gpp_maybe
Security update for java-1_8_0-ibm
SUSE-SLE-Module-Legacy-15-SP6-2025-1788
This update for java-1_8_0-ibm fixes the following issues: Update to Java 8.0 Service Refresh 8 Fix Pack 45. Security issues fixed: - Oracle April 15 2025 CPU (bsc#1242208) * CVE-2025-21587: unauthorized access, deletion and modification of critical data via the JSSE component (bsc#1241274). * CVE-2025-30691: unauthorized access to data via the Compiler component (bsc#1241275). * CVE-2025-30698: unauthorized access to data and ability to cause a partial DoS via the 2D component (bsc#1241276). - IBM Security Update May 2025 * CVE-2025-4447: stack based buffer overflow in Eclipse OpenJ9 through modification of file that is read when the JVM starts (bsc#1243429). Other changes and issues fixed: - Security: * Avoid memory leak during aes cipher initialization operations for IBMJCEPlus and IBMJCEPlusProviders provider. * Changing the default of the com.ibm.security.spnego.msinterop property from true to false. * Deserializing a com.ibm.crypto.provider.rsaprivatecrtkey object causes a java.io.invalidobjectexception to be thrown. * Failed to read private key from a JKS keystore, specified as JCEKS keystore. * HTTPS channel binding support. * Keytool listing PKCS12 keystore issue. * On Linux systems, use gcc11.2 to compile IBM PKCS11 library. * Support has been added to the IBM Java XMLDSigRI security provider for the EdDSA (Edwards-curve Digital Signature Algorithm). * Updates to XDH Key Agreement, AESGCM Algorithms in IBMJCEPlus and IBMJCEPlusFIPS providers. - Class Libraries: * Update timezone information to the latest tzdata2025a. - Java Virtual Machine: * A SIGSEGV/GPF event received while processing verifyerror. * Crash while resolving MethodHandleNatives. * NoSuchMethodException or NoClassDefFoundError when loading classes. - JIT Compiler: * Assert in the JIT Compiler, badILOp. * Reduced MD5 performance.
-
Release DateMay 31 2025
-
ReferencesBugzilla: 1243429, 1241275, 1242208, 1241274, 1241276
CVEs: CVE-2025-30691, CVE-2025-21587, CVE-2025-30698, CVE-2025-4447 -
Typesecurity
-
Severityimportant
cloud_download Downloads
Legacy Module 15.6 s390x
-
Packagesjava-1_8_0-ibm
IBM Java(TM) Version 8 Runtime Environmentjava-1_8_0-ibm-devel1.8.0_sr8.45-150000.3.101.1 lock rpm lock nosrc
IBM Java(TM) Version 8 SDK, Standard Edition1.8.0_sr8.45-150000.3.101.1 lock rpm
Legacy Module 15.6 ppc64le
-
Packagesjava-1_8_0-ibm
IBM Java(TM) Version 8 Runtime Environmentjava-1_8_0-ibm-devel1.8.0_sr8.45-150000.3.101.1 lock rpm lock nosrc
IBM Java(TM) Version 8 SDK, Standard Edition1.8.0_sr8.45-150000.3.101.1 lock rpm
Legacy Module 15.6 x86_64
-
Packagesjava-1_8_0-ibm
IBM Java(TM) Version 8 Runtime Environmentjava-1_8_0-ibm-alsa1.8.0_sr8.45-150000.3.101.1 lock rpm lock nosrc
ALSA support for java-1_8_0-ibmjava-1_8_0-ibm-devel1.8.0_sr8.45-150000.3.101.1 lock rpm
IBM Java(TM) Version 8 SDK, Standard Editionjava-1_8_0-ibm-plugin1.8.0_sr8.45-150000.3.101.1 lock rpm
Browser plugin files for java-1_8_0-ibm1.8.0_sr8.45-150000.3.101.1 lock rpm