rpm package

suse/java-1_8_0-ibm&distro=SUSE Linux Enterprise Server 15 SP4-LTSS

pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS

Vulnerabilities (44)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2026-21945	Hig	7.5	< 1.8.0_sr8.60-150000.3.112.1	1.8.0_sr8.60-150000.3.112.1	Jan 20, 2026	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM
CVE-2026-21933	Med	6.1	< 1.8.0_sr8.60-150000.3.112.1	1.8.0_sr8.60-150000.3.112.1	Jan 20, 2026	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle Graal
CVE-2026-21932	Hig	7.4	< 1.8.0_sr8.60-150000.3.112.1	1.8.0_sr8.60-150000.3.112.1	Jan 20, 2026	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle Graa
CVE-2026-21925	Med	4.8	< 1.8.0_sr8.60-150000.3.112.1	1.8.0_sr8.60-150000.3.112.1	Jan 20, 2026	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for
CVE-2025-61748	Low	3.7	< 1.8.0_sr8.55-150000.3.109.1	1.8.0_sr8.55-150000.3.109.1	Oct 21, 2025	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 21.0.8 and 25; Oracle GraalVM for JDK: 21.0.8; Oracle GraalVM Enterprise Edi
CVE-2025-53066	Hig	7.5	< 1.8.0_sr8.55-150000.3.109.1	1.8.0_sr8.55-150000.3.109.1	Oct 21, 2025	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 a
CVE-2025-53057	Med	5.9	< 1.8.0_sr8.55-150000.3.109.1	1.8.0_sr8.55-150000.3.109.1	Oct 21, 2025	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.
CVE-2025-30761	Med	5.9	< 1.8.0_sr8.50-150000.3.104.1	1.8.0_sr8.50-150000.3.104.1	Jul 15, 2025	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf and 11.0.27; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vuln
CVE-2025-50106	Hig	8.1	< 1.8.0_sr8.50-150000.3.104.1	1.8.0_sr8.50-150000.3.104.1	Jul 15, 2025	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15
CVE-2025-50059	Hig	8.6	< 1.8.0_sr8.50-150000.3.104.1	1.8.0_sr8.50-150000.3.104.1	Jul 15, 2025	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.1
CVE-2025-30754	Med	4.8	< 1.8.0_sr8.50-150000.3.104.1	1.8.0_sr8.50-150000.3.104.1	Jul 15, 2025	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.
CVE-2025-30749	Hig	8.1	< 1.8.0_sr8.50-150000.3.104.1	1.8.0_sr8.50-150000.3.104.1	Jul 15, 2025	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15
CVE-2025-4447	Hig	7.8	< 1.8.0_sr8.45-150000.3.101.1	1.8.0_sr8.45-150000.3.101.1	May 9, 2025	In Eclipse OpenJ9 versions up to 0.51, when used with OpenJDK version 8 a stack based buffer overflow can be caused by modifying a file on disk that is read when the JVM starts.
CVE-2025-30698	Med	5.6	< 1.8.0_sr8.45-150000.3.101.1	1.8.0_sr8.45-150000.3.101.1	Apr 15, 2025	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK: 17.0.14, 21
CVE-2025-30691	Med	4.8	< 1.8.0_sr8.45-150000.3.101.1	1.8.0_sr8.45-150000.3.101.1	Apr 15, 2025	Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 21.0.6, 24; Oracle GraalVM for JDK: 21.0.6 and 24. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to co
CVE-2025-21587	Hig	7.4	< 1.8.0_sr8.45-150000.3.101.1	1.8.0_sr8.45-150000.3.101.1	Apr 15, 2025	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE:8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK:17.0.14, 21
CVE-2025-21502	Med	4.8	< 1.8.0_sr8.40-150000.3.98.1	1.8.0_sr8.40-150000.3.98.1	Jan 21, 2025	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u431-perf, 11.0.25, 17.0.13, 21.0.5, 23.0.1; Oracle GraalVM for JDK: 17.0.13,
CVE-2024-10917	Low	3.7	< 1.8.0_sr8.40-150000.3.98.1	1.8.0_sr8.40-150000.3.98.1	Nov 11, 2024	In Eclipse OpenJ9 versions up to 0.47, the JNI function GetStringUTFLength may return an incorrect value which has wrapped around. From 0.48 the value is correct but may be truncated to include a smaller number of characters.
CVE-2024-21235	Med	4.8	< 1.8.0_sr8.35-150000.3.95.1	1.8.0_sr8.35-150000.3.95.1	Oct 15, 2024	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0
CVE-2024-21217	Low	3.7	< 1.8.0_sr8.35-150000.3.95.1	1.8.0_sr8.35-150000.3.95.1	Oct 15, 2024	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK:

CVE-2026-21945HigJan 20, 2026
affected < 1.8.0_sr8.60-150000.3.112.1fixed 1.8.0_sr8.60-150000.3.112.1
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM
CVE-2026-21933MedJan 20, 2026
affected < 1.8.0_sr8.60-150000.3.112.1fixed 1.8.0_sr8.60-150000.3.112.1
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle Graal
CVE-2026-21932HigJan 20, 2026
affected < 1.8.0_sr8.60-150000.3.112.1fixed 1.8.0_sr8.60-150000.3.112.1
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle Graa
CVE-2026-21925MedJan 20, 2026
affected < 1.8.0_sr8.60-150000.3.112.1fixed 1.8.0_sr8.60-150000.3.112.1
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for
CVE-2025-61748LowOct 21, 2025
affected < 1.8.0_sr8.55-150000.3.109.1fixed 1.8.0_sr8.55-150000.3.109.1
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 21.0.8 and 25; Oracle GraalVM for JDK: 21.0.8; Oracle GraalVM Enterprise Edi
CVE-2025-53066HigOct 21, 2025
affected < 1.8.0_sr8.55-150000.3.109.1fixed 1.8.0_sr8.55-150000.3.109.1
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 a
CVE-2025-53057MedOct 21, 2025
affected < 1.8.0_sr8.55-150000.3.109.1fixed 1.8.0_sr8.55-150000.3.109.1
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.
CVE-2025-30761MedJul 15, 2025
affected < 1.8.0_sr8.50-150000.3.104.1fixed 1.8.0_sr8.50-150000.3.104.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf and 11.0.27; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vuln
CVE-2025-50106HigJul 15, 2025
affected < 1.8.0_sr8.50-150000.3.104.1fixed 1.8.0_sr8.50-150000.3.104.1
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15
CVE-2025-50059HigJul 15, 2025
affected < 1.8.0_sr8.50-150000.3.104.1fixed 1.8.0_sr8.50-150000.3.104.1
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.1
CVE-2025-30754MedJul 15, 2025
affected < 1.8.0_sr8.50-150000.3.104.1fixed 1.8.0_sr8.50-150000.3.104.1
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.
CVE-2025-30749HigJul 15, 2025
affected < 1.8.0_sr8.50-150000.3.104.1fixed 1.8.0_sr8.50-150000.3.104.1
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15
CVE-2025-4447HigMay 9, 2025
affected < 1.8.0_sr8.45-150000.3.101.1fixed 1.8.0_sr8.45-150000.3.101.1
In Eclipse OpenJ9 versions up to 0.51, when used with OpenJDK version 8 a stack based buffer overflow can be caused by modifying a file on disk that is read when the JVM starts.
CVE-2025-30698MedApr 15, 2025
affected < 1.8.0_sr8.45-150000.3.101.1fixed 1.8.0_sr8.45-150000.3.101.1
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK: 17.0.14, 21
CVE-2025-30691MedApr 15, 2025
affected < 1.8.0_sr8.45-150000.3.101.1fixed 1.8.0_sr8.45-150000.3.101.1
Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 21.0.6, 24; Oracle GraalVM for JDK: 21.0.6 and 24. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to co
CVE-2025-21587HigApr 15, 2025
affected < 1.8.0_sr8.45-150000.3.101.1fixed 1.8.0_sr8.45-150000.3.101.1
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE:8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK:17.0.14, 21
CVE-2025-21502MedJan 21, 2025
affected < 1.8.0_sr8.40-150000.3.98.1fixed 1.8.0_sr8.40-150000.3.98.1
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u431-perf, 11.0.25, 17.0.13, 21.0.5, 23.0.1; Oracle GraalVM for JDK: 17.0.13,
CVE-2024-10917LowNov 11, 2024
affected < 1.8.0_sr8.40-150000.3.98.1fixed 1.8.0_sr8.40-150000.3.98.1
In Eclipse OpenJ9 versions up to 0.47, the JNI function GetStringUTFLength may return an incorrect value which has wrapped around. From 0.48 the value is correct but may be truncated to include a smaller number of characters.
CVE-2024-21235MedOct 15, 2024
affected < 1.8.0_sr8.35-150000.3.95.1fixed 1.8.0_sr8.35-150000.3.95.1
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0
CVE-2024-21217LowOct 15, 2024
affected < 1.8.0_sr8.35-150000.3.95.1fixed 1.8.0_sr8.35-150000.3.95.1
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK:

Page 1 of 3