SUSE-SU-2026:4054-1

Dashboard / Vulnerabilities / SUSE-SU-2026:4054-1

SUSE-SU-2026:4054-1

Summary: Security update for java-1_8_0-openjdk

Details: This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u504 (icedtea 3.40.1). - CVE-2026-60589: unauthenticated attacker with network access via multiple protocols can gain unauthorized read access to sensitive data (bsc#1275777). - CVE-2026-61308: unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data (bsc#1275778). - CVE-2026-70907: unauthenticated attacker with network access via TLS can gain the ability to cause a partial denial of service (bsc#1275764). Changes for java-1_8_0-openjdk: - Version jdk8u504 (icedtea 3.40.1): * Import of OpenJDK 8 u504 build 01 + JDK-8382471: Improve Resource Resolving + JDK-8384708: Enhance HTTP Connections + JDK-8385390: Update FreeType to 2.14.3 + JDK-8386205: Enhance TLS server + JDK-8388811: [8u] VS2010 build broken by JDK-8374058 + JDK-8389477: Bump update version for OpenJDK: 8u504

References: https://www.suse.com/support/update/announcement/2026/suse-su-20264054-1/, https://bugzilla.suse.com/1275764, https://bugzilla.suse.com/1275777, https://bugzilla.suse.com/1275778, https://www.suse.com/security/cve/CVE-2026-60589, https://www.suse.com/security/cve/CVE-2026-61308, https://www.suse.com/security/cve/CVE-2026-70907