Security update for java-1_8_0-openj9
This update for java-1_8_0-openj9 fixes the following issues: - CVE-2025-4447: Fixed buffer overflow in Eclipse OpenJ9 (bsc#1243429). - CVE-2025-30698: Fixed 2D unauthorized data access and DoS (bsc#1241276). - CVE-2025-30691: Fixed Compiler Unauthorized Data Access (bsc#1241275). - CVE-2025-21587: Fixed unauthorized access, deletion or modification of critical data (bsc#1241274). Other bugfixes: - Fixed wrong execstack flag in libj9jit (bsc#1235844)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for java-1_8_0-openj9 fixes the following issues: - CVE-2025-4447: Fixed buffer overflow in Eclipse OpenJ9 (bsc#1243429). - CVE-2025-30698: Fixed 2D unauthorized data access and DoS (bsc#1241276). - CVE-2025-30691: Fixed Compiler Unauthorized Data Access (bsc#1241275). - CVE-2025-21587: Fixed unauthorized access, deletion or modification of critical data (bsc#1241274). Other bugfixes: - Fixed wrong execstack flag in libj9jit (bsc#1235844)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1235844
- https://bugzilla.suse.com/1241274
- https://bugzilla.suse.com/1241275
- https://bugzilla.suse.com/1241276
- https://bugzilla.suse.com/1243429
- https://www.suse.com/security/cve/CVE-2025-21587
- https://www.suse.com/security/cve/CVE-2025-30691
- https://www.suse.com/security/cve/CVE-2025-30698
- https://www.suse.com/security/cve/CVE-2025-4447
- https://www.suse.com/support/update/announcement/2025/suse-su-202501954-1/