Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

openSUSE 15.6 java-21-openjdk Vulnerabilities and DoS Risks Identified

opensuse
Calendar Grey May 6, 2026
Dist Opensuse Esm H88
An important security update for java-21-openjdk in openSUSE addresses eight vulnerabilities and improves safety.
An update that solves eight vulnerabilities and contains one feature can now be installed.

Description

This update for java-21-openjdk fixes the following issues:

Update to upstream tag jdk-21.0.11+10 (April 2026 CPU).

Security issues fixed:

* CVE-2026-22007: Security: unauthenticated attacker with logon to the

infrastructure where java executes can gain unauthorized read access to a

subset of accessible data (bsc#1262490).

* CVE-2026-22013: JGSS: unauthenticated attacker with network access via

multiple protocols can gain unauthorized access to critical data

(bsc#1262494).

* CVE-2026-22016: JAXP: unauthenticated attacker with network access via

multiple protocols can gain unauthorized to access critical data

(bsc#1262495).

* CVE-2026-22018: Libraries: unauthenticated attacker with network access via

multiple protocols can cause a partial denial of service (bsc#1262496).

* CVE-2026-22021: JSSE: unauthenticated attacker with network access via HTTPS

can cause a partial denial of service (bsc#1262497).

* CVE-2026-23865: freetype2: integer...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service important unauthenticated access OpenSUSE java-21-openjdk

Patch

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* SUSE Linux Enterprise Server 15 SP6 LTSS

zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-1705=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP6

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-1705=1

* openSUSE Leap 15.6

zypper in -t patch SUSE-2026-1705=1

* Basesystem Module 15-SP7

zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-1705=1

Package List

* SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64)

* java-21-openjdk-devel-21.0.11.0-150600.3.26.1

* java-21-openjdk-headless-21.0.11.0-150600.3.26.1

* java-21-openjdk-21.0.11.0-150600.3.26.1

* java-21-openjdk-debuginfo-21.0.11.0-150600.3.26.1

* java-21-openjdk-headless-debuginfo-21.0.11.0-150600.3.26.1

* java-21-openjdk-devel-debuginfo-21.0.11.0-150600.3.26.1

* java-21-openjdk-debugsource-21.0.11.0-150600.3.26.1

* java-21-openjdk-demo-21.0.11.0-150600.3.26.1

* SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64)

* java-21-openjdk-devel-21.0.11.0-150600.3.26.1

* java-21-openjdk-headless-21.0.11.0-150600.3.26.1

* java-21-openjdk-21.0.11.0-150600.3.26.1

* java-21-openjdk-debuginfo-21.0.11.0-150600.3.26.1

* java-21-openjdk-headless-debuginfo-21.0.11.0-150600.3.26.1

* java-21-openjdk-devel-debuginfo-21.0.11.0-150600.3.26.1

* java-21-openjdk-debugsource-21.0.11.0-150600.3.26.1

* java-21-openjdk-demo-21.0.11.0-150600.3.26.1

* openSUSE Leap 15.6 (aarch64 ppc64le...

Read the Full Advisory

References

* bsc#1259118

* bsc#1262490

* bsc#1262494

* bsc#1262495

* bsc#1262496

* bsc#1262497

* bsc#1262500

* bsc#1262501

* jsc#PED-15898

## References:

* https://www.suse.com/security/cve/CVE-2026-22007.html

* https://www.suse.com/security/cve/CVE-2026-22013.html

* https://www.suse.com/security/cve/CVE-2026-22016.html

* https://www.suse.com/security/cve/CVE-2026-22018.html

* https://www.suse.com/security/cve/CVE-2026-22021.html

* https://www.suse.com/security/cve/CVE-2026-23865.html

* https://www.suse.com/security/cve/CVE-2026-34268.html

* https://www.suse.com/security/cve/CVE-2026-34282.html

* https://bugzilla.suse.com/show_bug.cgi?id=1259118

* https://bugzilla.suse.com/show_bug.cgi?id=1262490

* https://bugzilla.suse.com/show_bug.cgi?id=1262494

* https://bugzilla.suse.com/show_bug.cgi?id=1262495

* https://bugzilla.suse.com/show_bug.cgi?id=1262496

* https://bugzilla.suse.com/show_bug.cgi?id=1262497

* https://bugzilla.suse.com/show_bug.cgi?id=1262500

* https://bugzilla.suse.com/show_bug.cgi?id=1262501

*...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:1705-1
Release Date: 2026-05-06T10:28:39Z
Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7

Topics%20covered

Topics Covered

security advisory denial of service important unauthenticated access OpenSUSE java-21-openjdk

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here