openSUSE-SU-2026:20143-1

Details

This update for java-25-openjdk fixes the following issues:

Update to upstream tag jdk-25.0.2+10 (January 2026 CPU)

Security fixes:

CVE-2026-21925: Fixed Oracle Java SE component RMI (bsc#1257034).
CVE-2026-21932: Fixed Oracle Java SE component AWT and JavaFX (bsc#1257036).
CVE-2026-21933: Fixed Oracle Java SE component Networking (bsc#1257037).
CVE-2026-21945: Fixed Oracle Java SE component Security (bsc#1257038).

Other fixes:

Do not depend on update-desktop-files (jsc#PED-14507, jsc#PED-15221).

Affected Packages

java-25-openjdk

openSUSE Leap 16.0

Fixed in:

25.0.2.0-160000.1.1

java-25-openjdk-demo

openSUSE Leap 16.0

Fixed in:

25.0.2.0-160000.1.1

java-25-openjdk-devel

openSUSE Leap 16.0

Fixed in:

25.0.2.0-160000.1.1

java-25-openjdk-headless

openSUSE Leap 16.0

Fixed in:

25.0.2.0-160000.1.1

java-25-openjdk-javadoc

openSUSE Leap 16.0

Fixed in:

25.0.2.0-160000.1.1

java-25-openjdk-jmods

openSUSE Leap 16.0

Fixed in:

25.0.2.0-160000.1.1

java-25-openjdk-src

openSUSE Leap 16.0

Fixed in:

25.0.2.0-160000.1.1

References

ADVISORY

REPORT

https://bugzilla.suse.com/1257034

REPORT

https://bugzilla.suse.com/1257036

REPORT

https://bugzilla.suse.com/1257037

REPORT

https://bugzilla.suse.com/1257038

WEB

https://www.suse.com/security/cve/CVE-2026-21925

WEB

https://www.suse.com/security/cve/CVE-2026-21932

WEB

https://www.suse.com/security/cve/CVE-2026-21933

WEB

https://www.suse.com/security/cve/CVE-2026-21945