Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2025:4039-1

UNKNOWN

Security update for java-1_8_0-openjdk

Published Nov 10, 2025

Modified 2 months ago

Fix available

Details

This update for java-1_8_0-openjdk fixes the following issues:

Update to version jdk8u472 (icedtea-3.37.0):

CVE-2025-53057: Fixed certificate handling leading to unauthorized creation, deletion or modification access to critical data (bsc#1252414)
CVE-2025-53066: Fixed Path factories leading to unauthorized access to critical data or complete access (bsc#1252417)

Affected Packages

SUSE:Enterprise Storage 7.1java-1_8_0-openjdk

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Enterprise Storage 7.1java-1_8_0-openjdk-demo

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Enterprise Storage 7.1java-1_8_0-openjdk-devel

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Enterprise Storage 7.1java-1_8_0-openjdk-headless

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSjava-1_8_0-openjdk

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSjava-1_8_0-openjdk-demo

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSjava-1_8_0-openjdk-devel

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSjava-1_8_0-openjdk-headless

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSjava-1_8_0-openjdk

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSjava-1_8_0-openjdk-demo

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSjava-1_8_0-openjdk-devel

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSjava-1_8_0-openjdk-headless

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSjava-1_8_0-openjdk

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSjava-1_8_0-openjdk-demo

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSjava-1_8_0-openjdk-devel

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSjava-1_8_0-openjdk-headless

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Module for Legacy 15 SP6java-1_8_0-openjdk

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Module for Legacy 15 SP6java-1_8_0-openjdk-demo

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Module for Legacy 15 SP6java-1_8_0-openjdk-devel

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Module for Legacy 15 SP6java-1_8_0-openjdk-headless

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Module for Legacy 15 SP7java-1_8_0-openjdk

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Module for Legacy 15 SP7java-1_8_0-openjdk-demo

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Module for Legacy 15 SP7java-1_8_0-openjdk-devel

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Module for Legacy 15 SP7java-1_8_0-openjdk-headless

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Server 15 SP3-LTSSjava-1_8_0-openjdk

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Server 15 SP3-LTSSjava-1_8_0-openjdk-demo

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Server 15 SP3-LTSSjava-1_8_0-openjdk-devel

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Server 15 SP3-LTSSjava-1_8_0-openjdk-headless

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Server 15 SP4-LTSSjava-1_8_0-openjdk

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Server 15 SP4-LTSSjava-1_8_0-openjdk-demo

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Server 15 SP4-LTSSjava-1_8_0-openjdk-devel

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Server 15 SP4-LTSSjava-1_8_0-openjdk-headless

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Server 15 SP5-LTSSjava-1_8_0-openjdk

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Server 15 SP5-LTSSjava-1_8_0-openjdk-demo

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Server 15 SP5-LTSSjava-1_8_0-openjdk-devel

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Server 15 SP5-LTSSjava-1_8_0-openjdk-headless

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Server for SAP Applications 15 SP3java-1_8_0-openjdk

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Server for SAP Applications 15 SP3java-1_8_0-openjdk-demo

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Server for SAP Applications 15 SP3java-1_8_0-openjdk-devel

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Server for SAP Applications 15 SP3java-1_8_0-openjdk-headless

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Server for SAP Applications 15 SP4java-1_8_0-openjdk

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Server for SAP Applications 15 SP4java-1_8_0-openjdk-demo

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Server for SAP Applications 15 SP4java-1_8_0-openjdk-devel

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Server for SAP Applications 15 SP4java-1_8_0-openjdk-headless

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Server for SAP Applications 15 SP5java-1_8_0-openjdk

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Server for SAP Applications 15 SP5java-1_8_0-openjdk-demo

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Server for SAP Applications 15 SP5java-1_8_0-openjdk-devel

Fixed in:

1.8.0.472-150000.3.114.3

SUSE:Linux Enterprise Server for SAP Applications 15 SP5java-1_8_0-openjdk-headless

Fixed in:

1.8.0.472-150000.3.114.3

openSUSE:Leap 15.6java-1_8_0-openjdk

Fixed in:

1.8.0.472-150000.3.114.3

openSUSE:Leap 15.6java-1_8_0-openjdk-accessibility

Fixed in:

1.8.0.472-150000.3.114.3

openSUSE:Leap 15.6java-1_8_0-openjdk-demo

Fixed in:

1.8.0.472-150000.3.114.3

openSUSE:Leap 15.6java-1_8_0-openjdk-devel

Fixed in:

1.8.0.472-150000.3.114.3

openSUSE:Leap 15.6java-1_8_0-openjdk-headless

Fixed in:

1.8.0.472-150000.3.114.3

openSUSE:Leap 15.6java-1_8_0-openjdk-javadoc

Fixed in:

1.8.0.472-150000.3.114.3

openSUSE:Leap 15.6java-1_8_0-openjdk-src

Fixed in:

1.8.0.472-150000.3.114.3

References

REPORThttps://bugzilla.suse.com/1252414 REPORThttps://bugzilla.suse.com/1252417 WEBhttps://www.suse.com/security/cve/CVE-2025-53057 WEBhttps://www.suse.com/security/cve/CVE-2025-53066 ADVISORYhttps://www.suse.com/support/update/announcement/2025/suse-su-20254039-1/

Upstream

CVE-2025-53057 CVE-2025-53066

Ecosystems

Timeline

PublishedNov 10, 2025

ModifiedNov 10, 2025

SUSE-SU-2025:4039-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2025:4039-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline