← Search the atlas
SUSE-SU-2025:4039-1
Not scored
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues:
Update to version jdk8u472 (icedtea-3.37.0):
- CVE-2025-53057: Fixed certificate handling leading to unauthorized creation, deletion or modification access to critical data (bsc#1252414)
- CVE-2025-53066: Fixed Path factories leading to unauthorized access to critical data or complete access (bsc#1252417)
Exploit probability
Not scored
Published
November 10, 2025
Required by
Not available
Last source change
February 4, 2026
02 / AFFECTED SOFTWARE
Affected packages
SUSE:Enterprise Storage 7.1
java-1_8_0-openjdk
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
java-1_8_0-openjdk
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
java-1_8_0-openjdk
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
java-1_8_0-openjdk
SUSE:Linux Enterprise Module for Legacy 15 SP6
java-1_8_0-openjdk
SUSE:Linux Enterprise Module for Legacy 15 SP7
java-1_8_0-openjdk
SUSE:Linux Enterprise Server 15 SP3-LTSS
java-1_8_0-openjdk
SUSE:Linux Enterprise Server 15 SP4-LTSS
java-1_8_0-openjdk
SUSE:Linux Enterprise Server 15 SP5-LTSS
java-1_8_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
java-1_8_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
java-1_8_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
java-1_8_0-openjdk
openSUSE:Leap 15.6
java-1_8_0-openjdk
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
SUSE-SU-2025:4039-1
This update for java-1_8_0-openjdk fixes the following issues:
Update to version jdk8u472 (icedtea-3.37.0):
- CVE-2025-53057: Fixed certificate handling leading to unauthorized creation, deletion or modification access to critical data (bsc#1252414)
- CVE-2025-53066: Fixed Path factories leading to unauthorized access to critical data or complete access (bsc#1252417)
View original source ↗
05 / REFERENCES
Further evidence