Security update for java-1_8_0-openj9
This update for java-1_8_0-openj9 fixes the following issues: Update to OpenJDK 8u462 build 08 with OpenJ9 0.53.0 virtual machine: - CVE-2025-30749: several scenarios can lead to heap corruption (Oracle CPU 2025-07) (bsc#1246595) - CVE-2025-30754: incomplete handshake may lead to weakening TLS protections (Oracle CPU 2025-07) (bsc#1246598) - CVE-2025-30761: Improve scripting supports (Oracle CPU 2025-07) (bsc#1246580) - CVE-2025-50059: Improve HTTP client header handling (Oracle CPU 2025-07) (bsc#1246575)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for java-1_8_0-openj9 fixes the following issues: Update to OpenJDK 8u462 build 08 with OpenJ9 0.53.0 virtual machine: - CVE-2025-30749: several scenarios can lead to heap corruption (Oracle CPU 2025-07) (bsc#1246595) - CVE-2025-30754: incomplete handshake may lead to weakening TLS protections (Oracle CPU 2025-07) (bsc#1246598) - CVE-2025-30761: Improve scripting supports (Oracle CPU 2025-07) (bsc#1246580) - CVE-2025-50059: Improve HTTP client header handling (Oracle CPU 2025-07) (bsc#1246575)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1246575
- https://bugzilla.suse.com/1246580
- https://bugzilla.suse.com/1246595
- https://bugzilla.suse.com/1246598
- https://www.suse.com/security/cve/CVE-2025-30749
- https://www.suse.com/security/cve/CVE-2025-30754
- https://www.suse.com/security/cve/CVE-2025-30761
- https://www.suse.com/security/cve/CVE-2025-50059
- https://www.suse.com/support/update/announcement/2025/suse-su-202502545-1/