Skip to content
Critical Security Updates for SUSE and openSUSE Java Vulnerabilities

Critical Security Updates for SUSE and openSUSE Java Vulnerabilities

First seen 27 Jul 2026, 08:31 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •July 28, 2026 at 07:47 UTC
  • •SUSE and openSUSE released critical updates for Java vulnerabilities affecting multiple versions.
  • •Key CVEs include CVE-2026-41254 and CVE-2026-46968, with impacts ranging from information disclosure to denial of service.
  • •Users are urged to apply the updates immediately to mitigate potential risks.

SUSE and openSUSE have released security updates addressing multiple vulnerabilities in Java. The updates affect java-1.8.0-openjdk and java-17-openjdk, with CVEs including CVE-2026-41254, CVE-2026-46968, and CVE-2026-47010. These vulnerabilities can lead to information disclosure, unauthorized access, and denial of service. The updates fix a total of 10 vulnerabilities in SUSE Liberty Linux 8 and several denial of service issues in openSUSE. Users are advised to apply these updates promptly to mitigate risks. The vulnerabilities were published between April and July 2026, with some having a CVSS score as high as 9.1. Affected systems include various versions of SUSE and openSUSE distributions. The updates are available for immediate installation.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 46d ago How this analysis works

Timeline

2026-04-18
CVE-2026-41254 published
Information disclosure or denial of service via integer overflow in CubeSize reported.
Lists.Suse
2026-07-21
Multiple CVEs published
CVE-2026-46968, CVE-2026-47010, CVE-2026-47021, CVE-2026-47027, CVE-2026-47057, CVE-2026-47058, CVE-2026-47059, CVE-2026-47063, and CVE-2026-60147 published, affecting Java security.
Linuxsecurity
2026-07-21
CVE-2026-47057 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-21
CVE-2026-47010 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-21
CVE-2026-46917 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-21
CVE-2026-47059 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-21
CVE-2026-47063 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-21
CVE-2026-60147 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-21
CVE-2026-47058 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-21
CVE-2026-47027 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE

More articles in this cluster (24)

Following this threat?

Track CVE-2026-41254 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (22)

1 / 3