{"id":"SUSE-SU-2026:3453-1","summary":"Security update for java-11-openjdk","details":"This update for java-11-openjdk fixes the following issues:\n\nUpgrade to upstream tag jdk-11.0.32+9 (July 2026 CPU).\n\nSecurity issues fixed:\n\n- CVE-2026-41254: lcms: information disclosure and denial of service via integer overflow in `CubeSize` (bsc#1264994).\n- CVE-2026-46917: unauthenticated attacker with network access via TLS can cause a partial denial of service\n  (bsc#1272223).\n- CVE-2026-46968: unauthenticated attacker with network access via TLS can gain unauthorized creation, deletion or\n  modification access to critical data(bsc#1272224).\n- CVE-2026-47010: unauthenticated attacker with network access via multiple protocols can gain unauthorized update,\n  insert or delete access to some data (bsc#1272225).\n- CVE-2026-47021: unauthenticated attacker with network access via multiple protocols can cause a partial denial of\n  service (bsc#1272227).\n- CVE-2026-47027: unauthenticated attacker with network access via multiple protocols can cause a partial denial of\n  service (bsc#1272228).\n- CVE-2026-47057: unauthenticated attacker with network access via multiple protocols can cause a hang or frequently\n  repeatable crash  (bsc#1272233).\n- CVE-2026-47058: unauthenticated attacker with network access via multiple protocols can gain unauthorized creation,\n  deletion or modification access to critical data (bsc#1272234).\n- CVE-2026-47059: unauthenticated attacker with network access via multiple protocols can cause a partial denial of\n  service (bsc#1272235).\n- CVE-2026-47063: unauthenticated attacker with network access via multiple protocols can gain unauthorized creation,\n  deletion or modification access to critical data (bsc#1272236).\n- CVE-2026-60147: unauthenticated attacker with network access via multiple protocols can gain unauthorized update,\n  insert, delete and read access to some(bsc#1272237).\n\nOther updates and bugfixes:\n\n- Errors from update-alternatives when installing java-25-openjdk (bsc#1267355).\n- Upgrade to upstream tag jdk-11.0.32+9 (July 2026 CPU):\n   + JDK-8200566: DistributionPointFetcher fails to fetch CRLs if\n     the DistributionPoints field contains more than one\n     DistributionPoint and the first one fails\n   + JDK-8242314: use reproducible random in vmTestbase shared code\n   + JDK-8252412: [macos11] system dynamic libraries removed from\n     filesystem\n   + JDK-8275405: Linking error for classes with lambda template\n     parameters and virtual functions\n   + JDK-8275843: Random crashes while the UI code is executed\n   + JDK-8286562: GCC 12 reports some compiler warnings\n   + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java\n     fails new assert: assert((uint)t \u003c T_CONFLICT + 1) failed:\n     invalid type #\n   + JDK-8292177: InitialSecurityProperty JFR event\n   + JDK-8293691: converting a defined BasicType value to a string\n     should not crash the VM\n   + JDK-8298730: Refactor subsystem_file_line_contents and add\n     docs and tests\n   + JDK-8314555: Build with mawk fails on Windows\n   + JDK-8323672: Suppress unwanted autoconf added flags in CC and\n     CXX\n   + JDK-8324243: Compilation failures in java.desktop module with\n     gcc 14\n   + JDK-8325766: Extend CertificateBuilder to create trust and end\n     entity certificates programmatically\n   + JDK-8327071: [Testbug] g-tests for cgroup leave files in /tmp\n     on linux\n   + JDK-8336498: [macos] [build]: install-file macro may run into\n     permission denied error\n   + JDK-8342858: Make target mac-jdk-bundle fails on chmod command\n   + JDK-8347740: java/io/File/createTempFile/SpecialTempFile.java\n     failing\n   + JDK-8347811: Container detection code for cgroups v2 should\n     use cgroup.controllers\n   + JDK-8349988: Change cgroup version detection logic to not\n     depend on /proc/cgroups\n   + JDK-8350749: Upgrade JLine to 3.29.0\n   + JDK-8351359: OperatingSystemMXBean: values from getCpuLoad and\n     getProcessCpuLoad are stale after 24.8 days (Windows)\n   + JDK-8353714: [17u] Backport of 8347740 incomplete\n   + JDK-8354878: File Leak in\n     CgroupSubsystemFactory::determine_type of\n     cgroupSubsystem_linux.cpp:300\n   + JDK-8355077: Compiler error at splashscreen_gif.c due to\n     unterminated string initialization\n   + JDK-8363966: GHA: Switch cross-compiling sysroots to Debian\n     trixie\n   + JDK-8365098: make/RunTests.gmk generates a wrong path to test\n      artifacts on Alpine\n   + JDK-8365660: test/jdk/sun/security/pkcs11/KeyAgreement/ tests\n     skipped without SkipExceprion\n   + JDK-8366159: SkippedException is treated as a pass for\n     pkcs11/KeyStore, pkcs11/SecretKeyFactory and\n     pkcs11/SecureRandom\n   + JDK-8367766: [11u] src/jdk.crypto.ec/share/native/libsunec/\n     /impl/mpi.c:321:3: error: 'tmp.dp' may be used uninitialized\n   + JDK-8368041: Enhance TLS certificate handling\n   + JDK-8368670: Deadlock in JFR on event register + class load\n   + JDK-8369032: Add test to ensure serialized ICC_Profile stores\n     only necessary optional data\n   + JDK-8369506: Bytecode rewriting causes Java heap corruption on\n     AArch64\n   + JDK-8371559: Intermittent timeouts in test\n     javax/net/ssl/Stapling/HttpsUrlConnClient.java\n   + JDK-8372351: Add 2 WISeKey roots\n   + JDK-8373275: Improve DTLS handshaking\n   + JDK-8374058: Enhance JPEG handling\n   + JDK-8374888: Implement internal test cache to help\n     UserIterCount test performance\n   + JDK-8375065: Update LCMS to 2.18\n   + JDK-8377158: Enhance XBM image support\n   + JDK-8377167: javax/imageio/ReadAbortTest.java throw NPE when\n     x11 unavailable\n   + JDK-8377498: Improve HttpServer handling\n   + JDK-8377833: Enhance Jar file processing\n   + JDK-8378218: MSYS2 reports cygwin triplet causing bash\n     configure failure\n   + JDK-8378631: Update Zlib Data Compression Library to Version\n     1.3.2\n   + JDK-8378687: Improve delegation of HttpURLConnection\n   + JDK-8378823: AIX build fails after zlib updated by JDK-8378631\n   + JDK-8379685: Bump update version of OpenJDK: 11.0.32\n   + JDK-8380672: Improve certification checking\n   + JDK-8380947: Add pull request template\n   + JDK-8381039: Enhance AWT ImagingLib\n   + JDK-8381049: Enhance Jar handling\n   + JDK-8381185: Improve Nashorn index handling\n   + JDK-8381195: Enhance Dataview Implementation\n   + JDK-8381519: Enhance Der Value Handling\n   + JDK-8381551: DisabledCurve test fails on Windows after\n     disabling SHA1\n   + JDK-8381796: Enhance Certificate parsing\n   + JDK-8383175: (tz) Update Timezone Data to 2026b\n   + JDK-8383354: Update LCMS to 2.19.1\n   + JDK-8383473: Follow on from tzdata2026b time change to include\n     temporary hack BC time change\n   + JDK-8384158: GHA: Downgrade Windows GHA runners to\n     windows-2022 temporarily\n   + JDK-8384495: Update Libpng to 1.6.58\n   + JDK-8384902: Update GIFlib to 6.1.3\n   + JDK-8386551: Windows build broken because of MSys2/Make update\n   + JDK-8387976: [11u] Remove designator\n     DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.32\n- Make post scripts less noisy (bsc#1267355).\n- Use libalternatives instead of update-alternatives for distributions where libalternatives is available.\n","modified":"2026-08-04T11:45:06.572629119Z","published":"2026-08-03T11:45:05Z","related":["CVE-2026-41254","CVE-2026-46917","CVE-2026-46968","CVE-2026-47010","CVE-2026-47021","CVE-2026-47027","CVE-2026-47057","CVE-2026-47058","CVE-2026-47059","CVE-2026-47063","CVE-2026-60147"],"upstream":["CVE-2026-41254","CVE-2026-46917","CVE-2026-46968","CVE-2026-47010","CVE-2026-47021","CVE-2026-47027","CVE-2026-47057","CVE-2026-47058","CVE-2026-47059","CVE-2026-47063","CVE-2026-60147"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263453-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1264994"},{"type":"REPORT","url":"https://bugzilla.suse.com/1267355"},{"type":"REPORT","url":"https://bugzilla.suse.com/1272223"},{"type":"REPORT","url":"https://bugzilla.suse.com/1272224"},{"type":"REPORT","url":"https://bugzilla.suse.com/1272225"},{"type":"REPORT","url":"https://bugzilla.suse.com/1272227"},{"type":"REPORT","url":"https://bugzilla.suse.com/1272228"},{"type":"REPORT","url":"https://bugzilla.suse.com/1272233"},{"type":"REPORT","url":"https://bugzilla.suse.com/1272234"},{"type":"REPORT","url":"https://bugzilla.suse.com/1272235"},{"type":"REPORT","url":"https://bugzilla.suse.com/1272236"},{"type":"REPORT","url":"https://bugzilla.suse.com/1272237"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-41254"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-46917"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-46968"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-47010"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-47021"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-47027"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-47057"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-47058"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-47059"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-47063"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-60147"}],"affected":[{"package":{"name":"java-11-openjdk","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP7","purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32.0-150000.3.141.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk-demo":"11.0.32.0-150000.3.141.1","java-11-openjdk-devel":"11.0.32.0-150000.3.141.1","java-11-openjdk-headless":"11.0.32.0-150000.3.141.1","java-11-openjdk":"11.0.32.0-150000.3.141.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3453-1.json"}},{"package":{"name":"java-11-openjdk","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32.0-150000.3.141.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk-javadoc":"11.0.32.0-150000.3.141.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3453-1.json"}},{"package":{"name":"java-11-openjdk","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32.0-150000.3.141.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk-demo":"11.0.32.0-150000.3.141.1","java-11-openjdk-devel":"11.0.32.0-150000.3.141.1","java-11-openjdk-headless":"11.0.32.0-150000.3.141.1","java-11-openjdk":"11.0.32.0-150000.3.141.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3453-1.json"}},{"package":{"name":"java-11-openjdk","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32.0-150000.3.141.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk-headless":"11.0.32.0-150000.3.141.1","java-11-openjdk":"11.0.32.0-150000.3.141.1","java-11-openjdk-demo":"11.0.32.0-150000.3.141.1","java-11-openjdk-devel":"11.0.32.0-150000.3.141.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3453-1.json"}},{"package":{"name":"java-11-openjdk","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32.0-150000.3.141.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk":"11.0.32.0-150000.3.141.1","java-11-openjdk-demo":"11.0.32.0-150000.3.141.1","java-11-openjdk-devel":"11.0.32.0-150000.3.141.1","java-11-openjdk-headless":"11.0.32.0-150000.3.141.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3453-1.json"}},{"package":{"name":"java-11-openjdk","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32.0-150000.3.141.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk-demo":"11.0.32.0-150000.3.141.1","java-11-openjdk-devel":"11.0.32.0-150000.3.141.1","java-11-openjdk-headless":"11.0.32.0-150000.3.141.1","java-11-openjdk":"11.0.32.0-150000.3.141.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3453-1.json"}},{"package":{"name":"java-11-openjdk","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32.0-150000.3.141.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk-devel":"11.0.32.0-150000.3.141.1","java-11-openjdk-headless":"11.0.32.0-150000.3.141.1","java-11-openjdk":"11.0.32.0-150000.3.141.1","java-11-openjdk-demo":"11.0.32.0-150000.3.141.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3453-1.json"}},{"package":{"name":"java-11-openjdk","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32.0-150000.3.141.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk-headless":"11.0.32.0-150000.3.141.1","java-11-openjdk":"11.0.32.0-150000.3.141.1","java-11-openjdk-demo":"11.0.32.0-150000.3.141.1","java-11-openjdk-devel":"11.0.32.0-150000.3.141.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3453-1.json"}},{"package":{"name":"java-11-openjdk","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32.0-150000.3.141.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk-devel":"11.0.32.0-150000.3.141.1","java-11-openjdk-headless":"11.0.32.0-150000.3.141.1","java-11-openjdk":"11.0.32.0-150000.3.141.1","java-11-openjdk-demo":"11.0.32.0-150000.3.141.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3453-1.json"}},{"package":{"name":"java-11-openjdk","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32.0-150000.3.141.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk-headless":"11.0.32.0-150000.3.141.1","java-11-openjdk":"11.0.32.0-150000.3.141.1","java-11-openjdk-demo":"11.0.32.0-150000.3.141.1","java-11-openjdk-devel":"11.0.32.0-150000.3.141.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3453-1.json"}},{"package":{"name":"java-11-openjdk","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32.0-150000.3.141.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk":"11.0.32.0-150000.3.141.1","java-11-openjdk-demo":"11.0.32.0-150000.3.141.1","java-11-openjdk-devel":"11.0.32.0-150000.3.141.1","java-11-openjdk-headless":"11.0.32.0-150000.3.141.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3453-1.json"}},{"package":{"name":"java-11-openjdk","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","purl":"pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.32.0-150000.3.141.1"}]}],"ecosystem_specific":{"binaries":[{"java-11-openjdk":"11.0.32.0-150000.3.141.1","java-11-openjdk-demo":"11.0.32.0-150000.3.141.1","java-11-openjdk-devel":"11.0.32.0-150000.3.141.1","java-11-openjdk-headless":"11.0.32.0-150000.3.141.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3453-1.json"}}],"schema_version":"1.8.0"}