MaximizeUndecoratedTest.java\n fails in OEL due to a slight color difference\n + JDK-8337951: Test sun/security/validator/samedn.sh\n CertificateNotYetValidException: NotBefore validation\n + JDK-8338100: C2: assert(!n_loop-\u003eis_member(get_loop(lca)))\n failed: control must not be back in the loop\n + JDK-8338426: Test java/nio/channels/Selector/WakeupNow.java\n failed\n + JDK-8338430: Improve compiler transformations\n + JDK-8338571: [TestBug] DefaultCloseOperation.java test\n not working as expected wrt instruction after JDK-8325851 fix\n + JDK-8338595: Add more linesize for MIME decoder in macro\n bench test Base64Decode\n + JDK-8338668: Test javax/swing/JFileChooser/8080628/\n /bug8080628.java doesn\u0027t test for GTK L\u0026F\n + JDK-8339154: Cleanups and JUnit conversion of\n test/jdk/java/util/zip/Available.java\n + JDK-8339261: Logs truncated in test\n javax/net/ssl/DTLS/DTLSRehandshakeTest.java\n + JDK-8339356: Test javax/net/ssl/SSLSocket/Tls13PacketSize.java\n failed with java.net.SocketException: An established\n connection was aborted by the software in your host machine\n + JDK-8339524: Clean up a few ExtendedRobot tests\n + JDK-8339687: Rearrange reachabilityFence()s in\n jdk.test.lib.util.ForceGC\n + JDK-8339728: [Accessibility,Windows,JAWS] Bug in the\n getKeyChar method of the AccessBridge class\n + JDK-8339810: Clean up the code in sun.tools.jar.Main to\n properly close resources and use ZipFile during extract\n + JDK-8339883: Open source several AWT/2D related tests\n + JDK-8339902: Open source couple TextField related tests\n + JDK-8339943: Frame not disposed in\n java/awt/dnd/DropActionChangeTest.java\n + JDK-8340078: Open source several 2D tests\n + JDK-8340116: test/jdk/sun/security/tools/jarsigner/\n /PreserveRawManifestEntryAndDigest.java can fail due to regex\n + JDK-8340411: open source several 2D imaging tests\n + JDK-8340480: Bad copyright notices in changes from\n JDK-8339902\n + JDK-8340687: Open source closed frame tests #1\n + JDK-8340719: Open source AWT List tests\n + JDK-8340969: jdk/jfr/startupargs/TestStartDuration.java\n should be marked as flagless\n + JDK-8341037: Use standard layouts in\n DefaultFrameIconTest.java and MenuCrash.java\n + JDK-8341111: open source several AWT tests including menu\n shortcut tests\n + JDK-8341316: [macos] javax/swing/ProgressMonitor/\n /ProgressMonitorEscapeKeyPress.java fails sometimes in macos\n + JDK-8341412: Various test failures after JDK-8334305\n + JDK-8341424: GHA: Collect hs_errs from build time failures\n + JDK-8341453: java/awt/a11y/AccessibleJTableTest.java\n fails in some cases where the test tables are not visible\n + JDK-8341722: Fix some warnings as errors when building on\n Linux with toolchain clang\n + JDK-8341881: [REDO] java/nio/file/attribute/\n /BasicFileAttributeView/CreationTime.java#tmp fails on alinux3\n + JDK-8341978: Improve JButton/bug4490179.java\n + JDK-8341982: Simplify JButton/bug4323121.java\n + JDK-8342098: Write a test to compare the images\n + JDK-8342145: File libCreationTimeHelper.c compile fails\n on Alpine\n + JDK-8342270: Test sun/security/pkcs11/Provider/\n /RequiredMechCheck.java needs write access to src tree\n + JDK-8342498: Add test for Allocation elimination after\n use as alignment reference by SuperWord\n + JDK-8342508: Use latch in BasicMenuUI/bug4983388.java\n instead of delay\n + JDK-8342541: Exclude List/KeyEventsTest/KeyEventsTest.java\n from running on macOS\n + JDK-8342562: Enhance Deflater operations\n + JDK-8342602: Remove JButton/PressedButtonRightClickTest\n test\n + JDK-8342607: Enhance register printing on x86_64 platforms\n + JDK-8342609: jpackage test helper function incorrectly\n removes a directory instead of its contents only\n + JDK-8342634: javax/imageio/plugins/wbmp/\n /WBMPStreamTruncateTest.java creates temp file in src dir\n + JDK-8342635: javax/swing/JFileChooser/FileSystemView/\n /WindowsDefaultIconSizeTest.java creates tmp file in src dir\n + JDK-8342704: GHA: Report truncation is broken after\n JDK-8341424\n + JDK-8342811: java/net/httpclient/PlainProxyConnectionTest.java\n failed: Unexpected connection count: 5\n + JDK-8342858: Make target mac-jdk-bundle fails on chmod\n command\n + JDK-8342988: GHA: Build JTReg in single step\n + JDK-8343007: Enhance Buffered Image handling\n + JDK-8343100: Consolidate EmptyFolderTest and\n EmptyFolderPackageTest jpackage tests into single java file\n + JDK-8343101: Rework BasicTest.testTemp test cases\n + JDK-8343118: [TESTBUG] java/awt/PrintJob/PrintCheckboxTest/\n /PrintCheckboxManualTest.java fails with Error. Can\u0027t find\n HTML file PrintCheckboxManualTest.html\n + JDK-8343128: PassFailJFrame.java test result: Error. Bad\n action for script: build}\n + JDK-8343129: Disable unstable check of\n ThreadsListHandle.sanity_vm ThreadList values\n + JDK-8343178: Test BasicTest.java javac compile fails\n cannot find symbol\n + JDK-8343378: Exceptions in javax/management\n DeadLockTest.java do not cause test failure\n + JDK-8343491: javax/management/remote/mandatory/connection/\n /DeadLockTest.java failing with NoSuchObjectException: no such\n object in table\n + JDK-8343599: Kmem limit and max values swapped when\n printing container information\n + JDK-8343724: [PPC64] Disallow OptoScheduling\n + JDK-8343882: BasicAnnoTests doesn\u0027t handle multiple\n annotations at the same position\n + JDK-8344581: [TESTBUG] java/awt/Robot/\n /ScreenCaptureRobotTest.java failing on macOS\n + JDK-8344589: Update IANA Language Subtag Registry to\n Version 2024-11-19\n + JDK-8344646: The libjsig deprecation warning should go to\n stderr not stdout\n + JDK-8345296: AArch64: VM crashes with SIGILL when prctl\n is disallowed\n + JDK-8345368: java/io/File/createTempFile/SpecialTempFile.java\n fails on Windows Server 2025\n + JDK-8345371: Bump update version for OpenJDK: jdk-17.0.15\n + JDK-8345375: Improve debuggability of\n test/jdk/java/net/Socket/CloseAvailable.java\n + JDK-8345414: Google CAInterop test failures\n + JDK-8345468: test/jdk/javax/swing/JScrollBar/4865918/\n /bug4865918.java fails in ubuntu22.04\n + JDK-8346055: javax/swing/text/StyledEditorKit/4506788/\n /bug4506788.java fails in ubuntu22.04\n + JDK-8346324: javax/swing/JScrollBar/4865918/bug4865918.java\n fails in CI\n + JDK-8346587: Distrust TLS server certificates anchored by\n Camerfirma Root CAs\n + JDK-8346671: java/nio/file/Files/probeContentType/Basic.java\n fails on Windows 2025\n + JDK-8346828: javax/swing/JScrollBar/4865918/bug4865918.java\n still fails in CI\n + JDK-8346887: DrawFocusRect() may cause an assertion failure\n + JDK-8346908: Update JDK 17 javadoc man page\n + JDK-8346972: Test java/nio/channels/FileChannel/\n /LoopingTruncate.java fails sometimes with IOException: There\n is not enough space on the disk\n + JDK-8347424: Fix and rewrite\n sun/security/x509/DNSName/LeadingPeriod.java test\n + JDK-8347427: JTabbedPane/8134116/Bug8134116.java has no\n license header\n + JDK-8347740: java/io/File/createTempFile/SpecialTempFile.java\n failing\n + JDK-8347847: Enhance jar file support\n + JDK-8347965: (tz) Update Timezone Data to 2025a\n + JDK-8348625: [21u, 17u] Revert JDK-8185862 to restore old\n java.awt.headless behavior on Windows\n + JDK-8348675: TrayIcon tests fail in Ubuntu 24.10 Wayland\n + JDK-8349603: [21u, 17u, 11u] Update GHA JDKs after Jan/25\n updates\n + JDK-8352097: (tz) zone.tab update missed in 2025a backport\n + JDK-8353905: [17u] Remove designator\n DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.15\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2025-1490,SUSE-SLE-Module-Legacy-15-SP7-2025-1490",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_01490-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2025:01490-1",
"url": "https://www.suse.com/support/update/announcement/2025/suse-su-202501490-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2025:01490-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2025-June/040133.html"
},
{
"category": "self",
"summary": "SUSE Bug 1241274",
"url": "https://bugzilla.suse.com/1241274"
},
{
"category": "self",
"summary": "SUSE Bug 1241275",
"url": "https://bugzilla.suse.com/1241275"
},
{
"category": "self",
"summary": "SUSE Bug 1241276",
"url": "https://bugzilla.suse.com/1241276"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21587 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21587/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-30691 page",
"url": "https://www.suse.com/security/cve/CVE-2025-30691/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-30698 page",
"url": "https://www.suse.com/security/cve/CVE-2025-30698/"
}
],
"title": "Security update for java-17-openjdk",
"tracking": {
"current_release_date": "2025-06-04T10:12:31Z",
"generator": {
"date": "2025-06-04T10:12:31Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2025:01490-1",
"initial_release_date": "2025-06-04T10:12:31Z",
"revision_history": [
{
"date": "2025-06-04T10:12:31Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-17-openjdk-17.0.15.0-150400.3.54.1.aarch64",
"product": {
"name": "java-17-openjdk-17.0.15.0-150400.3.54.1.aarch64",
"product_id": "java-17-openjdk-17.0.15.0-150400.3.54.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-demo-17.0.15.0-150400.3.54.1.aarch64",
"product": {
"name": "java-17-openjdk-demo-17.0.15.0-150400.3.54.1.aarch64",
"product_id": "java-17-openjdk-demo-17.0.15.0-150400.3.54.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-devel-17.0.15.0-150400.3.54.1.aarch64",
"product": {
"name": "java-17-openjdk-devel-17.0.15.0-150400.3.54.1.aarch64",
"product_id": "java-17-openjdk-devel-17.0.15.0-150400.3.54.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-headless-17.0.15.0-150400.3.54.1.aarch64",
"product": {
"name": "java-17-openjdk-headless-17.0.15.0-150400.3.54.1.aarch64",
"product_id": "java-17-openjdk-headless-17.0.15.0-150400.3.54.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-jmods-17.0.15.0-150400.3.54.1.aarch64",
"product": {
"name": "java-17-openjdk-jmods-17.0.15.0-150400.3.54.1.aarch64",
"product_id": "java-17-openjdk-jmods-17.0.15.0-150400.3.54.1.aarch64"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-src-17.0.15.0-150400.3.54.1.aarch64",
"product": {
"name": "java-17-openjdk-src-17.0.15.0-150400.3.54.1.aarch64",
"product_id": "java-17-openjdk-src-17.0.15.0-150400.3.54.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-17-openjdk-17.0.15.0-150400.3.54.1.i586",
"product": {
"name": "java-17-openjdk-17.0.15.0-150400.3.54.1.i586",
"product_id": "java-17-openjdk-17.0.15.0-150400.3.54.1.i586"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-demo-17.0.15.0-150400.3.54.1.i586",
"product": {
"name": "java-17-openjdk-demo-17.0.15.0-150400.3.54.1.i586",
"product_id": "java-17-openjdk-demo-17.0.15.0-150400.3.54.1.i586"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-devel-17.0.15.0-150400.3.54.1.i586",
"product": {
"name": "java-17-openjdk-devel-17.0.15.0-150400.3.54.1.i586",
"product_id": "java-17-openjdk-devel-17.0.15.0-150400.3.54.1.i586"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-headless-17.0.15.0-150400.3.54.1.i586",
"product": {
"name": "java-17-openjdk-headless-17.0.15.0-150400.3.54.1.i586",
"product_id": "java-17-openjdk-headless-17.0.15.0-150400.3.54.1.i586"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-jmods-17.0.15.0-150400.3.54.1.i586",
"product": {
"name": "java-17-openjdk-jmods-17.0.15.0-150400.3.54.1.i586",
"product_id": "java-17-openjdk-jmods-17.0.15.0-150400.3.54.1.i586"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-src-17.0.15.0-150400.3.54.1.i586",
"product": {
"name": "java-17-openjdk-src-17.0.15.0-150400.3.54.1.i586",
"product_id": "java-17-openjdk-src-17.0.15.0-150400.3.54.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "java-17-openjdk-javadoc-17.0.15.0-150400.3.54.1.noarch",
"product": {
"name": "java-17-openjdk-javadoc-17.0.15.0-150400.3.54.1.noarch",
"product_id": "java-17-openjdk-javadoc-17.0.15.0-150400.3.54.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "java-17-openjdk-17.0.15.0-150400.3.54.1.ppc64le",
"product": {
"name": "java-17-openjdk-17.0.15.0-150400.3.54.1.ppc64le",
"product_id": "java-17-openjdk-17.0.15.0-150400.3.54.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-demo-17.0.15.0-150400.3.54.1.ppc64le",
"product": {
"name": "java-17-openjdk-demo-17.0.15.0-150400.3.54.1.ppc64le",
"product_id": "java-17-openjdk-demo-17.0.15.0-150400.3.54.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-devel-17.0.15.0-150400.3.54.1.ppc64le",
"product": {
"name": "java-17-openjdk-devel-17.0.15.0-150400.3.54.1.ppc64le",
"product_id": "java-17-openjdk-devel-17.0.15.0-150400.3.54.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-headless-17.0.15.0-150400.3.54.1.ppc64le",
"product": {
"name": "java-17-openjdk-headless-17.0.15.0-150400.3.54.1.ppc64le",
"product_id": "java-17-openjdk-headless-17.0.15.0-150400.3.54.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-jmods-17.0.15.0-150400.3.54.1.ppc64le",
"product": {
"name": "java-17-openjdk-jmods-17.0.15.0-150400.3.54.1.ppc64le",
"product_id": "java-17-openjdk-jmods-17.0.15.0-150400.3.54.1.ppc64le"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-src-17.0.15.0-150400.3.54.1.ppc64le",
"product": {
"name": "java-17-openjdk-src-17.0.15.0-150400.3.54.1.ppc64le",
"product_id": "java-17-openjdk-src-17.0.15.0-150400.3.54.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "java-17-openjdk-17.0.15.0-150400.3.54.1.s390x",
"product": {
"name": "java-17-openjdk-17.0.15.0-150400.3.54.1.s390x",
"product_id": "java-17-openjdk-17.0.15.0-150400.3.54.1.s390x"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-demo-17.0.15.0-150400.3.54.1.s390x",
"product": {
"name": "java-17-openjdk-demo-17.0.15.0-150400.3.54.1.s390x",
"product_id": "java-17-openjdk-demo-17.0.15.0-150400.3.54.1.s390x"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-devel-17.0.15.0-150400.3.54.1.s390x",
"product": {
"name": "java-17-openjdk-devel-17.0.15.0-150400.3.54.1.s390x",
"product_id": "java-17-openjdk-devel-17.0.15.0-150400.3.54.1.s390x"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-headless-17.0.15.0-150400.3.54.1.s390x",
"product": {
"name": "java-17-openjdk-headless-17.0.15.0-150400.3.54.1.s390x",
"product_id": "java-17-openjdk-headless-17.0.15.0-150400.3.54.1.s390x"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-jmods-17.0.15.0-150400.3.54.1.s390x",
"product": {
"name": "java-17-openjdk-jmods-17.0.15.0-150400.3.54.1.s390x",
"product_id": "java-17-openjdk-jmods-17.0.15.0-150400.3.54.1.s390x"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-src-17.0.15.0-150400.3.54.1.s390x",
"product": {
"name": "java-17-openjdk-src-17.0.15.0-150400.3.54.1.s390x",
"product_id": "java-17-openjdk-src-17.0.15.0-150400.3.54.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-17-openjdk-17.0.15.0-150400.3.54.1.x86_64",
"product": {
"name": "java-17-openjdk-17.0.15.0-150400.3.54.1.x86_64",
"product_id": "java-17-openjdk-17.0.15.0-150400.3.54.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-demo-17.0.15.0-150400.3.54.1.x86_64",
"product": {
"name": "java-17-openjdk-demo-17.0.15.0-150400.3.54.1.x86_64",
"product_id": "java-17-openjdk-demo-17.0.15.0-150400.3.54.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-devel-17.0.15.0-150400.3.54.1.x86_64",
"product": {
"name": "java-17-openjdk-devel-17.0.15.0-150400.3.54.1.x86_64",
"product_id": "java-17-openjdk-devel-17.0.15.0-150400.3.54.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-headless-17.0.15.0-150400.3.54.1.x86_64",
"product": {
"name": "java-17-openjdk-headless-17.0.15.0-150400.3.54.1.x86_64",
"product_id": "java-17-openjdk-headless-17.0.15.0-150400.3.54.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-jmods-17.0.15.0-150400.3.54.1.x86_64",
"product": {
"name": "java-17-openjdk-jmods-17.0.15.0-150400.3.54.1.x86_64",
"product_id": "java-17-openjdk-jmods-17.0.15.0-150400.3.54.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-17-openjdk-src-17.0.15.0-150400.3.54.1.x86_64",
"product": {
"name": "java-17-openjdk-src-17.0.15.0-150400.3.54.1.x86_64",
"product_id": "java-17-openjdk-src-17.0.15.0-150400.3.54.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Legacy 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Module for Legacy 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-legacy:15:sp7"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-17.0.15.0-150400.3.54.1.aarch64 as component of SUSE Linux Enterprise Module for Legacy 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.aarch64"
},
"product_reference": "java-17-openjdk-17.0.15.0-150400.3.54.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-17.0.15.0-150400.3.54.1.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.ppc64le"
},
"product_reference": "java-17-openjdk-17.0.15.0-150400.3.54.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-17.0.15.0-150400.3.54.1.s390x as component of SUSE Linux Enterprise Module for Legacy 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.s390x"
},
"product_reference": "java-17-openjdk-17.0.15.0-150400.3.54.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-17.0.15.0-150400.3.54.1.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.x86_64"
},
"product_reference": "java-17-openjdk-17.0.15.0-150400.3.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-demo-17.0.15.0-150400.3.54.1.aarch64 as component of SUSE Linux Enterprise Module for Legacy 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.aarch64"
},
"product_reference": "java-17-openjdk-demo-17.0.15.0-150400.3.54.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-demo-17.0.15.0-150400.3.54.1.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.ppc64le"
},
"product_reference": "java-17-openjdk-demo-17.0.15.0-150400.3.54.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-demo-17.0.15.0-150400.3.54.1.s390x as component of SUSE Linux Enterprise Module for Legacy 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.s390x"
},
"product_reference": "java-17-openjdk-demo-17.0.15.0-150400.3.54.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-demo-17.0.15.0-150400.3.54.1.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.x86_64"
},
"product_reference": "java-17-openjdk-demo-17.0.15.0-150400.3.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-devel-17.0.15.0-150400.3.54.1.aarch64 as component of SUSE Linux Enterprise Module for Legacy 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.aarch64"
},
"product_reference": "java-17-openjdk-devel-17.0.15.0-150400.3.54.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-devel-17.0.15.0-150400.3.54.1.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.ppc64le"
},
"product_reference": "java-17-openjdk-devel-17.0.15.0-150400.3.54.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-devel-17.0.15.0-150400.3.54.1.s390x as component of SUSE Linux Enterprise Module for Legacy 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.s390x"
},
"product_reference": "java-17-openjdk-devel-17.0.15.0-150400.3.54.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-devel-17.0.15.0-150400.3.54.1.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.x86_64"
},
"product_reference": "java-17-openjdk-devel-17.0.15.0-150400.3.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-headless-17.0.15.0-150400.3.54.1.aarch64 as component of SUSE Linux Enterprise Module for Legacy 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.aarch64"
},
"product_reference": "java-17-openjdk-headless-17.0.15.0-150400.3.54.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-headless-17.0.15.0-150400.3.54.1.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.ppc64le"
},
"product_reference": "java-17-openjdk-headless-17.0.15.0-150400.3.54.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-headless-17.0.15.0-150400.3.54.1.s390x as component of SUSE Linux Enterprise Module for Legacy 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.s390x"
},
"product_reference": "java-17-openjdk-headless-17.0.15.0-150400.3.54.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-17-openjdk-headless-17.0.15.0-150400.3.54.1.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.x86_64"
},
"product_reference": "java-17-openjdk-headless-17.0.15.0-150400.3.54.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP7"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-21587",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21587"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21587",
"url": "https://www.suse.com/security/cve/CVE-2025-21587"
},
{
"category": "external",
"summary": "SUSE Bug 1241274 for CVE-2025-21587",
"url": "https://bugzilla.suse.com/1241274"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-04T10:12:31Z",
"details": "important"
}
],
"title": "CVE-2025-21587"
},
{
"cve": "CVE-2025-30691",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-30691"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-30691",
"url": "https://www.suse.com/security/cve/CVE-2025-30691"
},
{
"category": "external",
"summary": "SUSE Bug 1241275 for CVE-2025-30691",
"url": "https://bugzilla.suse.com/1241275"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-04T10:12:31Z",
"details": "moderate"
}
],
"title": "CVE-2025-30691"
},
{
"cve": "CVE-2025-30698",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-30698"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-30698",
"url": "https://www.suse.com/security/cve/CVE-2025-30698"
},
{
"category": "external",
"summary": "SUSE Bug 1241274 for CVE-2025-30698",
"url": "https://bugzilla.suse.com/1241274"
},
{
"category": "external",
"summary": "SUSE Bug 1241276 for CVE-2025-30698",
"url": "https://bugzilla.suse.com/1241276"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-17.0.15.0-150400.3.54.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-demo-17.0.15.0-150400.3.54.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-devel-17.0.15.0-150400.3.54.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.aarch64",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.ppc64le",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.s390x",
"SUSE Linux Enterprise Module for Legacy 15 SP7:java-17-openjdk-headless-17.0.15.0-150400.3.54.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-06-04T10:12:31Z",
"details": "important"
}
],
"title": "CVE-2025-30698"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…