RHSA-2026:42877: Important: SUSE Liberty Linux 8 security update for java-1.8.0

Lists.Suse • July 26, 2026

message (by thread): ESEA-2026:0136: Moderate: SUSE Liberty Linux 10 Important: cockpit-image-builder security update message (by thread): RHSA-2026:42877: Important: SUSE Liberty Linux 9 security update for java-1.8.0-openjdk Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] # security update for java-1.8.0-openjdk Announcement ID: RHSA-2026:42877 Rating: Important Cross-References: * CVE-2026-41254 * CVE-2026-46968 * CVE-2026-47010 * CVE-2026-47021 * CVE-2026-47027 * CVE-2026-47057 * CVE-2026-47058 * CVE-2026-47059 * CVE-2026-47063 * CVE-2026-60147 CVSS scores: * CVE-2026-41254 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41254 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-46968 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-46968 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-47010 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-47010 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-47021 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-47021 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-47027 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-47027 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-47057 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47057 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-47058 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-47058 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-47059 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-47059 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-47063 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-47063 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-60147 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-60147 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N Affected Products: * SUSE Liberty Linux 8 An update that solves 10 vulnerabilities can now be installed. ## Description: This security update provides a functional equivalent of RHSA-2026:42877. The original Red Hat(R) advisory is available from the Red Hat web site at ## Package List: * SUSE Liberty Linux 8: * java-1.8.0-openjdk 1.8.0.502.b07-1.1.el9 * java-1.8.0-openjdk-accessibility 1.8.0.502.b07-1.1.el8 * java-1.8.0-openjdk-accessibility-fastdebug 1.8.0.502.b07-1.1.el8 * java-1.8.0-openjdk-accessibility-slowdebug 1.8.0.502.b07-1.1.el8 * java-1.8.0-openjdk-demo 1.8.0.502.b07-1.1.el9 * java-1.8.0-openjdk-demo-fastdebug 1.8.0.502.b07-1.1.el9 * java-1.8.0-openjdk-demo-slowdebug 1.8.0.502.b07-1.1.el9 * java-1.8.0-openjdk-devel 1.8.0.502.b07-1.1.el9 * java-1.8.0-openjdk-devel-fastdebug 1.8.0.502.b07-1.1.el9 * java-1.8.0-openjdk-devel-slowdebug 1.8.0.502.b07-1.1.el9 * java-1.8.0-openjdk-fastdebug 1.8.0.502.b07-1.1.el9 * java-1.8.0-openjdk-headless 1.8.0.502.b07-1.1.el9 * java-1.8.0-openjdk-headless-fastdebug 1.8.0.502.b07-1.1.el9 * java-1.8.0-openjdk-headless-slowdebug 1.8.0.502.b07-1.1.el9 * java-1.8.0-openjdk-javadoc 1.8.0.502.b07-1.1.el9 * java-1.8.0-openjdk-javadoc-zip 1.8.0.502.b07-1.1.el9 * java-1.8.0-openjdk-slowdebug 1.8.0.502.b07-1.1.el9 * java-1.8.0-openjdk-src 1.8.0.502.b07-1.1.el9 * java-1.8.0-openjdk-src-fastdebug 1.8.0.502.b07-1.1.el9 * java-1.8.0-openjdk-src-slowdebug 1.8.0.502.b07-1.1.el9 ## References: * * * * * * * * * * message (by thread): ESEA-2026:0136: Moderate: SUSE Liberty Linux 10 Important: cockpit-image-builder security update message (by thread): RHSA-2026:42877: Important: SUSE Liberty Linux 9 security update for java-1.8.0-openjdk Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] More information the suse-liberty-linux-updates mailing list

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Security Updates for SUSE and openSUSE Java Vulnerabilities SUSE and openSUSE have released security updates addressing multiple vulnerabilities in Java. The updates affect java-1.8.0-openjdk and java-17-openjdk, with CVEs including CVE-2026-41254, CVE-2026-46968, and CVE-2026-47010. These vulnerabilities can lead to information disclosure, unauthorized access, and denial of service. The updates fix a total of 10 vulnerabilities in SUSE Liberty Linux 8 and several denial of service issues in openSUSE. Users are advised to apply these updates promptly to mitigate risks. The vulnerabilities were published between April and July 2026, with some having a CVSS score as high as 9.1. Affected systems include various versions of SUSE and openSUSE distributions. The updates are available for immediate installation. 24 sources 74

Extracted Entities

RHSA-2026:42877: Important: SUSE Liberty Linux 8 security update for java-1.8.0

The full story

Extracted Entities

CVEs (10)

IP Addresses (1)

Platforms (3)