CVE-2025-50106
High · 8.1CVSS
8.1
EPSS
0.8%
Published
Jul 15, 2025
CISA due date
—
Cloudanix analysis
Monitor only
SSVC: Track
A flaw in Java's graphics handling could let remote attackers take over systems that run Java applications by sending specially crafted data.
- Exploitation
- Remote Unauthenticated
- Attacker needs
- None
- Complexity
- High
- Impact
- Full Compromise
- Component
- Library
- Class
- Memory Corruption
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
Memory corruption in the 2D component of Oracle Java SE and GraalVM allows unauthenticated remote attackers to achieve full JVM takeover via crafted inputs delivered over network protocols or APIs.
Why it matters to the business
Unpatched Java runtimes on affected Alpaquita Linux streams expose applications to remote compromise, risking data theft, service disruption, and lateral movement; prevalence across enterprise Java deployments increases urgency despite low EPSS.
How an attack unfolds
An attacker identifies a vulnerable Java deployment exposed via network protocols or web services, crafts malicious 2D data payloads, and delivers them to trigger memory corruption leading to arbitrary code execution and full system takeover; the flaw also affects sandboxed Java applets or Web Start applications loading untrusted code.
How to fix it
Upgrade linux-lts (Alpaquita:stream) to 6.6.58-r0 or 6.12.41-r0 and linux-lts (Alpaquita:25) to 6.12.41-r0; apply corresponding Oracle Java SE, GraalVM for JDK, and GraalVM Enterprise Edition patches for the listed versions.
How to confirm the fix worked
Verify running Java and GraalVM versions against the fixed releases; confirm package versions match the listed Alpaquita updates and test that crafted 2D inputs no longer trigger crashes or unexpected behavior.
Typical attack path
- Map exposed Java services or APIs accepting 2D component data
- Craft and deliver malicious input via multiple protocols or web service calls
- Trigger memory corruption in the 2D component
- Escalate to full JVM and host takeover
How to detect it
Review Java process crash logs and core dumps for 2D component faults; inspect network logs for unusual traffic patterns targeting Java services or APIs that supply 2D data; correlate with application logs showing unexpected code execution or sandbox escapes.
What your security team should do
- Immediately schedule upgrades to the exact fixed Alpaquita package versions listed
- Inventory all Java 8/11/17/21/24 and GraalVM deployments and prioritize network-exposed instances
- Monitor EPSS trend and re-assess exploit maturity as it increases
The record
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and 24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:8 | java-1.8.0-openjdk | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-accessibility | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-accessibility-fastdebug | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-accessibility-slowdebug | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-demo | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-demo-fastdebug | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-demo-slowdebug | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-devel | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-devel-fastdebug | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-devel-slowdebug | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-fastdebug | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-headless | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-headless-fastdebug | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-headless-slowdebug | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-javadoc | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-javadoc-zip | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-slowdebug | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-src | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-src-fastdebug | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-src-slowdebug | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-17-openjdk | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-demo | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-demo-fastdebug | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-demo-slowdebug | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-devel | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-devel-fastdebug | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-devel-slowdebug | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-fastdebug | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-headless | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-headless-fastdebug | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-headless-slowdebug | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-javadoc | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-javadoc-zip | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-jmods | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-jmods-fastdebug | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-jmods-slowdebug | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-slowdebug | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-src | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-src-fastdebug | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-src-slowdebug | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-static-libs | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-static-libs-fastdebug | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-static-libs-slowdebug | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-21-openjdk | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-demo | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-demo-fastdebug | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-demo-slowdebug | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-devel | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-devel-fastdebug | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-devel-slowdebug | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-fastdebug | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-headless | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-headless-fastdebug | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-headless-slowdebug | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-javadoc | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-javadoc-zip | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-jmods | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-jmods-fastdebug | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-jmods-slowdebug | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-slowdebug | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-src | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-src-fastdebug | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-src-slowdebug | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-static-libs | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-static-libs-fastdebug | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-static-libs-slowdebug | 0 | 1:21.0.8.0.9-1.el8 |
| Chainguard | corretto-23 | 0 | 23.0.2.7.1-r7 |
| Chainguard | corretto-23-dbg | 0 | 23.0.2.7.1-r7 |
| Chainguard | corretto-23-default-jdk | 0 | 23.0.2.7.1-r7 |
| Chainguard | corretto-23-default-jvm | 0 | 23.0.2.7.1-r7 |
| Chainguard | corretto-23-demos | 0 | 23.0.2.7.1-r7 |
| Chainguard | corretto-23-doc | 0 | 23.0.2.7.1-r7 |
| Chainguard | corretto-23-jmods | 0 | 23.0.2.7.1-r7 |
| Chainguard | corretto-23-jre | 0 | 23.0.2.7.1-r7 |
| Chainguard | openjdk-11-openj9 | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-dbg | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-default-jdk | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-default-jvm | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-default-policy | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-doc | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-jmods | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-jre | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9 | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-dbg | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-default-jdk | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-default-jvm | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-default-policy | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-doc | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-jmods | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-jre | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9 | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-dbg | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-default-jdk | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-default-jvm | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-default-policy | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-doc | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-jmods | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-jre | 0 | 0.53.0-r0 |
| Chainguard | openjdk-22 | 0 | 22.0.2-r8 |
| Chainguard | openjdk-22-dbg | 0 | 22.0.2-r8 |
| Chainguard | openjdk-22-default-jdk | 0 | 22.0.2-r8 |
| Chainguard | openjdk-22-default-jvm | 0 | 22.0.2-r8 |
| Chainguard | openjdk-22-demos | 0 | 22.0.2-r8 |
| Chainguard | openjdk-22-doc | 0 | 22.0.2-r8 |
| Chainguard | openjdk-22-jmods | 0 | 22.0.2-r8 |
| Chainguard | openjdk-22-jre | 0 | 22.0.2-r8 |
| Chainguard | openjdk-22-jre-base | 0 | 22.0.2-r8 |
| Chainguard | openjdk-23 | 0 | 23.0.2-r8 |
| Chainguard | openjdk-23-dbg | 0 | 23.0.2-r8 |
| Chainguard | openjdk-23-default-jdk | 0 | 23.0.2-r8 |
| Chainguard | openjdk-23-default-jvm | 0 | 23.0.2-r8 |
| Chainguard | openjdk-23-demos | 0 | 23.0.2-r8 |
| Chainguard | openjdk-23-doc | 0 | 23.0.2-r8 |
| Chainguard | openjdk-23-jmods | 0 | 23.0.2-r8 |
| Chainguard | openjdk-23-jre | 0 | 23.0.2-r8 |
| Chainguard | openjdk-8-openj9 | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-dbg | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-default-jdk | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-default-jvm | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-doc | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-jre | 0 | 0.53.0-r1 |
| Chainguard | openjdk-crac-17 | 0 | 17.0.16.8-r0 |
| Chainguard | openjdk-crac-17-dbg | 0 | 17.0.16.8-r0 |
| Chainguard | openjdk-crac-17-default-jdk | 0 | 17.0.16.8-r0 |
| Chainguard | openjdk-crac-17-default-jvm | 0 | 17.0.16.8-r0 |
| Chainguard | openjdk-crac-17-demos | 0 | 17.0.16.8-r0 |
| Chainguard | openjdk-crac-17-doc | 0 | 17.0.16.8-r0 |
| Chainguard | openjdk-crac-17-jmods | 0 | 17.0.16.8-r0 |
| Chainguard | openjdk-crac-17-jre | 0 | 17.0.16.8-r0 |
| Chainguard | openjdk-crac-17-jre-base | 0 | 17.0.16.8-r0 |
| Chainguard | openjdk-crac-21 | 0 | 21.0.8.9-r0 |
| Chainguard | openjdk-crac-21-dbg | 0 | 21.0.8.9-r0 |
| Chainguard | openjdk-crac-21-default-jdk | 0 | 21.0.8.9-r0 |
| Chainguard | openjdk-crac-21-default-jvm | 0 | 21.0.8.9-r0 |
| Chainguard | openjdk-crac-21-demos | 0 | 21.0.8.9-r0 |
| Chainguard | openjdk-crac-21-doc | 0 | 21.0.8.9-r0 |
| Chainguard | openjdk-crac-21-jmods | 0 | 21.0.8.9-r0 |
| Chainguard | openjdk-crac-21-jre | 0 | 21.0.8.9-r0 |
| Chainguard | openjdk-crac-21-jre-base | 0 | 21.0.8.9-r0 |
| Debian:11 | openjdk-11 | 0 | No fix |
| Debian:11 | openjdk-17 | 0 | No fix |
| Debian:12 | openjdk-17 | 0 | No fix |
| Debian:12 | openjdk-17 | 0 | 17.0.16+8-1~deb12u1 |
| Debian:13 | openjdk-21 | 0 | No fix |
| Debian:14 | openjdk-21 | 0 | 21.0.8+9-1 |
| Mageia:9 | java-1.8.0-openjdk | 0 | 1.8.0.462.b08-1.mga9 |
| Mageia:9 | java-11-openjdk | 0 | 11.0.28.0.6-1.mga9 |
| Mageia:9 | java-17-openjdk | 0 | 17.0.16.0.8-1.mga9 |
| Mageia:9 | java-latest-openjdk | 0 | 24.0.2.0.12-1.rolling.1.mga9 |
| SUSE:Enterprise Storage 7.1 | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Enterprise Storage 7.1 | java-1_8_0-ibm | 0 | 1.8.0_sr8.50-150000.3.104.1 |
| SUSE:Enterprise Storage 7.1 | java-1_8_0-openjdk | 0 | 1.8.0.462-150000.3.109.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | java-1_8_0-ibm | 0 | 1.8.0_sr8.50-150000.3.104.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | java-1_8_0-openjdk | 0 | 1.8.0.462-150000.3.109.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | java-17-openjdk | 0 | 17.0.16.0-150400.3.57.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | java-1_8_0-ibm | 0 | 1.8.0_sr8.50-150000.3.104.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | java-1_8_0-openjdk | 0 | 1.8.0.462-150000.3.109.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | java-17-openjdk | 0 | 17.0.16.0-150400.3.57.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | java-1_8_0-ibm | 0 | 1.8.0_sr8.50-150000.3.104.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | java-1_8_0-openjdk | 0 | 1.8.0.462-150000.3.109.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | java-17-openjdk | 0 | 17.0.16.0-150400.3.57.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | java-17-openjdk | 0 | 17.0.16.0-150400.3.57.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | java-17-openjdk | 0 | 17.0.16.0-150400.3.57.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | java-21-openjdk | 0 | 21.0.8.0-150600.3.15.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | java-21-openjdk | 0 | 21.0.8.0-150600.3.15.1 |
| SUSE:Linux Enterprise Module for Legacy 15 SP6 | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Linux Enterprise Module for Legacy 15 SP6 | java-17-openjdk | 0 | 17.0.16.0-150400.3.57.1 |
| SUSE:Linux Enterprise Module for Legacy 15 SP6 | java-1_8_0-ibm | 0 | 1.8.0_sr8.50-150000.3.104.1 |
| SUSE:Linux Enterprise Module for Legacy 15 SP6 | java-1_8_0-openjdk | 0 | 1.8.0.462-150000.3.109.1 |
| SUSE:Linux Enterprise Module for Legacy 15 SP7 | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Linux Enterprise Module for Legacy 15 SP7 | java-17-openjdk | 0 | 17.0.16.0-150400.3.57.1 |
| SUSE:Linux Enterprise Module for Legacy 15 SP7 | java-1_8_0-ibm | 0 | 1.8.0_sr8.50-150000.3.104.1 |
| SUSE:Linux Enterprise Module for Legacy 15 SP7 | java-1_8_0-openjdk | 0 | 1.8.0.462-150000.3.109.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP6 | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP7 | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Linux Enterprise Server 12 SP5-LTSS | java-11-openjdk | 0 | 11.0.28.0-3.90.1 |
| SUSE:Linux Enterprise Server 15 SP3-LTSS | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Linux Enterprise Server 15 SP3-LTSS | java-1_8_0-ibm | 0 | 1.8.0_sr8.50-150000.3.104.1 |
| SUSE:Linux Enterprise Server 15 SP3-LTSS | java-1_8_0-openjdk | 0 | 1.8.0.462-150000.3.109.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | java-17-openjdk | 0 | 17.0.16.0-150400.3.57.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | java-1_8_0-ibm | 0 | 1.8.0_sr8.50-150000.3.104.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | java-1_8_0-openjdk | 0 | 1.8.0.462-150000.3.109.1 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | java-17-openjdk | 0 | 17.0.16.0-150400.3.57.1 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | java-1_8_0-ibm | 0 | 1.8.0_sr8.50-150000.3.104.1 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | java-1_8_0-openjdk | 0 | 1.8.0.462-150000.3.109.1 |
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | java-11-openjdk | 0 | 11.0.28.0-3.90.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | java-1_8_0-ibm | 0 | 1.8.0_sr8.50-150000.3.104.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | java-1_8_0-openjdk | 0 | 1.8.0.462-150000.3.109.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | java-17-openjdk | 0 | 17.0.16.0-150400.3.57.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | java-1_8_0-ibm | 0 | 1.8.0_sr8.50-150000.3.104.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | java-1_8_0-openjdk | 0 | 1.8.0.462-150000.3.109.1 |
Related vulnerabilities
- CVE-2026-21945 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-1.8.0-openjdk
- CVE-2026-21933 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-1.8.0-openjdk
- CVE-2026-21925 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-1.8.0-openjdk
- CVE-2025-65018 LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via… Also affects java-1.8.0-openjdk
- CVE-2025-64720 LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect… Also affects java-1.8.0-openjdk
- CVE-2025-30761 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle… Also affects java-1.8.0-openjdk
- CVE-2025-30754 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-1.8.0-openjdk
- CVE-2025-30749 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-1.8.0-openjdk