SUSE-SU-2026:3331-1: important: Security update for java-25-openjdk
SLE-SECURITY-UPDATES
null at suse.de
Tue Jul 28 16:44:52 UTC 2026
# Security update for java-25-openjdk
Announcement ID: SUSE-SU-2026:3331-1
Release Date: 2026-07-28T09:36:57Z
Rating: important
References:
* bsc#1264398
* bsc#1264994
* bsc#1267355
* bsc#1272223
* bsc#1272224
* bsc#1272225
* bsc#1272227
* bsc#1272228
* bsc#1272235
* bsc#1272236
* bsc#1272237
Cross-References:
* CVE-2026-41254
* CVE-2026-46917
* CVE-2026-46968
* CVE-2026-47010
* CVE-2026-47021
* CVE-2026-47027
* CVE-2026-47059
* CVE-2026-47063
* CVE-2026-60147
CVSS scores:
* CVE-2026-41254 ( SUSE ): 2.1
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-41254 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-41254 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-41254 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
* CVE-2026-46917 ( SUSE ): 6.9
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-46917 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-46917 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-46968 ( SUSE ): 8.2
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-46968 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
* CVE-2026-46968 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
* CVE-2026-47010 ( SUSE ): 6.3
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
* CVE-2026-47010 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
* CVE-2026-47010 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
* CVE-2026-47021 ( SUSE ): 6.9
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-47021 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-47021 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-47027 ( SUSE ): 6.9
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-47027 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-47027 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-47059 ( SUSE ): 6.3
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-47059 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-47059 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-47063 ( SUSE ): 8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-47063 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
* CVE-2026-47063 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
* CVE-2026-60147 ( SUSE ): 6.9
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
* CVE-2026-60147 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
* CVE-2026-60147 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected Products:
* Basesystem Module 15-SP7
* SUSE Linux Enterprise Desktop 15 SP7
* SUSE Linux Enterprise Real Time 15 SP7
* SUSE Linux Enterprise Server 15 SP7
* SUSE Linux Enterprise Server for SAP Applications 15 SP7
An update that solves nine vulnerabilities and has two security fixes can now be
installed.
## Description:
This update for java-25-openjdk fixes the following issues:
Update to upstream tag jdk-25.0.4+7 (July 2026 CPU).
Security issues fixed:
* CVE-2026-41254: lcms: information disclosure and denial of service via
integer overflow in `CubeSize` (bsc#1264994).
* CVE-2026-46917: unauthenticated attacker with network access via TLS can
cause a partial denial of service (bsc#1272223).
* CVE-2026-46968: unauthenticated attacker with network access via TLS can
gain unauthorized creation, deletion or modification access to critical
data(bsc#1272224).
* CVE-2026-47010: unauthenticated attacker with network access via multiple
protocols can gain unauthorized update, insert or delete access to some data
(bsc#1272225).
* CVE-2026-47021: unauthenticated attacker with network access via multiple
protocols can cause a partial denial of service (bsc#1272227).
* CVE-2026-47027: unauthenticated attacker with network access via multiple
protocols can cause a partial denial of service (bsc#1272228).
* CVE-2026-47059: unauthenticated attacker with network access via multiple
protocols can cause a partial denial of service (bsc#1272235).
* CVE-2026-47063: unauthenticated attacker with network access via multiple
protocols can gain unauthorized creation, deletion or modification access to
critical data (bsc#1272236).
* CVE-2026-60147: unauthenticated attacker with network access via multiple
protocols can gain unauthorized update, insert, delete and read access to
some(bsc#1272237).
Other updates and bugfixes:
* Errors from update-alternatives when installing java-25-openjdk
(bsc#1267355).
* Make post scripts less noisy (bsc#1267355).
* Use libalternatives instead of update-alternatives for distributions where
libalternatives is available.
* Update to upstream tag jdk-25.0.4+7 (July 2026 CPU):
* JDK-7184899: Test sun/java2d/X11SurfaceData/ /SharedMemoryPixmapsTest/SharedMemoryPixmapsTest.sh fail
* JDK-8015444: java/awt/Focus/KeyStrokeTest.java sometimes fails
* JDK-8064922: [macos] Test javax/swing/JTabbedPane/4624207/ /bug4624207.java fails
* JDK-8068293: [TEST_BUG] Test closed/com/sun/java/swing/plaf/ /motif/InternalFrame/4150591/bug4150591.java fails with GTKLookAndFeel
* JDK-8068310: [TEST_BUG] Test javax/swing/JColorChooser/ /Test4234761.java fails with GTKL&F
* JDK-8144124: [macosx] The tabs can't be aligned when we pressing the key of 'R','B','L','C' or 'T'.
* JDK-8203004: UnixMultiResolutionSplashTest.java fails on Ubuntu16.04
* JDK-8213530: Test java/awt/Modal/ToFront/ /DialogToFrontModeless1Test.java fails on Linux
* JDK-8221451: PIT: sun/java2d/X11SurfaceData/ /SharedMemoryPixmapsTest/SharedMemoryPixmapsTest.sh fails
* JDK-8225787: java/awt/Window/GetScreenLocation/ /GetScreenLocationTest.java fails on Ubuntu
* JDK-8241066: Shenandoah: fix or cleanup SH::do_full_collection
* JDK-8261743: Shenandoah: enable String deduplication with compact heuristics
* JDK-8264851: Shenandoah: Rework control loop mechanics to use timed waits
* JDK-8278102: containers/docker/TestJcmd.java failed with "RuntimeException: Could not find specified process"
* JDK-8279196: Test: jdk/jfr/event/gc/stacktrace/ /TestG1OldAllocationPendingStackTrace.java timed out
* JDK-8297191: [macos] Printing a page range with starting page > 1 results in missing pages
* JDK-8298823: [macos] java/awt/Mouse/EnterExitEvents/ /DragWindowTest.java continues to fail with "No MouseReleased event on label!"
* JDK-8319326: GC: Make TestParallelRefProc use createTestJavaProcessBuilder
* JDK-8319540: GC: Make TestSelectDefaultGC use createTestJavaProcessBuilder
* JDK-8321303: Intermittent open/test/jdk/java/awt/ /KeyboardFocusmanager/ConsumeNextMnemonicKeyTypedTest/ /ConsumeNextMnemonicKeyTypedTest.java failure on Linux
* JDK-8321687: Test vmTestbase/nsk/jvmti/scenarios/contention/ /TC03/tc03t002/TestDescription.java failed: JVMTI_ERROR_THREAD_NOT_ALIVE
* JDK-8323792: ThreadSnapshot::initialize can cause assert in Thread::check_for_dangling_thread_pointer (possibility of dangling Thread pointer)
* JDK-8325482: Test that distinct seeds produce distinct traces for compiler stress flags
* JDK-8335355: Shenandoah: Fix race condition in gc/shenandoah/ /mxbeans/TestPauseNotifications.java
* JDK-8339526: C2: store incorrectly removed for clone() transformed to series of loads/stores
* JDK-8340182: Java HttpClient does not follow default retry limit of 3 retries
* JDK-8341735: Rewrite the build/AbsPathsInImage.java test to not load the entire file at once
* JDK-8344345: test/hotspot/gtest/x86/x86-asmtest.py has trailing whitespaces
* JDK-8345631: TestRegionSamplingLogging.java #generational-rotation intermittent fails
* JDK-8347167: Reduce allocation in com.sun.net.httpserver.Headers::normalize
* JDK-8347938: Add Support for the Latest ML-KEM and ML-DSA Private Key Encodings
* JDK-8351010: Test java/io/File/GetXSpace.java failed: / usable space 56380809216 > free space 14912244940
* JDK-8352914: Shenandoah: Change definition of ShenandoahSharedValue to int32_t to leverage platform atomics
* JDK-8353115: GenShen: mixed evacuation candidate regions need accurate live_data
* JDK-8354650: [PPC64] Try to reduce register definitions
* JDK-8355339: Test java/io/File/GetCanonicalPath.java failed: The specified network name is no longer available
* JDK-8357086: os::xxx functions returning memory size should return size_t
* JDK-8358600: Template-Framework Library: Template for TestFramework test class
* JDK-8358772: Template-Framework Library: Primitive Types
* JDK-8359083: Test jdkCheckHtml.java should report SkippedException rather than report fails when miss tidy
* JDK-8359223: HttpClient: Remove leftovers from the SecurityManager cleanup
* JDK-8359412: Template-Framework Library: Operations and Expressions
* JDK-8359433: The final modifier on Windows L&F internal UI classes prevents extending them in apps
* JDK-8361339: Test gc/shenandoah/TestLargeObjectAlignment.java #generational fails on macOS aarch64 with OOM: Java heap space
* JDK-8361606: ConsumeNextMnemonicKeyTypedTest.java fails on Windows: character typed with VK_A: a
* JDK-8361699: C2: assert(can_reduce_phi(n->as_Phi())) failed: Sanity: previous reducible Phi is no longer reducible before SUT
* JDK-8361726: Shenandoah: More detailed evacuation instrumentation
* JDK-8362428: Update IANA Language Subtag Registry to Version 2025-08-25
* JDK-8363943: ARM32: Represent Registers as values
* JDK-8363949: Incorrect jtreg header in MonitorWithDeadObjectTest.java
* JDK-8363986: Heap region in CDS archive is not at deterministic address
* JDK-8364315: Remove unused xml files from test/jaxp/javax/xml/ /jaxp/functional/javax/xml/transform/xmlfiles
* JDK-8364657: Crash for SecureRandom.generateSeed(0) on Windows x86-64
* JDK-8364927: Add @requires annotation to TestReclaimStringsLeaksMemory.java
* JDK-8365057: Add support for java.util.concurrent lock information to Thread.dump_to_file
* JDK-8365379: SU3.applyInsets may produce wrong results
* JDK-8365423: [macos26] java/awt/MenuBar/8007006/ /bug8007006.java fails on macOS 26
* JDK-8365424: [macos26] java/awt/Frame/DisposeTest.java fails on macOS 26
* JDK-8365623: test/jdk/sun/security/pkcs11/tls/ tests skipped without skip exception
* JDK-8365625: Can't change accelerator colors in Windows L&F
* JDK-8365792: GenShen: assertion "Generations aren't reconciled"
* JDK-8366692: Several gc/shenandoah tests timed out
* JDK-8366695: Test sun/jvmstat/monitor/MonitoredVm/ /MonitorVmStartTerminate.java timed out
* JDK-8366852: java/awt/Choice/ChoiceMouseWheelTest/ /ChoiceMouseWheelTest.java test is failing
* JDK-8367096: jdk/open/test/jdk/sun/security/pkcs11/ rsa, ec, config, secmod and sslecc tests are skipping but showing as pass
* JDK-8367450: Shenandoah: Log the composition of the collection set
* JDK-8367451: GenShen: Remove the option to compute age census during evacuation
* JDK-8367473: Shenandoah: Make the detailed evacuation metrics a runtime diagnostic option
* JDK-8367485: os::physical_memory is broken in 32-bit JVMs when running on 64-bit OSes
* JDK-8367531: Template Framework: use scopes and tokens instead of misbehaving immediate-return-queries
* JDK-8367646: [GenShen] Control thread may overwrite gc cancellation cause set by mutator
* JDK-8367708: GenShen: Reduce total evacuation burden
* JDK-8367709: GenShen: Dirty cards for objects that get promoted by safepoint that intervenes between allocation and stores
* JDK-8367722: [GenShen] ShenandoahEvacuationStats is always empty
* JDK-8367949: JFR: MethodTrace double-counts methods that catch their own exceptions
* JDK-8368001: java/text/Format/NumberFormat/ /NumberRoundTrip.java timed out
* JDK-8368015: Shenandoah: fix error in computation of average allocation rate
* JDK-8368041: Enhance TLS certificate handling
* JDK-8368159: Significant performance overhead when started with jdwp agent and unattached debugger
* JDK-8368181: ProblemList java/awt/Dialog/ModalExcludedTest/ /ModalExcludedTest.java
* JDK-8368307: Shenandoah: get_next_bit_impl should special case weak and strong mark bits
* JDK-8368499: GenShen: Do not collect age census during evac when adaptive tenuring is disabled
* JDK-8368501: Shenandoah: GC progress evaluation does not use generation
* JDK-8368524: Tests are skipped and shown as passed in test/ /jdk/sun/security/pkcs11/Cipher/KeyWrap
* JDK-8368681: Shenandoah: Add documentation comments for ShenandoahAllocationRate
* JDK-8369128: ProblemList jdk/jfr/event/profiling/ /TestCPUTimeSampleQueueAutoSizes.java in Xcomp configs
* JDK-8369132: Disable vmTestbase/gc/vector/CircularListLow and LinearListLow with SerialGC
* JDK-8369133: Disable gc/g1/TestShrinkAuxiliaryDataRunner.java with UseLargePages option
* JDK-8369251: Opensource few tests
* JDK-8369561: sun/java2d/OpenGL/DrawBitmaskImage.java#id0: Incorrect color for first pixel (actual=ff000000)
* JDK-8369683: Exclude runtime/Monitor/ /MonitorWithDeadObjectTest.java#DumpThreadsBeforeDetach on Alpine Linux debug
* JDK-8369736: Add management interface for AOT cache creation
* JDK-8369817: [TESTBUG] EmptyPath::toString is ignored
* JDK-8369912: [TESTBUG] testlibrary_tests/template_framework/ /examples/TestExpressions.java fails with ArithmeticException: / by zero - forgot to respect Expression.info
* JDK-8369950: TLS connection to IPv6 address fails with BCJSSE due to IllegalArgumentException
* JDK-8370370: Add still more cases to WorstCaseTests
* JDK-8370489: Some compiler tests miss the @key randomness
* JDK-8370502: C2: segfault while adding node to IGVN worklist
* JDK-8370521: GenShen: Various code cleanup related to promotion
* JDK-8370939: C2: SIGSEGV in SafePointNode::verify_input when processing MH call from Compile::process_late_inline_calls_no_inline()
* JDK-8371284: GenShen: Avoid unnecessary card marking
* JDK-8371381: [Shenandoah] Setting ergo flags should use FLAG_SET_ERGO
* JDK-8371503: RETAIN_IMAGE_AFTER_TEST do not work for some tests
* JDK-8371792: Refactor barrier loop tests out of TestIfMinMax
* JDK-8371893: [macOS] use dead_strip linker option to reduce binary size
* JDK-8372272: Hotspot shared lib loading - add load attempts to Events::log
* JDK-8372351: Add 2 WISeKey roots
* JDK-8372380: Make hs_err reporting more robust for unattached threads
* JDK-8372513: Shenandoah: ShenandoahMaxRegionSize can produce an unaligned heap alignment
* JDK-8372851: Modify java/io/File/GetXSpace.java to print path on failure of native call
* JDK-8372861: Genshen: Override parallel_region_stride of ShenandoahResetBitmapClosure to a reasonable value for better parallelism
* JDK-8373039: Remove Incorrect Asserts in shenandoahScanRemembered
* JDK-8373120: Virtual thread stuck in BLOCKED state
* JDK-8373239: Test java/awt/print/PrinterJob/PageRanges.java fails with incorrect selection of printed pages
* JDK-8373275: Improve DTLS handshaking
* JDK-8373515: Migrate "test/jdk/java/net/httpclient/" to null-safe "SimpleSSLContext" methods
* JDK-8373579: Problem list compiler/runtime/Test7196199.java
* JDK-8373650: Test "javax/swing/JMenuItem/6458123/ /ManualBug6458123.java" fails because the check icons are not aligned properly as expected
* JDK-8373676: Test javax/net/ssl/HttpsURLConnection/ /SubjectAltNameIP.java fails on a machine without IPV6
* JDK-8373690: Unexpected Keystore message using jdk.crypto.disabledAlgorithms
* JDK-8373714: Shenandoah: Register heuristic penalties following a degenerated GC
* JDK-8373718: jdk/internal/misc/VM/RuntimeArguments.java test fails in Virtual threads mode
* JDK-8373796: Refactor java/net/httpclient/ /ThrowingPublishers*.java tests to use JUnit5
* JDK-8373847: Test javax/swing/JMenuItem/MenuItemTest/ /bug6197830.java failed because The test case automatically fails when clicking any items in the “Nothing” menu in all four windows (Left-to-right)-Menu Item Test and (Right-to-left)-Menu Item Test
* JDK-8373866: Refactor java/net/httpclient/ /ThrowingSubscribers*.java tests to use JUnit5
* JDK-8373893: Refactor networking http server tests to use JUnit
* JDK-8373913: Refactor serialization tests to use JUnit
* JDK-8373928: 4 Dangling pointer defect groups in java.c
* JDK-8374001: sun/security/ skip without Exceptions
* JDK-8374058: Enhance JPEG handling
* JDK-8374168: Resolve disabled warnings in JDWP agent
* JDK-8374304: MultiResolutionSplashTest.java fails in CI: "Image with wrong resolution is used for splash screen!"
* JDK-8374322: TestMemoryWithSubgroups.java fails Permission denied
* JDK-8374343: Fix SIGSEGV when lib/modules is unreadable
* JDK-8374449: Shenandoah: Leaf locks used by Shenandoah need lower ranks
* JDK-8374506: Incorrect positioning of arrow icon in parent JMenu in Windows L&F
* JDK-8374712: AOTMappedHeapWriter::relocate_field_in_buffer should use CompressedOops::narrow_oop_cast
* JDK-8374727: Audio configuration Platform class - use nio for getting endianness of the underlying platform
* JDK-8374744: Enable dumping of APX EGPRs (R16–R31) in JVM fatal error logs
* JDK-8374769: PPC: MASM::pop_cont_fastpath() should reset _cont_fastpath if SP == _cont_fastpath
* JDK-8374888: Implement internal test cache to help UserIterCount test performance
* JDK-8374998: Failing os::write - remove bad file
* JDK-8375065: Update LCMS to 2.18
* JDK-8375177: Gtest os_linux.decoder_get_source_info_valid_vm fails with -ffunction-sections
* JDK-8375294: (fs) Files.copy can fail with EOPNOTSUPP when copy_file_range not supported
* JDK-8376031: HttpsURLConnection.getServerCertificates() throws "java.lang.IllegalStateException: connection not yet open" for the HEAD method
* JDK-8376104: C2 crashes in PhiNode::Ideal(PhaseGVN*, bool) accessing NULL pointer
* JDK-8376151: Test javax/swing/JFileChooser/4966171/ /bug4966171.java is failing with OOME
* JDK-8376152: Test javax/sound/sampled/Clip/bug5070081.java timed out then completed
* JDK-8376185: NoSuchFieldError thrown after a record with type annotation retransformed
* JDK-8376233: Clean up code in Desktop native peer
* JDK-8376287: Crashes when using -XX:ObjArrayMarkingStride=0
* JDK-8376402: Dependencies::print_statistics() and AbstractClassHierarchyWalker::print_statistics() are not called from PRODUCT code
* JDK-8376684: Compile OpenJDK in headless mode without required X11 libraries
* JDK-8376956: Add JVMTI phase entering/setting to hserr event log
* JDK-8376969: Shenandoah: GC state getters should be inlineable
* JDK-8376970: Shenandoah: Verifier should do basic verification before touching oops
* JDK-8377158: Enhance XBM image support
* JDK-8377167: javax/imageio/ReadAbortTest.java throw NPE when x11 unavailable
* JDK-8377498: Improve HttpServer handling
* JDK-8377512: AOT cache creation fails with invalid native pointer
* JDK-8377602: Create automated test for PageRange
* JDK-8377727: Ghost caret and focus appear in non‑editable text fields
* JDK-8377833: Enhance Jar file processing
* JDK-8377907: (process) Race in ProcessBuilder can cause JVM hangs
* JDK-8377910: Minor cleanup of java/io/FileDescriptor/ /Sharing.java
* JDK-8377932: AOT cache is not rejected when JAR file has changed
* JDK-8377944: LowMemoryTest2.java#id1 intermittent fails OOME: Metaspace
* JDK-8377949: TestZRelocationSetEvent.java intermittent fails OOME
* JDK-8378083: Mark shenandoah/generational/ /TestOldGrowthTriggers.java as flagless
* JDK-8378201: [OGL] glXMakeContextCurrent() drops the buffers of the unbound drawable
* JDK-8378417: Printing All pages results in NPE for 1.1 PrintJob
* JDK-8378561: Mark gc/shenandoah/compiler/ /TestLinkToNativeRBP.java as /native
* JDK-8378687: Improve delegation of HttpURLConnection
* JDK-8378727: [macOS] Missing dispatch_release for semaphores in CDesktopPeer
* JDK-8378746: ZGC: jdk/jfr/event/gc/detailed/ /TestZRelocationSetGroupEvent.java intermittent OOME
* JDK-8378764: fileStream::fileSize() fails for >2GB files on Windows
* JDK-8378774: Bump update version for OpenJDK: jdk-25.0.4
* JDK-8378810: Enable missing FFM test via jtreg requires for RISC-V
* JDK-8378836: Enable linktime-gc by default on Linux ppc64le
* JDK-8378878: Refactor java/nio/channels/ /AsynchronousSocketChannel test to use JUnit
* JDK-8378888: jdk/incubator/vector/ /Float16OperationsBenchmark.java uses wrong package name
* JDK-8379021: Shenandoah: Speedup ShenandoahSimpleBitMapTest
* JDK-8379202: Support linktime-gc on Linux with clang
* JDK-8379416: AIX build fails if system (not GNU) date tool is in PATH
* JDK-8379425: Windows and macOS should not allow unsupported headless-only build
* JDK-8379457: Test EATests.java#id0 ERROR: monitor list errors: error_cnt=1
* JDK-8379464: Enable missing stack walking test via jtreg requires for RISC-V
* JDK-8379499: [AIX] headless-only build of libjawt.so fails
* JDK-8379515: draft-ietf-lamps-kyber-certificates is now RFC 9935
* JDK-8380011: Path-to-gcroots search should not trigger stack overflows
* JDK-8380041: PPC: remove POWER6 remnants
* JDK-8380222: Refactor test/jdk/java/lang/Character TestNG tests to JUnit
* JDK-8380316: Test runtime/os/AvailableProcessors.java fails Invalid argument
* JDK-8380409: JVM crashes when -XX:AOTMode=create uses app.aotconf generated with JVMTI agent
* JDK-8380428: ProblemList containers/docker/ /TestJcmdWithSideCar.java on linux-all
* JDK-8380431: Shenandoah: Concurrent modification of stack-chunk objects during evacuation
* JDK-8380474: Crash SEGV in ThreadIdTable::lazy_initialize after JDK-8323792
* JDK-8380565: PPC64: deoptimization stub should save vector registers
* JDK-8380663: Update jcmd man page to include AOT.end_recording diagnostic command
* JDK-8380672: Improve certification checking
* JDK-8380846: GenShen: Remove the experimental option to disable adaptive tenuring
* JDK-8380947: Add pull request template
* JDK-8381039: Enhance AWT ImagingLib
* JDK-8381049: Enhance Jar handling
* JDK-8381205: GHA: Upgrade Node.js 20 to 24
* JDK-8381315: compiler/vectorapi/TestVectorReallocation.java fails with -XX:UseAVX=1 after JDK-8380565
* JDK-8381382: Shenandoah: assert(capacity > 0) failed: free regions must have allocation capacity
* JDK-8381519: Enhance Der Value Handling
* JDK-8381796: Enhance Certificate parsing
* JDK-8381871: GenShen: ShenandoahGCHeuristics flag not reset after ignoring non-adaptive value
* JDK-8381935: Improve numChunks range in the PPC64 CallAranger
* JDK-8381937: Make exceptions in Java_sun_security_mscapi_CKeyPairGenerator generateCKeyPair more specific
* JDK-8382018: test/jdk/java/nio/file/spi/ /SetDefaultProvider.java leaves a directory in /tmp
* JDK-8382020: Time Zone Abbreviation Not Localized for Non-English Locales
* JDK-8382035: [ubsan] Under UBSAN builds, disable tests that rely on simulated JVM crashes
* JDK-8382090: Remove .rej and .orig from .gitignore
* JDK-8382242: JFR: Metadata reconstruction invalidates ConstantMap for java.lang.String
* JDK-8382295: Shenandoah: wrong denominator in full gc summary
* JDK-8382395: Disable stringop-overflow in shenandoahGenerationalHeap.cpp
* JDK-8382419: Add missed @key randomness after JDK-8370489
* JDK-8382522: Disable stringop-overflow in safepointMechanism.cpp
* JDK-8382740: JFR: Disable jdk.OldObjectSample event for generational ZGC
* JDK-8382878: RISC-V: Missing InlineSkippedInstructionsCounter in ZGC barriers stubs
* JDK-8382932: [25u] Test java/lang/instrument/ /RetransformRecordTypeAnn/TestRetransformRecord.java fails with compilation error
* JDK-8383161: [PPC64] MachCallDynamicJavaNode::ret_addr_offset() needs adaptation for COH
* JDK-8383175: (tz) Update Timezone Data to 2026b
* JDK-8383183: Shenandoah: Mangle trashed regions up to top instead of end
* JDK-8383354: Update LCMS to 2.19.1
* JDK-8383473: Follow on from tzdata2026b time change to include temporary hack BC time change
* JDK-8383601: RISC-V: ShenandoahBarrierSetAssembler::load_reference_barrier calls "weak" on "phantom" path
* JDK-8383630: Fix iteration in tests doing class redefinition
* JDK-8384043: [REDO] Incorrect handling of Hawaii_Aleutian metazone
* JDK-8384158: GHA: Downgrade Windows GHA runners to windows-2022 temporarily
* JDK-8384163: (so) SocketChannel.connect and finishConnect() exception messages could be improved
* JDK-8384223: RISC-V: entry_barrier_offset should consider UseZtso
* JDK-8384486: NTLM tests fail on Windows 11 and Windows Server 2025
* JDK-8384495: Update Libpng to 1.6.58
* JDK-8384540: [25u, 21u, 17u] Update GHA JDKs after Apr/26 updates
* JDK-8384815: SelectOneKeyOutOfMany and PreferredKey fail after expired test certificate
* JDK-8384902: Update GIFlib to 6.1.3
* JDK-8385390: Update FreeType to 2.14.3
* JDK-8385490: Update HarfBuzz to 14.2.0
* JDK-8386551: Windows build broken because of MSys2/Make update
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* Basesystem Module 15-SP7
zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-3331=1
## Package List:
* Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64)
* java-25-openjdk-devel-25.0.4.0-150700.15.13.1
* java-25-openjdk-headless-25.0.4.0-150700.15.13.1
* java-25-openjdk-demo-25.0.4.0-150700.15.13.1
* java-25-openjdk-debuginfo-25.0.4.0-150700.15.13.1
* java-25-openjdk-devel-debuginfo-25.0.4.0-150700.15.13.1
* java-25-openjdk-headless-debuginfo-25.0.4.0-150700.15.13.1
* java-25-openjdk-25.0.4.0-150700.15.13.1
## References:
* https://www.suse.com/security/cve/CVE-2026-41254.html
* https://www.suse.com/security/cve/CVE-2026-46917.html
* https://www.suse.com/security/cve/CVE-2026-46968.html
* https://www.suse.com/security/cve/CVE-2026-47010.html
* https://www.suse.com/security/cve/CVE-2026-47021.html
* https://www.suse.com/security/cve/CVE-2026-47027.html
* https://www.suse.com/security/cve/CVE-2026-47059.html
* https://www.suse.com/security/cve/CVE-2026-47063.html
* https://www.suse.com/security/cve/CVE-2026-60147.html
* https://bugzilla.suse.com/show_bug.cgi?id=1264398
* https://bugzilla.suse.com/show_bug.cgi?id=1264994
* https://bugzilla.suse.com/show_bug.cgi?id=1267355
* https://bugzilla.suse.com/show_bug.cgi?id=1272223
* https://bugzilla.suse.com/show_bug.cgi?id=1272224
* https://bugzilla.suse.com/show_bug.cgi?id=1272225
* https://bugzilla.suse.com/show_bug.cgi?id=1272227
* https://bugzilla.suse.com/show_bug.cgi?id=1272228
* https://bugzilla.suse.com/show_bug.cgi?id=1272235
* https://bugzilla.suse.com/show_bug.cgi?id=1272236
* https://bugzilla.suse.com/show_bug.cgi?id=1272237
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-security-updates/attachments/20260728/6721cec5/attachment.htm>
More information about the sle-security-updates
mailing list