SUSE-SU-2026:3614-1

Описание

This update for java-1_8_0-ibm fixes the following issues:

Update to Java 8.0 Service Refresh 8 Fix Pack 70 (bsc#1273223).

• CVE-2026-16243: inconsistent handling of zero length data in arraycmp of the SIMD evaluator (bsc#1274275).
• CVE-2026-16439: using -Xtrace to trace method arguments can lead to buffer underflow (bsc#1272250).
• CVE-2026-16441: method resolution default method precedence failure (bsc#1272248).
• CVE-2026-41254: lcms2: information disclosure or denial of service via integer overflow in CubeSize (bsc#1272459).
• CVE-2026-46968: unauthorized creation, deletion or modification access to critical data (bsc#1272224).
• CVE-2026-47010: unauthorized update, insert or delete access to data (bsc#1272225).
• CVE-2026-47021: partial denial of service via multiple network protocols (bsc#1272227).
• CVE-2026-47027: partial denial of service via multiple network protocols (bsc#1272228).
• CVE-2026-47057: hang or frequently repeatable crash via multiple network protocols (bsc#1272233).
• CVE-2026-47058: unauthorized creation, deletion or modification access to critical data (bsc#1272234).
• CVE-2026-47059: partial denial of service via multiple network protocols (bsc#1272235).
• CVE-2026-47063: unauthorized creation, deletion or modification access to critical data (bsc#1272236).
• CVE-2026-60147: unauthorized update, insert or delete access to data (bsc#1272237).
• CVE-2026-8400: malicious IIOP server can induce loading and instantation of arbitrary classes (bsc#1274276).