Описание
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues:
Update to Java 8.0 Service Refresh 8 Fix Pack 71 (bsc#1277833):
- CVE-2026-8400: flaw in the ORB component may allow a malicious IIOP server to induce loading and instantation of arbitrary classes (bsc#1274276).
- CVE-2026-16243:
arraycmpSIMD implementation for Z and P does not check if the number of bytes to compare is zero (bsc#1274275). - CVE-2026-16440: a crafted .class file with deeply nested annotations causes a segmentation fault (bsc#1275779).
- CVE-2026-60589: OpenJDK: Improve Resource Resolving (bsc#1275777).
- CVE-2026-61308: OpenJDK: Enhance HTTP Connections (bsc#1275778).
- CVE-2026-70906: OpenJDK: Improve font loading (bsc#1275763).
- CVE-2026-70907: OpenJDK: Enhance TLS server (bsc#1275764).
- CVE-2026-71054: Vulnerability in Oracle Java SE (component: 2D) (bsc#1277019).
- Oracle August 18 2026 CSPU and IBM Security Update August 2026 (bsc#1277833).
Список пакетов
SUSE Linux Enterprise Server 12 SP5-LTSS
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
Ссылки
- Link for SUSE-SU-2026:4107-1
- E-Mail link for SUSE-SU-2026:4107-1
- SUSE Security Ratings
- SUSE Bug 1274275
- SUSE Bug 1274276
- SUSE Bug 1275763
- SUSE Bug 1275764
- SUSE Bug 1275777
- SUSE Bug 1275778
- SUSE Bug 1275779
- SUSE Bug 1277019
- SUSE Bug 1277833
- SUSE CVE CVE-2026-16243 page
- SUSE CVE CVE-2026-16440 page
- SUSE CVE CVE-2026-60589 page
- SUSE CVE CVE-2026-61308 page
- SUSE CVE CVE-2026-70906 page
- SUSE CVE CVE-2026-70907 page
- SUSE CVE CVE-2026-71054 page
- SUSE CVE CVE-2026-8400 page
Описание
In Eclipse OMR versions up to 0.11, the arraycmp SIMD implementation for Z and P does not check if the number of bytes to compare is zero.
Затронутые продукты
Ссылки
- CVE-2026-16243
- SUSE Bug 1272458
- SUSE Bug 1274275
Описание
In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault.
Затронутые продукты
Ссылки
- CVE-2026-16440
- SUSE Bug 1275779
Описание
unknown
Затронутые продукты
Ссылки
- CVE-2026-60589
- SUSE Bug 1275777
Описание
unknown
Затронутые продукты
Ссылки
- CVE-2026-61308
- SUSE Bug 1275778
Описание
unknown
Затронутые продукты
Ссылки
- CVE-2026-70906
- SUSE Bug 1275763
Описание
unknown
Затронутые продукты
Ссылки
- CVE-2026-70907
- SUSE Bug 1275764
Описание
Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 7u511. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L).
Затронутые продукты
Ссылки
- CVE-2026-71054
- SUSE Bug 1277019
Описание
IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a flaw in the ORB component in IBM SDK, Java Technology Edition, may allow a malicious IIOP server to induce loading and instantation of arbitrary classes.
Затронутые продукты
Ссылки
- CVE-2026-8400
- SUSE Bug 1272458
- SUSE Bug 1274276