openSUSE-SU-2026:21440-1

Опубликовано: 24 июл. 2026

Источник: suse-cvrf

Описание

Security update for java-17-openjdk

This update for java-17-openjdk fixes the following issues

Upgrade to upstream tag jdk-17.0.20+8 (July 2026 CPU)
CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994).
CVE-2026-46917: partial denial of service via TLS (bsc#1272223).
CVE-2026-46968: unauthorized creation, deletion or modification access to critical data (bsc#1272224).
CVE-2026-47010: unauthorized update, insert or delete access (bsc#1272225).
CVE-2026-47021: partial denial of service via multiple network protocols (bsc#1272227).
CVE-2026-47027: partial denial of service via multiple network protocols (bsc#1272228).
CVE-2026-47059: partial denial of service via multiple network protocols (bsc#1272235).
CVE-2026-47063: unauthorized creation, deletion or modification access to critical data (bsc#1272236).
CVE-2026-60147: unauthorized update, insert or delete access (bsc#1272237).

Список пакетов

openSUSE Leap 16.0

java-17-openjdk-17.0.20.0-160000.1.1

java-17-openjdk-demo-17.0.20.0-160000.1.1

java-17-openjdk-devel-17.0.20.0-160000.1.1

java-17-openjdk-headless-17.0.20.0-160000.1.1

java-17-openjdk-javadoc-17.0.20.0-160000.1.1

java-17-openjdk-jmods-17.0.20.0-160000.1.1

java-17-openjdk-src-17.0.20.0-160000.1.1

Ссылки

https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1264994
SUSE Bug 1264994
https://bugzilla.suse.com/1272223
SUSE Bug 1272223
https://bugzilla.suse.com/1272224
SUSE Bug 1272224
https://bugzilla.suse.com/1272225
SUSE Bug 1272225
https://bugzilla.suse.com/1272227
SUSE Bug 1272227
https://bugzilla.suse.com/1272228
SUSE Bug 1272228
https://bugzilla.suse.com/1272235
SUSE Bug 1272235
https://bugzilla.suse.com/1272236
SUSE Bug 1272236
https://bugzilla.suse.com/1272237
SUSE Bug 1272237
https://www.suse.com/security/cve/CVE-2026-41254/
SUSE CVE CVE-2026-41254 page
https://www.suse.com/security/cve/CVE-2026-46917/
SUSE CVE CVE-2026-46917 page
https://www.suse.com/security/cve/CVE-2026-46968/
SUSE CVE CVE-2026-46968 page
https://www.suse.com/security/cve/CVE-2026-47010/
SUSE CVE CVE-2026-47010 page
https://www.suse.com/security/cve/CVE-2026-47021/
SUSE CVE CVE-2026-47021 page
https://www.suse.com/security/cve/CVE-2026-47027/
SUSE CVE CVE-2026-47027 page
https://www.suse.com/security/cve/CVE-2026-47059/
SUSE CVE CVE-2026-47059 page
https://www.suse.com/security/cve/CVE-2026-47063/
SUSE CVE CVE-2026-47063 page
https://www.suse.com/security/cve/CVE-2026-60147/
SUSE CVE CVE-2026-60147 page

Описание

Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.

Затронутые продукты

openSUSE Leap 16.0:java-17-openjdk-17.0.20.0-160000.1.1

openSUSE Leap 16.0:java-17-openjdk-demo-17.0.20.0-160000.1.1

openSUSE Leap 16.0:java-17-openjdk-devel-17.0.20.0-160000.1.1

openSUSE Leap 16.0:java-17-openjdk-headless-17.0.20.0-160000.1.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-41254.html
CVE-2026-41254
https://bugzilla.suse.com/1264994
SUSE Bug 1264994
https://bugzilla.suse.com/1272458
SUSE Bug 1272458

Описание

unknown

Затронутые продукты

openSUSE Leap 16.0:java-17-openjdk-17.0.20.0-160000.1.1

openSUSE Leap 16.0:java-17-openjdk-demo-17.0.20.0-160000.1.1

openSUSE Leap 16.0:java-17-openjdk-devel-17.0.20.0-160000.1.1

openSUSE Leap 16.0:java-17-openjdk-headless-17.0.20.0-160000.1.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-46917.html
CVE-2026-46917
https://bugzilla.suse.com/1272223
SUSE Bug 1272223

Описание

unknown

Затронутые продукты

openSUSE Leap 16.0:java-17-openjdk-17.0.20.0-160000.1.1

openSUSE Leap 16.0:java-17-openjdk-demo-17.0.20.0-160000.1.1

openSUSE Leap 16.0:java-17-openjdk-devel-17.0.20.0-160000.1.1

openSUSE Leap 16.0:java-17-openjdk-headless-17.0.20.0-160000.1.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-46968.html
CVE-2026-46968
https://bugzilla.suse.com/1272224
SUSE Bug 1272224

Описание

unknown

Затронутые продукты

openSUSE Leap 16.0:java-17-openjdk-17.0.20.0-160000.1.1

openSUSE Leap 16.0:java-17-openjdk-demo-17.0.20.0-160000.1.1

openSUSE Leap 16.0:java-17-openjdk-devel-17.0.20.0-160000.1.1

openSUSE Leap 16.0:java-17-openjdk-headless-17.0.20.0-160000.1.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-47010.html
CVE-2026-47010
https://bugzilla.suse.com/1272225
SUSE Bug 1272225

Описание

unknown

Затронутые продукты

openSUSE Leap 16.0:java-17-openjdk-17.0.20.0-160000.1.1

openSUSE Leap 16.0:java-17-openjdk-demo-17.0.20.0-160000.1.1

openSUSE Leap 16.0:java-17-openjdk-devel-17.0.20.0-160000.1.1

openSUSE Leap 16.0:java-17-openjdk-headless-17.0.20.0-160000.1.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-47021.html
CVE-2026-47021
https://bugzilla.suse.com/1272227
SUSE Bug 1272227

Описание

unknown

Затронутые продукты

openSUSE Leap 16.0:java-17-openjdk-17.0.20.0-160000.1.1

openSUSE Leap 16.0:java-17-openjdk-demo-17.0.20.0-160000.1.1

openSUSE Leap 16.0:java-17-openjdk-devel-17.0.20.0-160000.1.1

openSUSE Leap 16.0:java-17-openjdk-headless-17.0.20.0-160000.1.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-47027.html
CVE-2026-47027
https://bugzilla.suse.com/1272228
SUSE Bug 1272228

Описание

unknown

Затронутые продукты

openSUSE Leap 16.0:java-17-openjdk-17.0.20.0-160000.1.1

openSUSE Leap 16.0:java-17-openjdk-demo-17.0.20.0-160000.1.1

openSUSE Leap 16.0:java-17-openjdk-devel-17.0.20.0-160000.1.1

openSUSE Leap 16.0:java-17-openjdk-headless-17.0.20.0-160000.1.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-47059.html
CVE-2026-47059
https://bugzilla.suse.com/1272235
SUSE Bug 1272235

Описание

unknown

Затронутые продукты

openSUSE Leap 16.0:java-17-openjdk-17.0.20.0-160000.1.1

openSUSE Leap 16.0:java-17-openjdk-demo-17.0.20.0-160000.1.1

openSUSE Leap 16.0:java-17-openjdk-devel-17.0.20.0-160000.1.1

openSUSE Leap 16.0:java-17-openjdk-headless-17.0.20.0-160000.1.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-47063.html
CVE-2026-47063
https://bugzilla.suse.com/1272236
SUSE Bug 1272236

Описание

unknown

Затронутые продукты

openSUSE Leap 16.0:java-17-openjdk-17.0.20.0-160000.1.1

openSUSE Leap 16.0:java-17-openjdk-demo-17.0.20.0-160000.1.1

openSUSE Leap 16.0:java-17-openjdk-devel-17.0.20.0-160000.1.1

openSUSE Leap 16.0:java-17-openjdk-headless-17.0.20.0-160000.1.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-60147.html
CVE-2026-60147
https://bugzilla.suse.com/1272237
SUSE Bug 1272237

openSUSE-SU-2026:21440-1

Описание

Список пакетов

openSUSE Leap 16.0

Ссылки

Уязвимость: CVE-2026-41254

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-46917

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-46968

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-47010

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-47021

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-47027

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-47059

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-47063

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-60147

Описание

Затронутые продукты

Ссылки