< back to search

shield Security update for java-1_8_0-openjdk
SUSE-SLE-Module-Legacy-15-SP7-2026-3998

This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u504 (icedtea 3.40.1). - CVE-2026-60589: unauthenticated attacker with network access via multiple protocols can gain unauthorized read access to sensitive data (bsc#1275777). - CVE-2026-61308: unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data (bsc#1275778). - CVE-2026-70907: unauthenticated attacker with network access via TLS can gain the ability to cause a partial denial of service (bsc#1275764). Changes for java-1_8_0-openjdk: - Version jdk8u504 (icedtea 3.40.1): * Import of OpenJDK 8 u504 build 01 + JDK-8382471: Improve Resource Resolving + JDK-8384708: Enhance HTTP Connections + JDK-8385390: Update FreeType to 2.14.3 + JDK-8386205: Enhance TLS server + JDK-8388811: [8u] VS2010 build broken by JDK-8374058 + JDK-8389477: Bump update version for OpenJDK: 8u504

cloud_download Downloads

Legacy Module 15.7 ppc64le
Legacy Module 15.7 s390x
Legacy Module 15.7 aarch64
Legacy Module 15.7 x86_64