exploitDog

SUSE-SU-2026:4153-1

Опубликовано: 14 сент. 2026

Источник: suse-cvrf

Описание

Security update for java-1_8_0-ibm

This update for java-1_8_0-ibm fixes the following issues:

Update to Java 8.0 Service Refresh 8 Fix Pack 71 (bsc#1277833):

CVE-2026-8400: flaw in the ORB component may allow a malicious IIOP server to induce loading and instantation of arbitrary classes (bsc#1274276).
CVE-2026-16243: arraycmp SIMD implementation for Z and P does not check if the number of bytes to compare is zero (bsc#1274275).
CVE-2026-16440: a crafted .class file with deeply nested annotations causes a segmentation fault (bsc#1275779).
CVE-2026-60589: OpenJDK: Improve Resource Resolving (bsc#1275777).
CVE-2026-61308: OpenJDK: Enhance HTTP Connections (bsc#1275778).
CVE-2026-70906: OpenJDK: Improve font loading (bsc#1275763).
CVE-2026-70907: OpenJDK: Enhance TLS server (bsc#1275764).
CVE-2026-71054: Vulnerability in Oracle Java SE (component: 2D) (bsc#1277019).
Oracle August 18 2026 CSPU and IBM Security Update August 2026 (bsc#1277833).

Список пакетов

Image SLES15-SP6-SAP

java-1_8_0-ibm-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-devel-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-plugin-1.8.0_sr8.71-150000.3.125.1

Image SLES15-SP6-SAP-Azure

java-1_8_0-ibm-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-devel-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-plugin-1.8.0_sr8.71-150000.3.125.1

Image SLES15-SP6-SAPCAL

java-1_8_0-ibm-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-devel-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-plugin-1.8.0_sr8.71-150000.3.125.1

Image SLES15-SP6-SAPCAL-Azure

java-1_8_0-ibm-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-devel-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-plugin-1.8.0_sr8.71-150000.3.125.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

java-1_8_0-ibm-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-alsa-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-devel-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-plugin-1.8.0_sr8.71-150000.3.125.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

java-1_8_0-ibm-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-alsa-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-devel-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-plugin-1.8.0_sr8.71-150000.3.125.1

SUSE Linux Enterprise Module for Legacy 15 SP7

java-1_8_0-ibm-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-alsa-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-demo-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-devel-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-plugin-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-src-1.8.0_sr8.71-150000.3.125.1

SUSE Linux Enterprise Server 15 SP4-LTSS

java-1_8_0-ibm-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-alsa-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-devel-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-plugin-1.8.0_sr8.71-150000.3.125.1

SUSE Linux Enterprise Server 15 SP5-LTSS

java-1_8_0-ibm-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-alsa-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-devel-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-plugin-1.8.0_sr8.71-150000.3.125.1

SUSE Linux Enterprise Server 15 SP6-LTSS

java-1_8_0-ibm-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-alsa-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-devel-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-plugin-1.8.0_sr8.71-150000.3.125.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

java-1_8_0-ibm-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-alsa-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-devel-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-plugin-1.8.0_sr8.71-150000.3.125.1

SUSE Linux Enterprise Server for SAP Applications 15 SP5

java-1_8_0-ibm-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-alsa-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-devel-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-plugin-1.8.0_sr8.71-150000.3.125.1

SUSE Linux Enterprise Server for SAP Applications 15 SP6

java-1_8_0-ibm-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-alsa-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-devel-1.8.0_sr8.71-150000.3.125.1

java-1_8_0-ibm-plugin-1.8.0_sr8.71-150000.3.125.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20264153-1/
Link for SUSE-SU-2026:4153-1
https://www.suse.com/support/update/announcement/2026/suse-su-20264153-1/
E-Mail link for SUSE-SU-2026:4153-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1274275
SUSE Bug 1274275
https://bugzilla.suse.com/1274276
SUSE Bug 1274276
https://bugzilla.suse.com/1275763
SUSE Bug 1275763
https://bugzilla.suse.com/1275764
SUSE Bug 1275764
https://bugzilla.suse.com/1275777
SUSE Bug 1275777
https://bugzilla.suse.com/1275778
SUSE Bug 1275778
https://bugzilla.suse.com/1275779
SUSE Bug 1275779
https://bugzilla.suse.com/1277019
SUSE Bug 1277019
https://bugzilla.suse.com/1277833
SUSE Bug 1277833
https://www.suse.com/security/cve/CVE-2026-16243/
SUSE CVE CVE-2026-16243 page
https://www.suse.com/security/cve/CVE-2026-16440/
SUSE CVE CVE-2026-16440 page
https://www.suse.com/security/cve/CVE-2026-60589/
SUSE CVE CVE-2026-60589 page
https://www.suse.com/security/cve/CVE-2026-61308/
SUSE CVE CVE-2026-61308 page
https://www.suse.com/security/cve/CVE-2026-70906/
SUSE CVE CVE-2026-70906 page
https://www.suse.com/security/cve/CVE-2026-70907/
SUSE CVE CVE-2026-70907 page
https://www.suse.com/security/cve/CVE-2026-71054/
SUSE CVE CVE-2026-71054 page
https://www.suse.com/security/cve/CVE-2026-8400/
SUSE CVE CVE-2026-8400 page

Описание

In Eclipse OMR versions up to 0.11, the arraycmp SIMD implementation for Z and P does not check if the number of bytes to compare is zero.

Затронутые продукты

Image SLES15-SP6-SAP-Azure:java-1_8_0-ibm-1.8.0_sr8.71-150000.3.125.1

Image SLES15-SP6-SAP-Azure:java-1_8_0-ibm-devel-1.8.0_sr8.71-150000.3.125.1

Image SLES15-SP6-SAP-Azure:java-1_8_0-ibm-plugin-1.8.0_sr8.71-150000.3.125.1

Image SLES15-SP6-SAP:java-1_8_0-ibm-1.8.0_sr8.71-150000.3.125.1

Ссылки

Описание

In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault.

Затронутые продукты

Image SLES15-SP6-SAP-Azure:java-1_8_0-ibm-1.8.0_sr8.71-150000.3.125.1

Image SLES15-SP6-SAP-Azure:java-1_8_0-ibm-devel-1.8.0_sr8.71-150000.3.125.1

Image SLES15-SP6-SAP-Azure:java-1_8_0-ibm-plugin-1.8.0_sr8.71-150000.3.125.1

Image SLES15-SP6-SAP:java-1_8_0-ibm-1.8.0_sr8.71-150000.3.125.1

Ссылки

Описание

unknown

Затронутые продукты

Image SLES15-SP6-SAP-Azure:java-1_8_0-ibm-1.8.0_sr8.71-150000.3.125.1

Image SLES15-SP6-SAP-Azure:java-1_8_0-ibm-devel-1.8.0_sr8.71-150000.3.125.1

Image SLES15-SP6-SAP-Azure:java-1_8_0-ibm-plugin-1.8.0_sr8.71-150000.3.125.1

Image SLES15-SP6-SAP:java-1_8_0-ibm-1.8.0_sr8.71-150000.3.125.1

Ссылки

Описание

unknown

Затронутые продукты

Image SLES15-SP6-SAP-Azure:java-1_8_0-ibm-1.8.0_sr8.71-150000.3.125.1

Image SLES15-SP6-SAP-Azure:java-1_8_0-ibm-devel-1.8.0_sr8.71-150000.3.125.1

Image SLES15-SP6-SAP-Azure:java-1_8_0-ibm-plugin-1.8.0_sr8.71-150000.3.125.1

Image SLES15-SP6-SAP:java-1_8_0-ibm-1.8.0_sr8.71-150000.3.125.1

Ссылки

Описание

unknown

Затронутые продукты

Image SLES15-SP6-SAP-Azure:java-1_8_0-ibm-1.8.0_sr8.71-150000.3.125.1

Image SLES15-SP6-SAP-Azure:java-1_8_0-ibm-devel-1.8.0_sr8.71-150000.3.125.1

Image SLES15-SP6-SAP-Azure:java-1_8_0-ibm-plugin-1.8.0_sr8.71-150000.3.125.1

Image SLES15-SP6-SAP:java-1_8_0-ibm-1.8.0_sr8.71-150000.3.125.1

Ссылки

Описание

unknown

Затронутые продукты

Image SLES15-SP6-SAP-Azure:java-1_8_0-ibm-1.8.0_sr8.71-150000.3.125.1

Image SLES15-SP6-SAP-Azure:java-1_8_0-ibm-devel-1.8.0_sr8.71-150000.3.125.1

Image SLES15-SP6-SAP-Azure:java-1_8_0-ibm-plugin-1.8.0_sr8.71-150000.3.125.1

Image SLES15-SP6-SAP:java-1_8_0-ibm-1.8.0_sr8.71-150000.3.125.1

Ссылки

Описание

Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 7u511. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L).

Затронутые продукты

Image SLES15-SP6-SAP-Azure:java-1_8_0-ibm-1.8.0_sr8.71-150000.3.125.1

Image SLES15-SP6-SAP-Azure:java-1_8_0-ibm-devel-1.8.0_sr8.71-150000.3.125.1

Image SLES15-SP6-SAP-Azure:java-1_8_0-ibm-plugin-1.8.0_sr8.71-150000.3.125.1

Image SLES15-SP6-SAP:java-1_8_0-ibm-1.8.0_sr8.71-150000.3.125.1

Ссылки

Описание

IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a flaw in the ORB component in IBM SDK, Java Technology Edition, may allow a malicious IIOP server to induce loading and instantation of arbitrary classes.

Затронутые продукты

Image SLES15-SP6-SAP-Azure:java-1_8_0-ibm-1.8.0_sr8.71-150000.3.125.1

Image SLES15-SP6-SAP-Azure:java-1_8_0-ibm-devel-1.8.0_sr8.71-150000.3.125.1

Image SLES15-SP6-SAP-Azure:java-1_8_0-ibm-plugin-1.8.0_sr8.71-150000.3.125.1

Image SLES15-SP6-SAP:java-1_8_0-ibm-1.8.0_sr8.71-150000.3.125.1

Ссылки

Уязвимость SUSE-SU-2026:4153-1