This update for java-1_8_0-openjdk fixes the following issues:
* CVE-2026-21925: Fixed a vulnerability in the Oracle Java SE component RMI.
(bsc#1257034)
* CVE-2026-21932: Fixed a vulnerability in the Oracle Java SE component AWT
and JavaFX. (bsc#1257036)
* CVE-2026-21933: Fixed a vulnerability in the Oracle Java SE component
Networking. (bsc#1257037)
* CVE-2026-21945: Fixed a vulnerability in the Oracle Java SE component
Security. (bsc#1257038)
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* openSUSE Leap 15.6
zypper in -t patch openSUSE-SLE-15.6-2026-504=1
* Legacy Module 15-SP7
zypper in -t patch SUSE-SLE-Module-Legacy-15-SP7-2026-504=1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4
zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-504=1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4
zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-504=1
* SUSE Linux Enterprise Server 15 SP4 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-504=1
* SUSE Linux Enterprise Server 15 SP5 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-504=1
* SUSE Linux Enterprise Server 15 SP6 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-504=1
* SUSE Linux Enterprise Server for SAP Applications 15 SP4
zypper in -t patch...
Read the Full Advisory* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64)
* java-1_8_0-openjdk-demo-debuginfo-1.8.0.482-150000.3.117.1
* java-1_8_0-openjdk-headless-debuginfo-1.8.0.482-150000.3.117.1
* java-1_8_0-openjdk-debugsource-1.8.0.482-150000.3.117.1
* java-1_8_0-openjdk-demo-1.8.0.482-150000.3.117.1
* java-1_8_0-openjdk-1.8.0.482-150000.3.117.1
* java-1_8_0-openjdk-debuginfo-1.8.0.482-150000.3.117.1
* java-1_8_0-openjdk-devel-debuginfo-1.8.0.482-150000.3.117.1
* java-1_8_0-openjdk-accessibility-1.8.0.482-150000.3.117.1
* java-1_8_0-openjdk-devel-1.8.0.482-150000.3.117.1
* java-1_8_0-openjdk-headless-1.8.0.482-150000.3.117.1
* java-1_8_0-openjdk-src-1.8.0.482-150000.3.117.1
* openSUSE Leap 15.6 (noarch)
* java-1_8_0-openjdk-javadoc-1.8.0.482-150000.3.117.1
* Legacy Module 15-SP7 (aarch64 ppc64le s390x x86_64)
* java-1_8_0-openjdk-demo-debuginfo-1.8.0.482-150000.3.117.1
* java-1_8_0-openjdk-headless-debuginfo-1.8.0.482-150000.3.117.1
* java-1_8_0-openjdk-debugsource-1.8.0.482-150000.3.117.1
*...
Read the Full Advisory* bsc#1257034
* bsc#1257036
* bsc#1257037
* bsc#1257038
* jsc#PED-14507
## References:
* https://www.suse.com/security/cve/CVE-2026-21925.html
* https://www.suse.com/security/cve/CVE-2026-21932.html
* https://www.suse.com/security/cve/CVE-2026-21933.html
* https://www.suse.com/security/cve/CVE-2026-21945.html
* https://bugzilla.suse.com/show_bug.cgi?id=1257034
* https://bugzilla.suse.com/show_bug.cgi?id=1257036
* https://bugzilla.suse.com/show_bug.cgi?id=1257037
* https://bugzilla.suse.com/show_bug.cgi?id=1257038
* https://jira.suse.com/browse/PED-14507
Get the latest Linux and open source security news straight to your inbox.