SUSE-SU-2026:3615-1

Опубликовано: 13 авг. 2026

Источник: suse-cvrf

Описание

Security update for java-1_8_0-ibm

This update for java-1_8_0-ibm fixes the following issues:

Update to Java 8.0 Service Refresh 8 Fix Pack 70 (bsc#1273223).

CVE-2026-16243: inconsistent handling of zero length data in arraycmp of the SIMD evaluator (bsc#1274275).
CVE-2026-16439: using -Xtrace to trace method arguments can lead to buffer underflow (bsc#1272250).
CVE-2026-16441: method resolution default method precedence failure (bsc#1272248).
CVE-2026-41254: lcms2: information disclosure or denial of service via integer overflow in CubeSize (bsc#1272459).
CVE-2026-46968: unauthorized creation, deletion or modification access to critical data (bsc#1272224).
CVE-2026-47010: unauthorized update, insert or delete access to data (bsc#1272225).
CVE-2026-47021: partial denial of service via multiple network protocols (bsc#1272227).
CVE-2026-47027: partial denial of service via multiple network protocols (bsc#1272228).
CVE-2026-47057: hang or frequently repeatable crash via multiple network protocols (bsc#1272233).
CVE-2026-47058: unauthorized creation, deletion or modification access to critical data (bsc#1272234).
CVE-2026-47059: partial denial of service via multiple network protocols (bsc#1272235).
CVE-2026-47063: unauthorized creation, deletion or modification access to critical data (bsc#1272236).
CVE-2026-60147: unauthorized update, insert or delete access to data (bsc#1272237).
CVE-2026-8400: malicious IIOP server can induce loading and instantation of arbitrary classes (bsc#1274276).

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

java-1_8_0-ibm-1.8.0_sr8.70-150000.3.119.1

java-1_8_0-ibm-alsa-1.8.0_sr8.70-150000.3.119.1

java-1_8_0-ibm-devel-1.8.0_sr8.70-150000.3.119.1

java-1_8_0-ibm-plugin-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

java-1_8_0-ibm-1.8.0_sr8.70-150000.3.119.1

java-1_8_0-ibm-alsa-1.8.0_sr8.70-150000.3.119.1

java-1_8_0-ibm-devel-1.8.0_sr8.70-150000.3.119.1

java-1_8_0-ibm-plugin-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise Module for Legacy 15 SP7

java-1_8_0-ibm-1.8.0_sr8.70-150000.3.119.1

java-1_8_0-ibm-alsa-1.8.0_sr8.70-150000.3.119.1

java-1_8_0-ibm-demo-1.8.0_sr8.70-150000.3.119.1

java-1_8_0-ibm-devel-1.8.0_sr8.70-150000.3.119.1

java-1_8_0-ibm-plugin-1.8.0_sr8.70-150000.3.119.1

java-1_8_0-ibm-src-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise Server 15 SP4-LTSS

java-1_8_0-ibm-1.8.0_sr8.70-150000.3.119.1

java-1_8_0-ibm-alsa-1.8.0_sr8.70-150000.3.119.1

java-1_8_0-ibm-devel-1.8.0_sr8.70-150000.3.119.1

java-1_8_0-ibm-plugin-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise Server 15 SP5-LTSS

java-1_8_0-ibm-1.8.0_sr8.70-150000.3.119.1

java-1_8_0-ibm-alsa-1.8.0_sr8.70-150000.3.119.1

java-1_8_0-ibm-devel-1.8.0_sr8.70-150000.3.119.1

java-1_8_0-ibm-plugin-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise Server 15 SP6-LTSS

java-1_8_0-ibm-1.8.0_sr8.70-150000.3.119.1

java-1_8_0-ibm-alsa-1.8.0_sr8.70-150000.3.119.1

java-1_8_0-ibm-devel-1.8.0_sr8.70-150000.3.119.1

java-1_8_0-ibm-plugin-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

java-1_8_0-ibm-1.8.0_sr8.70-150000.3.119.1

java-1_8_0-ibm-alsa-1.8.0_sr8.70-150000.3.119.1

java-1_8_0-ibm-devel-1.8.0_sr8.70-150000.3.119.1

java-1_8_0-ibm-plugin-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise Server for SAP Applications 15 SP5

java-1_8_0-ibm-1.8.0_sr8.70-150000.3.119.1

java-1_8_0-ibm-alsa-1.8.0_sr8.70-150000.3.119.1

java-1_8_0-ibm-devel-1.8.0_sr8.70-150000.3.119.1

java-1_8_0-ibm-plugin-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise Server for SAP Applications 15 SP6

java-1_8_0-ibm-1.8.0_sr8.70-150000.3.119.1

java-1_8_0-ibm-alsa-1.8.0_sr8.70-150000.3.119.1

java-1_8_0-ibm-devel-1.8.0_sr8.70-150000.3.119.1

java-1_8_0-ibm-plugin-1.8.0_sr8.70-150000.3.119.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20263615-1/
Link for SUSE-SU-2026:3615-1
https://lists.suse.com/pipermail/sle-security-updates/2026-August/028292.html
E-Mail link for SUSE-SU-2026:3615-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1272224
SUSE Bug 1272224
https://bugzilla.suse.com/1272225
SUSE Bug 1272225
https://bugzilla.suse.com/1272227
SUSE Bug 1272227
https://bugzilla.suse.com/1272228
SUSE Bug 1272228
https://bugzilla.suse.com/1272233
SUSE Bug 1272233
https://bugzilla.suse.com/1272234
SUSE Bug 1272234
https://bugzilla.suse.com/1272235
SUSE Bug 1272235
https://bugzilla.suse.com/1272236
SUSE Bug 1272236
https://bugzilla.suse.com/1272237
SUSE Bug 1272237
https://bugzilla.suse.com/1272248
SUSE Bug 1272248
https://bugzilla.suse.com/1272250
SUSE Bug 1272250
https://bugzilla.suse.com/1272459
SUSE Bug 1272459
https://bugzilla.suse.com/1273223
SUSE Bug 1273223
https://bugzilla.suse.com/1274275
SUSE Bug 1274275
https://bugzilla.suse.com/1274276
SUSE Bug 1274276
https://www.suse.com/security/cve/CVE-2026-16243/
SUSE CVE CVE-2026-16243 page
https://www.suse.com/security/cve/CVE-2026-16439/
SUSE CVE CVE-2026-16439 page

Описание

In Eclipse OMR versions up to 0.11, the arraycmp SIMD implementation for Z and P does not check if the number of bytes to compare is zero.

Затронутые продукты

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.70-150000.3.119.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-16243.html
CVE-2026-16243
https://bugzilla.suse.com/1272458
SUSE Bug 1272458
https://bugzilla.suse.com/1274275
SUSE Bug 1274275

Описание

In Eclipse OpenJ9 versions up to 0.60, using -Xtrace to trace method arguments can lead to buffer underflow.

Затронутые продукты

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.70-150000.3.119.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-16439.html
CVE-2026-16439
https://bugzilla.suse.com/1272250
SUSE Bug 1272250

Описание

In Eclipse OpenJ9 versions up to 0.60, when executing class files where a previously concrete superclass method has been recompiled as abstract, execution is incorrectly delegated to an interface default method.

Затронутые продукты

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.70-150000.3.119.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-16441.html
CVE-2026-16441
https://bugzilla.suse.com/1272248
SUSE Bug 1272248

Описание

Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.

Затронутые продукты

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.70-150000.3.119.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-41254.html
CVE-2026-41254
https://bugzilla.suse.com/1264994
SUSE Bug 1264994
https://bugzilla.suse.com/1272458
SUSE Bug 1272458

Описание

unknown

Затронутые продукты

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.70-150000.3.119.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-46968.html
CVE-2026-46968
https://bugzilla.suse.com/1272224
SUSE Bug 1272224

Описание

unknown

Затронутые продукты

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.70-150000.3.119.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-47010.html
CVE-2026-47010
https://bugzilla.suse.com/1272225
SUSE Bug 1272225

Описание

unknown

Затронутые продукты

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.70-150000.3.119.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-47021.html
CVE-2026-47021
https://bugzilla.suse.com/1272227
SUSE Bug 1272227

Описание

unknown

Затронутые продукты

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.70-150000.3.119.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-47027.html
CVE-2026-47027
https://bugzilla.suse.com/1272228
SUSE Bug 1272228

Описание

unknown

Затронутые продукты

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.70-150000.3.119.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-47057.html
CVE-2026-47057
https://bugzilla.suse.com/1272233
SUSE Bug 1272233

Описание

unknown

Затронутые продукты

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.70-150000.3.119.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-47058.html
CVE-2026-47058
https://bugzilla.suse.com/1272234
SUSE Bug 1272234

Описание

unknown

Затронутые продукты

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.70-150000.3.119.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-47059.html
CVE-2026-47059
https://bugzilla.suse.com/1272235
SUSE Bug 1272235

Описание

unknown

Затронутые продукты

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.70-150000.3.119.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-47063.html
CVE-2026-47063
https://bugzilla.suse.com/1272236
SUSE Bug 1272236

Описание

unknown

Затронутые продукты

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.70-150000.3.119.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-60147.html
CVE-2026-60147
https://bugzilla.suse.com/1272237
SUSE Bug 1272237

Описание

IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a flaw in the ORB component in IBM SDK, Java Technology Edition, may allow a malicious IIOP server to induce loading and instantation of arbitrary classes.

Затронутые продукты

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-alsa-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-devel-1.8.0_sr8.70-150000.3.119.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:java-1_8_0-ibm-plugin-1.8.0_sr8.70-150000.3.119.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-8400.html
CVE-2026-8400
https://bugzilla.suse.com/1272458
SUSE Bug 1272458
https://bugzilla.suse.com/1274276
SUSE Bug 1274276

SUSE-SU-2026:3615-1

Описание

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

SUSE Linux Enterprise Module for Legacy 15 SP7

SUSE Linux Enterprise Server 15 SP4-LTSS

SUSE Linux Enterprise Server 15 SP5-LTSS

SUSE Linux Enterprise Server 15 SP6-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP4

SUSE Linux Enterprise Server for SAP Applications 15 SP5

SUSE Linux Enterprise Server for SAP Applications 15 SP6

Ссылки

Уязвимость: CVE-2026-16243

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-16439

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-16441

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-41254

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-46968

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-47010

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-47021

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-47027

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-47057

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-47058

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-47059

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-47063

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-60147

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-8400

Описание

Затронутые продукты

Ссылки