SUSE-SU-2026:22953-1: java-17-openjdk&distro=SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise

CVSS: UnknownPublished
Published 24-07-2026Last modified 29-07-2026
Open JSON

Vulnerability summary

SUSE-SU-2026:22953-1 is a vulnerability in java-17-openjdk&distro=SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 9 · Downstream 0 · Related 9
CVE-2026-41254CVE-2026-46917CVE-2026-46968CVE-2026-47010CVE-2026-47021CVE-2026-47027

Timeline

  1. 24-07-2026
    PublishedVulnerability first disclosed.
  2. 29-07-2026
    Last modifiedVulnerability information updated.

Description

Security update for java-17-openjdk This update for java-17-openjdk fixes the following issues - Upgrade to upstream tag jdk-17.0.20+8 (July 2026 CPU) - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994). - CVE-2026-46917: partial denial of service via TLS (bsc#1272223). - CVE-2026-46968: unauthorized creation, deletion or modification access to critical data (bsc#1272224). - CVE-2026-47010: unauthorized update, insert or delete access (bsc#1272225). - CVE-2026-47021: partial denial of service via multiple network protocols (bsc#1272227). - CVE-2026-47027: partial denial of service via multiple network protocols (bsc#1272228). - CVE-2026-47059: partial denial of service via multiple network protocols (bsc#1272235). - CVE-2026-47063: unauthorized creation, deletion or modification access to critical data (bsc#1272236). - CVE-2026-60147: unauthorized update, insert or delete access (bsc#1272237).

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse2 products
  • java-17-openjdk&distro=SUSE Linux Enterprise Server 16.0< 17.0.20.0-160000.1.1
  • java-17-openjdk&distro=SUSE Linux Enterprise Server for SAP applications 16.0< 17.0.20.0-160000.1.1

1 vendor · 2 products

References

19 links
Show all 19 references