Описание
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues
- CVE-2026-22007: APIs in the specified component can lead to an unauthorized read access (bsc#1262490).
- CVE-2026-22013: unauthenticated attacker with network access can access to critical data (bsc#1262494).
- CVE-2026-22016: APIs in the specified Component can cause unauthorized access to critical data (bsc#1262495).
- CVE-2026-22018: unauthenticated attacker with network access can cause a partial denial of service (bsc#1262496).
- CVE-2026-22021: APIs in the specified Component can cause a partial denial of service (bsc#1262497).
- CVE-2026-34268: unauthenticated attacker with logon can gain unauthorized read access (bsc#1262500).
- CVE-2026-1188: eclipse: ensure room for separator in omrsysinfo_get_processor_feature_string (bsc#1265261)
Changes for java-1_8_0-ibm:
- Update to Java 8.0 Service Refresh 8 Fix Pack 65 (bsc#1264735)
Список пакетов
SUSE Linux Enterprise Server 12 SP5-LTSS
java-1_8_0-ibm-1.8.0_sr8.65-30.150.1
java-1_8_0-ibm-alsa-1.8.0_sr8.65-30.150.1
java-1_8_0-ibm-devel-1.8.0_sr8.65-30.150.1
java-1_8_0-ibm-plugin-1.8.0_sr8.65-30.150.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
java-1_8_0-ibm-1.8.0_sr8.65-30.150.1
java-1_8_0-ibm-alsa-1.8.0_sr8.65-30.150.1
java-1_8_0-ibm-devel-1.8.0_sr8.65-30.150.1
java-1_8_0-ibm-plugin-1.8.0_sr8.65-30.150.1
Ссылки
- Link for SUSE-SU-2026:2453-1
- E-Mail link for SUSE-SU-2026:2453-1
- SUSE Security Ratings
- SUSE Bug 1262490
- SUSE Bug 1262494
- SUSE Bug 1262495
- SUSE Bug 1262496
- SUSE Bug 1262497
- SUSE Bug 1262500
- SUSE Bug 1264735
- SUSE Bug 1265261
- SUSE CVE CVE-2026-1188 page
- SUSE CVE CVE-2026-22007 page
- SUSE CVE CVE-2026-22013 page
- SUSE CVE CVE-2026-22016 page
- SUSE CVE CVE-2026-22018 page
- SUSE CVE CVE-2026-22021 page
- SUSE CVE CVE-2026-34268 page
Описание
In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all supported processor features was not accounting for the separator inserted between processor features. If the output buffer supplied to this function was incorrectly sized, failing to account for the separator when determining when a write to the buffer was safe could lead to a buffer overflow. This issue is fixed in Eclipse OMR version 0.8.0.
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-1.8.0_sr8.65-30.150.1
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.65-30.150.1
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.65-30.150.1
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.65-30.150.1
Ссылки
- CVE-2026-1188
- SUSE Bug 1265261
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-1.8.0_sr8.65-30.150.1
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.65-30.150.1
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.65-30.150.1
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.65-30.150.1
Ссылки
- CVE-2026-22007
- SUSE Bug 1262490
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-1.8.0_sr8.65-30.150.1
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.65-30.150.1
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.65-30.150.1
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.65-30.150.1
Ссылки
- CVE-2026-22013
- SUSE Bug 1262494
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-1.8.0_sr8.65-30.150.1
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.65-30.150.1
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.65-30.150.1
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.65-30.150.1
Ссылки
- CVE-2026-22016
- SUSE Bug 1262495
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-1.8.0_sr8.65-30.150.1
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.65-30.150.1
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.65-30.150.1
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.65-30.150.1
Ссылки
- CVE-2026-22018
- SUSE Bug 1262496
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-1.8.0_sr8.65-30.150.1
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.65-30.150.1
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.65-30.150.1
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.65-30.150.1
Ссылки
- CVE-2026-22021
- SUSE Bug 1262497
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-1.8.0_sr8.65-30.150.1
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-alsa-1.8.0_sr8.65-30.150.1
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-devel-1.8.0_sr8.65-30.150.1
SUSE Linux Enterprise Server 12 SP5-LTSS:java-1_8_0-ibm-plugin-1.8.0_sr8.65-30.150.1
Ссылки
- CVE-2026-34268
- SUSE Bug 1262500