SUSE-SU-2026:3998-1: java-1_8_0-openjdk&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2026:3998-1 is a vulnerability in java-1_8_0-openjdk&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 07-09-2026
   PublishedVulnerability first disclosed.
2. 13-09-2026
   Last modifiedVulnerability information updated.

Description

Security update for java-1_8_0-openjdk This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u504 (icedtea 3.40.1). - CVE-2026-60589: unauthenticated attacker with network access via multiple protocols can gain unauthorized read access to sensitive data (bsc#1275777). - CVE-2026-61308: unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data (bsc#1275778). - CVE-2026-70907: unauthenticated attacker with network access via TLS can gain the ability to cause a partial denial of service (bsc#1275764). Changes for java-1_8_0-openjdk: - Version jdk8u504 (icedtea 3.40.1): * Import of OpenJDK 8 u504 build 01 + JDK-8382471: Improve Resource Resolving + JDK-8384708: Enhance HTTP Connections + JDK-8385390: Update FreeType to 2.14.3 + JDK-8386205: Enhance TLS server + JDK-8388811: [8u] VS2010 build broken by JDK-8374058 + JDK-8389477: Bump update version for OpenJDK: 8u504

No weakness data has been published for this record.