SUSE-SU-2026:3614-1: java-1_8_0-ibm&distro=SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2026:3614-1 is a vulnerability in java-1_8_0-ibm&distro=SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 13-08-2026
   PublishedVulnerability first disclosed.
2. 14-08-2026
   Last modifiedVulnerability information updated.

Description

Security update for java-1_8_0-ibm This update for java-1_8_0-ibm fixes the following issues: Update to Java 8.0 Service Refresh 8 Fix Pack 70 (bsc#1273223). - CVE-2026-16243: inconsistent handling of zero length data in `arraycmp` of the SIMD evaluator (bsc#1274275). - CVE-2026-16439: using `-Xtrace` to trace method arguments can lead to buffer underflow (bsc#1272250). - CVE-2026-16441: method resolution default method precedence failure (bsc#1272248). - CVE-2026-41254: lcms2: information disclosure or denial of service via integer overflow in `CubeSize` (bsc#1272459). - CVE-2026-46968: unauthorized creation, deletion or modification access to critical data (bsc#1272224). - CVE-2026-47010: unauthorized update, insert or delete access to data (bsc#1272225). - CVE-2026-47021: partial denial of service via multiple network protocols (bsc#1272227). - CVE-2026-47027: partial denial of service via multiple network protocols (bsc#1272228). - CVE-2026-47057: hang or frequently repeatable crash via multiple network protocols (bsc#1272233). - CVE-2026-47058: unauthorized creation, deletion or modification access to critical data (bsc#1272234). - CVE-2026-47059: partial denial of service via multiple network protocols (bsc#1272235). - CVE-2026-47063: unauthorized creation, deletion or modification access to critical data (bsc#1272236). - CVE-2026-60147: unauthorized update, insert or delete access to data (bsc#1272237). - CVE-2026-8400: malicious IIOP server can induce loading and instantation of arbitrary classes (bsc#1274276).

No weakness data has been published for this record.