<div class="container">
<h1>Security update for java-11-openjdk</h1>
<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-SU-2026:3453-1</td>
</tr>
<tr>
<th>Release Date:</th>
<td>2026-08-03T11:45:12Z</td>
</tr>
<tr>
<th>Rating:</th>
<td>important</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1264994">bsc#1264994</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1267355">bsc#1267355</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1272223">bsc#1272223</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1272224">bsc#1272224</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1272225">bsc#1272225</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1272227">bsc#1272227</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1272228">bsc#1272228</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1272233">bsc#1272233</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1272234">bsc#1272234</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1272235">bsc#1272235</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1272236">bsc#1272236</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1272237">bsc#1272237</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>
Cross-References:
</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-41254.html">CVE-2026-41254</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-46917.html">CVE-2026-46917</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-46968.html">CVE-2026-46968</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-47010.html">CVE-2026-47010</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-47021.html">CVE-2026-47021</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-47027.html">CVE-2026-47027</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-47057.html">CVE-2026-47057</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-47058.html">CVE-2026-47058</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-47059.html">CVE-2026-47059</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-47063.html">CVE-2026-47063</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2026-60147.html">CVE-2026-60147</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>CVSS scores:</th>
<td>
<ul class="list-group">
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-41254</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">2.1</span>
<span class="cvss-vector">CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-41254</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">2.9</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-41254</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-41254</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">4.0</span>
<span class="cvss-vector">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-46917</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-46917</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">5.3</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-46917</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">5.3</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-46968</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">8.2</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-46968</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">5.9</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-46968</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">5.9</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-47010</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.3</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-47010</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">3.7</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-47010</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">3.7</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-47021</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-47021</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">5.3</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-47021</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">5.3</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-47027</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-47027</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">5.3</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-47027</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">5.3</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-47057</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">8.7</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-47057</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-47057</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-47058</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">9.1</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-47058</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.4</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-47058</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.4</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-47059</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.3</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-47059</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">3.7</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-47059</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">3.7</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-47063</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">8.7</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-47063</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-47063</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-60147</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.9</span>
<span class="cvss-vector">CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-60147</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">6.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2026-60147</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">6.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N</span>
</li>
</ul>
</td>
</tr>
<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">
<li class="list-group-item">Legacy Module 15-SP7</li>
<li class="list-group-item">SUSE Linux Enterprise Desktop 15 SP7</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing 15 SP5</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing LTSS 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing LTSS 15 SP5</li>
<li class="list-group-item">SUSE Linux Enterprise Real Time 15 SP7</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP4 LTSS</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP5</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP5 LTSS</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP6</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP6 LTSS</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP7</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 15 SP4</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 15 SP5</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 15 SP6</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 15 SP7</li>
<li class="list-group-item">SUSE Package Hub 15 15-SP7</li>
</ul>
</td>
</tr>
</tbody>
</table>
<p>An update that solves 11 vulnerabilities and has one security fix can now be installed.</p>
<h2>Description:</h2>
<p>This update for java-11-openjdk fixes the following issues:</p>
<p>Upgrade to upstream tag jdk-11.0.32+9 (July 2026 CPU).</p>
<p>Security issues fixed:</p>
<ul>
<li>CVE-2026-41254: lcms: information disclosure and denial of service via integer overflow in <code>CubeSize</code> (bsc#1264994).</li>
<li>CVE-2026-46917: unauthenticated attacker with network access via TLS can cause a partial denial of service
(bsc#1272223).</li>
<li>CVE-2026-46968: unauthenticated attacker with network access via TLS can gain unauthorized creation, deletion or
modification access to critical data(bsc#1272224).</li>
<li>CVE-2026-47010: unauthenticated attacker with network access via multiple protocols can gain unauthorized update,
insert or delete access to some data (bsc#1272225).</li>
<li>CVE-2026-47021: unauthenticated attacker with network access via multiple protocols can cause a partial denial of
service (bsc#1272227).</li>
<li>CVE-2026-47027: unauthenticated attacker with network access via multiple protocols can cause a partial denial of
service (bsc#1272228).</li>
<li>CVE-2026-47057: unauthenticated attacker with network access via multiple protocols can cause a hang or frequently
repeatable crash (bsc#1272233).</li>
<li>CVE-2026-47058: unauthenticated attacker with network access via multiple protocols can gain unauthorized creation,
deletion or modification access to critical data (bsc#1272234).</li>
<li>CVE-2026-47059: unauthenticated attacker with network access via multiple protocols can cause a partial denial of
service (bsc#1272235).</li>
<li>CVE-2026-47063: unauthenticated attacker with network access via multiple protocols can gain unauthorized creation,
deletion or modification access to critical data (bsc#1272236).</li>
<li>CVE-2026-60147: unauthenticated attacker with network access via multiple protocols can gain unauthorized update,
insert, delete and read access to some(bsc#1272237).</li>
</ul>
<p>Other updates and bugfixes:</p>
<ul>
<li>Upgrade to upstream tag jdk-11.0.32+9 (July 2026 CPU):</li>
<li>JDK-8200566: DistributionPointFetcher fails to fetch CRLs if
the DistributionPoints field contains more than one
DistributionPoint and the first one fails</li>
<li>JDK-8242314: use reproducible random in vmTestbase shared code</li>
<li>JDK-8252412: [macos11] system dynamic libraries removed from
filesystem</li>
<li>JDK-8275405: Linking error for classes with lambda template
parameters and virtual functions</li>
<li>JDK-8275843: Random crashes while the UI code is executed</li>
<li>JDK-8286562: GCC 12 reports some compiler warnings</li>
<li>JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
fails new assert: assert((uint)t < T_CONFLICT + 1) failed:
invalid type #</li>
<li>JDK-8292177: InitialSecurityProperty JFR event</li>
<li>JDK-8293691: converting a defined BasicType value to a string
should not crash the VM</li>
<li>JDK-8298730: Refactor subsystem_file_line_contents and add
docs and tests</li>
<li>JDK-8314555: Build with mawk fails on Windows</li>
<li>JDK-8323672: Suppress unwanted autoconf added flags in CC and
CXX</li>
<li>JDK-8324243: Compilation failures in java.desktop module with
gcc 14</li>
<li>JDK-8325766: Extend CertificateBuilder to create trust and end
entity certificates programmatically</li>
<li>JDK-8327071: [Testbug] g-tests for cgroup leave files in /tmp
on linux</li>
<li>JDK-8336498: [macos] [build]: install-file macro may run into
permission denied error</li>
<li>JDK-8342858: Make target mac-jdk-bundle fails on chmod command</li>
<li>JDK-8347740: java/io/File/createTempFile/SpecialTempFile.java
failing</li>
<li>JDK-8347811: Container detection code for cgroups v2 should
use cgroup.controllers</li>
<li>JDK-8349988: Change cgroup version detection logic to not
depend on /proc/cgroups</li>
<li>JDK-8350749: Upgrade JLine to 3.29.0</li>
<li>JDK-8351359: OperatingSystemMXBean: values from getCpuLoad and
getProcessCpuLoad are stale after 24.8 days (Windows)</li>
<li>JDK-8353714: [17u] Backport of 8347740 incomplete</li>
<li>JDK-8354878: File Leak in
CgroupSubsystemFactory::determine_type of
cgroupSubsystem_linux.cpp:300</li>
<li>JDK-8355077: Compiler error at splashscreen_gif.c due to
unterminated string initialization</li>
<li>JDK-8363966: GHA: Switch cross-compiling sysroots to Debian
trixie</li>
<li>JDK-8365098: make/RunTests.gmk generates a wrong path to test
artifacts on Alpine</li>
<li>JDK-8365660: test/jdk/sun/security/pkcs11/KeyAgreement/ tests
skipped without SkipExceprion</li>
<li>JDK-8366159: SkippedException is treated as a pass for
pkcs11/KeyStore, pkcs11/SecretKeyFactory and
pkcs11/SecureRandom</li>
<li>JDK-8367766: [11u] src/jdk.crypto.ec/share/native/libsunec/
/impl/mpi.c:321:3: error: 'tmp.dp' may be used uninitialized</li>
<li>JDK-8368041: Enhance TLS certificate handling</li>
<li>JDK-8368670: Deadlock in JFR on event register + class load</li>
<li>JDK-8369032: Add test to ensure serialized ICC_Profile stores
only necessary optional data</li>
<li>JDK-8369506: Bytecode rewriting causes Java heap corruption on
AArch64</li>
<li>JDK-8371559: Intermittent timeouts in test
javax/net/ssl/Stapling/HttpsUrlConnClient.java</li>
<li>JDK-8372351: Add 2 WISeKey roots</li>
<li>JDK-8373275: Improve DTLS handshaking</li>
<li>JDK-8374058: Enhance JPEG handling</li>
<li>JDK-8374888: Implement internal test cache to help
UserIterCount test performance</li>
<li>JDK-8375065: Update LCMS to 2.18</li>
<li>JDK-8377158: Enhance XBM image support</li>
<li>JDK-8377167: javax/imageio/ReadAbortTest.java throw NPE when
x11 unavailable</li>
<li>JDK-8377498: Improve HttpServer handling</li>
<li>JDK-8377833: Enhance Jar file processing</li>
<li>JDK-8378218: MSYS2 reports cygwin triplet causing bash
configure failure</li>
<li>JDK-8378631: Update Zlib Data Compression Library to Version
1.3.2</li>
<li>JDK-8378687: Improve delegation of HttpURLConnection</li>
<li>JDK-8378823: AIX build fails after zlib updated by JDK-8378631</li>
<li>JDK-8379685: Bump update version of OpenJDK: 11.0.32</li>
<li>JDK-8380672: Improve certification checking</li>
<li>JDK-8380947: Add pull request template</li>
<li>JDK-8381039: Enhance AWT ImagingLib</li>
<li>JDK-8381049: Enhance Jar handling</li>
<li>JDK-8381185: Improve Nashorn index handling</li>
<li>JDK-8381195: Enhance Dataview Implementation</li>
<li>JDK-8381519: Enhance Der Value Handling</li>
<li>JDK-8381551: DisabledCurve test fails on Windows after
disabling SHA1</li>
<li>JDK-8381796: Enhance Certificate parsing</li>
<li>JDK-8383175: (tz) Update Timezone Data to 2026b</li>
<li>JDK-8383354: Update LCMS to 2.19.1</li>
<li>JDK-8383473: Follow on from tzdata2026b time change to include
temporary hack BC time change</li>
<li>JDK-8384158: GHA: Downgrade Windows GHA runners to
windows-2022 temporarily</li>
<li>JDK-8384495: Update Libpng to 1.6.58</li>
<li>JDK-8384902: Update GIFlib to 6.1.3</li>
<li>JDK-8386551: Windows build broken because of MSys2/Make update</li>
<li>JDK-8387976: [11u] Remove designator
DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.32</li>
<li>Make post scripts less noisy (bsc#1267355).</li>
<li>Use <code>libalternatives</code> instead of <code>update-alternatives</code> for distributions where <code>libalternatives</code> is available.</li>
</ul>
<h2>Patch Instructions:</h2>
<p>
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".<br/>
Alternatively you can run the command listed for your product:
</p>
<ul class="list-group">
<li class="list-group-item">
SUSE Package Hub 15 15-SP7
<br/>
<code>zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-3453=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Server 15 SP5 LTSS
<br/>
<code>zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-3453=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Server for SAP Applications 15 SP5
<br/>
<code>zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-3453=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Server for SAP Applications 15 SP4
<br/>
<code>zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-3453=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise High Performance Computing LTSS 15 SP5
<br/>
<code>zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-3453=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Server 15 SP6 LTSS
<br/>
<code>zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-3453=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Server for SAP Applications 15 SP6
<br/>
<code>zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-3453=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4
<br/>
<code>zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-3453=1</code>
</li>
<li class="list-group-item">
Legacy Module 15-SP7
<br/>
<code>zypper in -t patch SUSE-SLE-Module-Legacy-15-SP7-2026-3453=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5
<br/>
<code>zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-3453=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Server 15 SP4 LTSS
<br/>
<code>zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-3453=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise High Performance Computing LTSS 15 SP4
<br/>
<code>zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-3453=1</code>
</li>
</ul>
<h2>Package List:</h2>
<ul>
<li>
Legacy Module 15-SP7 (aarch64 ppc64le s390x x86_64)
<ul>
<li>java-11-openjdk-devel-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-debuginfo-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-demo-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-headless-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-headless-debuginfo-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-devel-debuginfo-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-debugsource-11.0.32.0-150000.3.141.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64)
<ul>
<li>java-11-openjdk-devel-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-demo-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-headless-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-debugsource-11.0.32.0-150000.3.141.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64)
<ul>
<li>java-11-openjdk-devel-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-demo-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-headless-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-debugsource-11.0.32.0-150000.3.141.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64)
<ul>
<li>java-11-openjdk-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-devel-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-headless-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-demo-11.0.32.0-150000.3.141.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64)
<ul>
<li>java-11-openjdk-devel-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-demo-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-headless-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-debugsource-11.0.32.0-150000.3.141.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64)
<ul>
<li>java-11-openjdk-devel-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-debuginfo-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-demo-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-headless-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-headless-debuginfo-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-devel-debuginfo-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-debugsource-11.0.32.0-150000.3.141.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64)
<ul>
<li>java-11-openjdk-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-devel-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-headless-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-demo-11.0.32.0-150000.3.141.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64)
<ul>
<li>java-11-openjdk-devel-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-debuginfo-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-demo-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-headless-debuginfo-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-headless-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-devel-debuginfo-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-debugsource-11.0.32.0-150000.3.141.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64)
<ul>
<li>java-11-openjdk-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-devel-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-headless-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-demo-11.0.32.0-150000.3.141.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64)
<ul>
<li>java-11-openjdk-devel-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-demo-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-headless-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-debugsource-11.0.32.0-150000.3.141.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64)
<ul>
<li>java-11-openjdk-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-headless-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-devel-11.0.32.0-150000.3.141.1</li>
<li>java-11-openjdk-demo-11.0.32.0-150000.3.141.1</li>
</ul>
</li>
<li>
SUSE Package Hub 15 15-SP7 (noarch)
<ul>
<li>java-11-openjdk-javadoc-11.0.32.0-150000.3.141.1</li>
</ul>
</li>
</ul>
<h2>References:</h2>
<ul>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-41254.html">https://www.suse.com/security/cve/CVE-2026-41254.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-46917.html">https://www.suse.com/security/cve/CVE-2026-46917.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-46968.html">https://www.suse.com/security/cve/CVE-2026-46968.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-47010.html">https://www.suse.com/security/cve/CVE-2026-47010.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-47021.html">https://www.suse.com/security/cve/CVE-2026-47021.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-47027.html">https://www.suse.com/security/cve/CVE-2026-47027.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-47057.html">https://www.suse.com/security/cve/CVE-2026-47057.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-47058.html">https://www.suse.com/security/cve/CVE-2026-47058.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-47059.html">https://www.suse.com/security/cve/CVE-2026-47059.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-47063.html">https://www.suse.com/security/cve/CVE-2026-47063.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2026-60147.html">https://www.suse.com/security/cve/CVE-2026-60147.html</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1264994">https://bugzilla.suse.com/show_bug.cgi?id=1264994</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1267355">https://bugzilla.suse.com/show_bug.cgi?id=1267355</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1272223">https://bugzilla.suse.com/show_bug.cgi?id=1272223</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1272224">https://bugzilla.suse.com/show_bug.cgi?id=1272224</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1272225">https://bugzilla.suse.com/show_bug.cgi?id=1272225</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1272227">https://bugzilla.suse.com/show_bug.cgi?id=1272227</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1272228">https://bugzilla.suse.com/show_bug.cgi?id=1272228</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1272233">https://bugzilla.suse.com/show_bug.cgi?id=1272233</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1272234">https://bugzilla.suse.com/show_bug.cgi?id=1272234</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1272235">https://bugzilla.suse.com/show_bug.cgi?id=1272235</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1272236">https://bugzilla.suse.com/show_bug.cgi?id=1272236</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1272237">https://bugzilla.suse.com/show_bug.cgi?id=1272237</a>
</li>
</ul>
</div>